last executing test programs: 26m43.91225411s ago: executing program 32 (id=95): socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) 23m19.587570083s ago: executing program 33 (id=582): io_uring_setup(0x7d98, 0x0) mq_open(0x0, 0x800, 0x1be, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 23m13.436038297s ago: executing program 34 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 20m47.638687535s ago: executing program 6 (id=807): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000409000/0x8000)=nil, 0x8000, 0x1000009, 0x80012, r1, 0x80000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, 0x0, 0x4044000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x5}}, 0x20) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) listen(0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x67d41000) 20m40.98092996s ago: executing program 6 (id=815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x440, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9fd3182f3ef9ea028b761d8d18b12c0fbf64e01fdc16ab3f19ccea2d43d16c315afe1e0654083cd85bdecc1d0c08b65aa2b2b59ecb592696ae75b74bced0a71a55e78c444bc6465fc101e4d0d773fceabb706647834c3dac7f5053ba0fc5a1b7012444dace5c0a0be4300e09210200040122e20b0905e7022000050b08090580014001030607cc31074fbfe106909c0e2a9e3c8f70de1215b05b4e75f54d1fa06a425bb8c7fef594d2ffdf29b12ec1b945fa8258e29da5d13e03ec0c272e99523b2a0be430b629f7fa5bb1d4efc8455fff57efa9f30ce50458ae7f8b794ead78", @ANYBLOB="b2d2"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000580)={0x40b, 0x8, 0x0, 0x10001, 0x80, 0xdc, 0x0, 0x91, 0x0, 0xd, 0x100, 0x9, &(0x7f0000000400)=[0x101, 0x7, 0x90, 0x800, 0xb378], 0x5, &(0x7f0000000480)="c1093ed29f84d3e7e7ca2ab68c50f84623be42801c14371241f7ca8752dbaea1e5d8c4b573f28c836283a7127df20ab56d3b9fd2e72c22391f1f7d22c265077ddae19a95e292a4b0157e9ef499a8f8f69cfd29d34371d3ae2455a2f3ee521d7097b67b4e45452bebb3a1a1f6d5eef632ee79680d57b6a7bfb0f729da4785f9af5b320155e89091feb0429ac0c87a6931d2a0a9d9824d0572970ca30fa5898840c961e1df9d2119a931c84f66e0e37f85ef3ca61f89e14547a1a6a3d1f7175503570e94870e63e24cd98d2861896331edb989", 0xd2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x18, 0x0, 0x813, 0x70bd23, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048044}, 0x20008000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x453, 0x8, 0x70bd27, 0x25dfdbff, 'W', ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000080) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000001c0)={0x8, 0x2, 0x1, {0x2, @win={{0x401, 0x4, 0x5a81, 0x2}, 0x4, 0x100, 0x0, 0x21bd, 0x0, 0x3}}, 0x6}) 20m32.479058755s ago: executing program 6 (id=822): r0 = userfaultfd(0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$unix(0x1, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) 20m31.345414639s ago: executing program 6 (id=823): socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1010000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x48008, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e23, 0x5, 0x4e22, 0x5, 0xa, 0x80, 0x20, 0xc}, {0x1000, 0x70d09ffb, 0x8, 0x4, 0x7fffffffffffffff, 0x6, 0x7e9, 0x1}, {0x9, 0xff, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d2, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x1, 0x0, 0x1, 0x4, 0x2, 0x1}}, 0xe8) 20m29.504178608s ago: executing program 6 (id=824): set_mempolicy(0x3, 0x0, 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/245, 0xf5}], 0x1, &(0x7f0000002480)=""/4096, 0x1000}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x4}, 0x10) sendmsg$tipc(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e", 0x77}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01e", 0x9b}, {&(0x7f0000001100)}, {&(0x7f0000001200)="e86b23ea031a0d0335d120405fcbc0e8261e54e194b7ac7427e456a0c74eba6fd030e30723c080ff9d1d60aa58929f37061fea9199560e8c9734c24ad5a9849b6dc72795f44e9954bf08f35b5483099d17afa38d10de84516fb241942b5dc2443a0df8de2b82fba03bd1aaf1a8b54a56340e1c17ec2c1f797cb9e8534005fad205586e8df9c5e5846de0a63ea0935349fbe97099bcd39d198870265cb0e9d30982731773077edf0340e001654b40167f7172daaaf09261d1a91c77ab96126862c5af4dedd795869895c3f9770a945fc27c4579371167a0e2981f9e678f36a1f5c630359af6d41a45159b21d214d2b46132bc35cb5dc8a2324c3b447144e3ec5aa60a0791c33111d4c18e54f0f61d99dc68d109530c58fbb766a533071d8f12d4fa93efa0867620756cb13183b963714fc8f641ff59bcb98d36d132c30e4aacf1585a2aa076bf6ab258ee85734651c05ab4c24c32f18f2a884ff3562b367cb24c4e35587a42b7da49d69756a1f5e1e8eac669e0b968e8d88d863f7ea0a364926f0fb64d8f347c39f68ae32be6a3d875a7470dd209327d4060c75fba01cfb285aca1e8a1bddf0759ba9485bcbb585593374041cb2354fcee8290aad5ffc690a4c8e36ae09540b10f40310567b2c82ab527d403468524a4d42488e2a8f8a144ee47e00ffbfc09aa3138237780e160e63c97700d5c1a5c8e198e223d11bcc2e684c04c42d185977aa42accf31fb8d90162e07dbf4dcc6222e0e3d81493c390a61bf506ba14b044fc268e0a04756440280d62e249857eea9234cbd65d7e08ad58bcccd4244c2ebd7c781f4661fc448e04db6a9150d48022ce3aebddba51c23ae242a9c6d8ad4f4dff925f5a7033b5f6f765d96aa316ec31ef2c022e2c381defb051b81aa9710379e8e775abe6e9d632439c998ffa48e7e54208d12a4c2e018f2873e26f6ea2c758cbd10069baba0f85d8509c5c4475b29c6358c96dd61ae8181a99cd453820f6a6509c29543b9c7db410e6d9d60082ccc2602b8cf91a59a8b8c2fcba7f43913f4b0a2842042f20488cf58de93150a9b7d0a7c4b9a84ad330ca34efbe0a878064983c915a6f24a35dfdd866f53326ecc117f84b4e46449eb5cb4164288fcbad2562e8ba76a6d1", 0x32a}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000000000002000000048000000000000010000000000000000000000007000000110000000000000000000000010000004000000000000000e3114cda11dd1a9c64fb48d3f8529c1381f5da169f246ec99edee5e3a99c5241969248ea8a11f16c5548421fb2343d41b9afa87da2e8c58f4bb4898994ad9816be9f6d78a2cf030b161aab82d86224e0f4a08e"], 0x40}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) 20m27.736455063s ago: executing program 6 (id=825): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700202142000000"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000240)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) 20m27.136021981s ago: executing program 35 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 20m12.109390334s ago: executing program 36 (id=825): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700202142000000"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000240)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) 17m40.890928508s ago: executing program 3 (id=1200): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 17m39.45974202s ago: executing program 3 (id=1203): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 17m38.417651992s ago: executing program 3 (id=1209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040), 0x3e) 17m37.251259993s ago: executing program 3 (id=1214): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e72cbd7000fddbd52303"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 17m34.454072566s ago: executing program 3 (id=1219): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 17m33.451587021s ago: executing program 3 (id=1225): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20004000) 17m17.996137556s ago: executing program 37 (id=1225): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20004000) 16m59.631312049s ago: executing program 4 (id=1291): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x97e9, &(0x7f000001c700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) write$tun(r0, 0x0, 0x3e) 16m52.652442536s ago: executing program 4 (id=1301): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 16m50.459251016s ago: executing program 4 (id=1306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 16m50.038318615s ago: executing program 4 (id=1308): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffda) write(r3, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800) 16m49.310839709s ago: executing program 4 (id=1310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x440, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b2d2"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000580)={0x40b, 0x8, 0x0, 0x10001, 0x80, 0xdc, 0x0, 0x91, 0x0, 0xd, 0x100, 0x9, &(0x7f0000000400)=[0x101, 0x7, 0x90, 0x800, 0xb378], 0x5, &(0x7f0000000480)="c1093ed29f84d3e7e7ca2ab68c50f84623be42801c14371241f7ca8752dbaea1e5d8c4b573f28c836283a7127df20ab56d3b9fd2e72c22391f1f7d22c265077ddae19a95e292a4b0157e9ef499a8f8f69cfd29d34371d3ae2455a2f3ee521d7097b67b4e45452bebb3a1a1f6d5eef632ee79680d57b6a7bfb0f729da4785f9af5b320155e89091feb0429ac0c87a6931d2a0a9d9824d0572970ca30fa5898840c961e1df9d2119a931c84f66e0e37f85ef3ca61f89e14547a1a6a3d1f7175503570e94870e63e24cd98d2861896331edb989", 0xd2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x18, 0x0, 0x813, 0x70bd23, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048044}, 0x20008000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x453, 0x8, 0x70bd27, 0x25dfdbff, 'W', ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000080) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000001c0)={0x8, 0x2, 0x1, {0x2, @win={{0x401, 0x4, 0x5a81, 0x2}, 0x4, 0x100, 0x0, 0x21bd, 0x0, 0x3}}, 0x6}) 16m46.884264564s ago: executing program 4 (id=1316): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) 16m31.53812897s ago: executing program 38 (id=1316): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) 16m5.140437327s ago: executing program 0 (id=1387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0xfffffffe, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x1, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x3}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x2, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x10001, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0xfffff800, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x100, 0x2, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x5, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x1, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x201, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x5, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x6, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x8, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x4, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x8, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0xc00, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1b, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x787, 0x2, 0x9, 0x3fe, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x0, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 15m59.703285433s ago: executing program 0 (id=1395): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15m56.856058945s ago: executing program 0 (id=1399): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 15m56.180060349s ago: executing program 0 (id=1400): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f0000000300)={[{@grpquota}, {@init_itable}, {@init_itable_val}]}, 0x1, 0x485, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$overlay(0x0, 0x0, 0x0, 0x3a002a, &(0x7f0000000280)) 15m52.850396172s ago: executing program 0 (id=1407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = userfaultfd(0x801) openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x4200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x3, 0x72, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15m50.58408008s ago: executing program 0 (id=1412): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@barrier}, {@nobarrier}, {@grpjquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 15m49.567866913s ago: executing program 39 (id=1412): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@barrier}, {@nobarrier}, {@grpjquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 17.164447602s ago: executing program 9 (id=3612): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000fc0100"/398], 0x190) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x0) exit(0x100000000000035) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) wait4(0x0, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) 15.172416396s ago: executing program 9 (id=3615): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 12.416334554s ago: executing program 5 (id=3623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f0000002600)="c3c1", 0x2, 0x80, 0x0, 0x0) 9.765034329s ago: executing program 5 (id=3627): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000e107000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9.381122716s ago: executing program 8 (id=3488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40), 0x0, 0x0) 9.36255603s ago: executing program 7 (id=3628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mq_notify(r3, &(0x7f0000000000)={0x0, 0x3f, 0x2, @tid=r4}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9a}, @jmp={0x5, 0x0, 0x9, 0x0, 0xc}], &(0x7f0000000280)='GPL\x00'}, 0x94) r5 = io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) unshare(0x6020400) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000180)="3751f02b82f73c144ca680b690edfe4e706fa5d03ecfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd1b5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bac97ea92b5977a41d70ebcc4735ce6c012a5fe5bb7fef98e864216699a25d70e2610b2d7f5bc653a65703e294b7894b34a794bc14aaedfdc6978c0c97bcb02de6926", 0x90}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.179863856s ago: executing program 5 (id=3629): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.187271491s ago: executing program 8 (id=3630): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) landlock_restrict_self(0xffffffffffffffff, 0xc) 7.935177378s ago: executing program 1 (id=3631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004780)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 7.296135377s ago: executing program 5 (id=3632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}, @const={0x7, 0x0, 0x0, 0xa, 0x4}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x1e, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x6f, 0x0, 0xfffffffe, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x9a69, 0x0, 0x40284, r1, 0xfffff001, '\x00', r2, r3, 0x4, 0x1, 0x2, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10001, 0x1, 0x0, 0x6, 0x0, 0xd9b4, "5debca561a5fbf61048955f6f876b2ff", 0x2, 0x0, 0x0, 0x8}) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f0000000000)=""/28, 0x3f, 0x1c, 0x1}, 0x28) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x3, &(0x7f00000003c0)=[{0x1f, '\x00', @st={0x4, [{0x3, @uvalue=0x1000080000001}, {0x1, @uvalue=0x698}, {0x0, @uvalue=0xee6}, {0x3, @svalue=0x10}]}, 0x4}, {0x32, '\x00', @buffer={"55eb476b13d85ef77fe704c54bbcd80c02c838376100", 0x20}, 0x4}, {0x5, '\x00', @data=0x3, 0x3}]}) sendmmsg(r6, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)={0x34, r7, 0x1, 0x70bd29, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 7.244760263s ago: executing program 1 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 7.059523706s ago: executing program 8 (id=3634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x9}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x2, 0x8000, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000c00)="4307ed2e", 0x4}], 0x1}, 0x4) 6.95322747s ago: executing program 7 (id=3636): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.744560434s ago: executing program 1 (id=3637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)=ANY=[]) mkdirat(r4, &(0x7f0000000300)='./file0\x00', 0xd0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 5.121890493s ago: executing program 8 (id=3638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.932001829s ago: executing program 5 (id=3639): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = dup(r1) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000280)={{0x1e390593, 0x5}, {0x1000eb4, 0x7}, 0x10000004, 0x80000005}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r3, &(0x7f0000000180)='./mnt\x00', r3, &(0x7f00000002c0)='./mnt\x00', 0x110) r4 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0xc025}) fcntl$notify(r4, 0x402, 0x8000003d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x26) fcntl$notify(r5, 0x402, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) poll(&(0x7f0000000080)=[{r6, 0x20}], 0x1, 0x7f) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)) r7 = fspick(r2, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='/dev/audio\x00', &(0x7f0000000080)='\'\x00', 0x0) 4.742863744s ago: executing program 2 (id=3640): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r1, 0x111, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x6b7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.696886263s ago: executing program 7 (id=3641): memfd_create(0x0, 0xc) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 4.582172528s ago: executing program 8 (id=3642): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 3.719206514s ago: executing program 1 (id=3643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="090000000200000000000000000000000000000000000000000000003c3ee46e2e3fb5"], 0x50) 3.688970083s ago: executing program 7 (id=3644): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.673228466s ago: executing program 9 (id=3645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004780)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 3.620342643s ago: executing program 2 (id=3646): gettid() r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x5, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) write(r1, &(0x7f00000000c0)="af05", 0x2) 3.369266227s ago: executing program 2 (id=3647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.25708743s ago: executing program 5 (id=3648): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000906010800000000000000000200000408000940000000090900020073797a66e21515010007"], 0x34}}, 0x40010) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x0) 3.16824963s ago: executing program 1 (id=3649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 3.167969053s ago: executing program 9 (id=3650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x9}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x2, 0x8000, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000c00)="4307ed2e", 0x4}], 0x1}, 0x4) 3.134412678s ago: executing program 7 (id=3651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}, @const={0x7, 0x0, 0x0, 0xa, 0x4}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x1e, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x6f, 0x0, 0xfffffffe, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x9a69, 0x0, 0x40284, r1, 0xfffff001, '\x00', r2, r3, 0x4, 0x1, 0x2, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10001, 0x1, 0x0, 0x6, 0x0, 0xd9b4, "5debca561a5fbf61048955f6f876b2ff", 0x2, 0x0, 0x0, 0x8}) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f0000000000)=""/28, 0x3f, 0x1c, 0x1}, 0x28) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x3, &(0x7f00000003c0)=[{0x1f, '\x00', @st={0x4, [{0x3, @uvalue=0x1000080000001}, {0x1, @uvalue=0x698}, {0x0, @uvalue=0xee6}, {0x3, @svalue=0x10}]}, 0x4}, {0x32, '\x00', @buffer={"55eb476b13d85ef77fe704c54bbcd80c02c838376100", 0x20}, 0x4}, {0x5, '\x00', @data=0x3, 0x3}]}) sendmmsg(r6, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)={0x34, r7, 0x1, 0x70bd29, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.729257301s ago: executing program 1 (id=3652): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x0, 0x9, 0x1020, r0, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xa}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pread64(r2, 0x0, 0x0, 0x10000) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[], 0x0) 1.610381051s ago: executing program 2 (id=3653): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.538261143s ago: executing program 9 (id=3654): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.355160615s ago: executing program 2 (id=3655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)=ANY=[]) mkdirat(r4, &(0x7f0000000300)='./file0\x00', 0xd0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 1.353098238s ago: executing program 7 (id=3656): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa0008ff"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) dup2(r1, 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f0000008b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000000500)={0xb4, 0x200, 0x3, 0x7}) timer_create(0x3, 0x0, &(0x7f0000044000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 887.853077ms ago: executing program 9 (id=3657): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 266.575076ms ago: executing program 8 (id=3658): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 0s ago: executing program 2 (id=3659): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40480009}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000080) r3 = socket$kcm(0xa, 0x1, 0x106) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, 0x0, &(0x7f0000000300)='udf\x00', 0x200480, 0x0) fadvise64(0xffffffffffffffff, 0x1, 0xc, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) kernel console output (not intermixed with test programs): eed/duplex [ 1421.430880][T17637] overlayfs: failed to resolve './file1/file0': -2 [ 1421.507619][T15743] usb 6-1: device not accepting address 12, error -71 [ 1422.258349][T17632] macsec1: entered promiscuous mode [ 1422.300720][T17632] dummy0: entered promiscuous mode [ 1422.362317][T17632] macsec1: entered allmulticast mode [ 1422.375208][T17632] dummy0: entered allmulticast mode [ 1422.386630][T17632] dummy0: left allmulticast mode [ 1422.434697][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.446921][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.451722][T17479] team0: Port device team_slave_0 added [ 1422.462200][T17479] team0: Port device team_slave_1 added [ 1422.486273][ T6381] bond1: (slave macvlan2): failed to get link speed/duplex [ 1422.495756][T10100] dummy0: left promiscuous mode [ 1422.653056][T17646] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.2495'. [ 1422.803525][T12267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.941598][T17479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.948587][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.974509][T17479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.987408][T17479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.994364][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.280982][T17479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.613463][ T31] audit: type=1107 audit(1777535303.540:349): pid=17661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1424.627740][T12267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.890109][T17479] hsr_slave_0: entered promiscuous mode [ 1424.910195][T17479] hsr_slave_1: entered promiscuous mode [ 1424.917267][T17479] debugfs: 'hsr0' already exists in 'hsr' [ 1424.933325][T17479] Cannot create hsr debugfs directory [ 1425.694713][T17687] overlayfs: failed to resolve './file1/file0': -2 [ 1426.865050][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1426.953451][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1427.051053][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.075509][ T9] usb 6-1: config 0 has no interfaces? [ 1427.109574][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1427.141932][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.173111][ T9] usb 6-1: Product: syz [ 1427.178529][ T9] usb 6-1: Manufacturer: syz [ 1427.189137][ T9] usb 6-1: SerialNumber: syz [ 1427.219208][ T9] usb 6-1: config 0 descriptor?? [ 1428.472653][T12267] bridge_slave_1: left allmulticast mode [ 1428.478375][T12267] bridge_slave_1: left promiscuous mode [ 1428.484232][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.494646][T12267] bridge_slave_0: left allmulticast mode [ 1428.500317][T12267] bridge_slave_0: left promiscuous mode [ 1428.527111][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.701683][ T31] audit: type=1326 audit(1777535307.630:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1428.765655][ T31] audit: type=1326 audit(1777535307.630:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1428.889297][ T31] audit: type=1326 audit(1777535307.630:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1429.098313][ T31] audit: type=1326 audit(1777535307.630:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1429.124461][ T31] audit: type=1326 audit(1777535307.650:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1429.152648][ T31] audit: type=1326 audit(1777535307.650:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1429.960046][ T31] audit: type=1326 audit(1777535307.650:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1429.998983][T15743] usb 6-1: USB disconnect, device number 14 [ 1430.040497][ T31] audit: type=1326 audit(1777535307.660:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1430.091169][ T31] audit: type=1326 audit(1777535307.660:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1430.118336][ T31] audit: type=1326 audit(1777535307.660:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd68f39cdd9 code=0x7ffc0000 [ 1430.333067][T17745] loop5: detected capacity change from 0 to 256 [ 1430.376154][T17745] exfat: Deprecated parameter 'utf8' [ 1430.407347][T17745] exFAT-fs (loop5): bogus number of FAT structure [ 1430.442602][T17745] exFAT-fs (loop5): failed to read boot sector [ 1430.459232][T17745] exFAT-fs (loop5): failed to recognize exfat type [ 1430.534120][T17752] overlayfs: failed to resolve './file1/file0': -2 [ 1431.650282][T12267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.870816][T17745] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1432.769185][T12267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.819868][T12267] bond0 (unregistering): Released all slaves [ 1432.921482][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1433.496760][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1433.627774][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1433.902574][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1434.974491][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1435.575359][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1436.387318][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 1436.387342][ T31] audit: type=1107 audit(1777535315.300:396): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1436.428516][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1436.616974][T12267] hsr_slave_0: left promiscuous mode [ 1436.720494][T12267] hsr_slave_1: left promiscuous mode [ 1436.726818][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.734234][T12267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.760440][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.767866][T12267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.820910][T12267] veth1_macvtap: left promiscuous mode [ 1436.826449][T12267] veth0_macvtap: left promiscuous mode [ 1436.838029][T12267] veth1_vlan: left promiscuous mode [ 1436.843326][T12267] veth0_vlan: left promiscuous mode [ 1439.975779][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2539'. [ 1440.129427][T17837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'. [ 1440.236132][T12267] team0 (unregistering): Port device team_slave_1 removed [ 1440.292251][T12267] team0 (unregistering): Port device team_slave_0 removed [ 1440.884032][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1441.366847][T17479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1441.405840][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1441.475280][T17479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1441.846463][ T31] audit: type=1107 audit(1777535320.780:397): pid=17867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1442.150240][T14503] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1442.209693][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.258866][ T6381] bond1: (slave macvlan2): failed to get link speed/duplex [ 1442.271690][T17479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1442.299885][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.368836][T17479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1442.400356][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1442.448911][ T6381] bond1: (slave macvlan2): failed to get link speed/duplex [ 1442.615727][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1442.771046][T17888] netlink: 'syz.2.2549': attribute type 4 has an invalid length. [ 1442.985050][T17479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.012056][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1443.217957][T17479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.544453][T12265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.551667][T12265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.668284][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.675596][T12265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.726299][T14503] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.727246][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1443.736485][T14503] usb 6-1: config 0 has no interfaces? [ 1443.916747][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1444.161398][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1444.245315][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1444.304245][T17915] macsec1: entered promiscuous mode [ 1444.309504][T17915] dummy0: entered promiscuous mode [ 1444.322373][T17915] macsec1: entered allmulticast mode [ 1444.363466][T17915] dummy0: entered allmulticast mode [ 1444.440464][T17915] dummy0: left allmulticast mode [ 1444.491806][T10073] dummy0: left promiscuous mode [ 1444.529483][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1444.644139][T14503] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1444.655075][T14503] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.678169][T14503] usb 6-1: Product: syz [ 1444.682392][T14503] usb 6-1: Manufacturer: syz [ 1444.687010][T14503] usb 6-1: SerialNumber: syz [ 1444.749067][ T6381] bond1: (slave macvlan2): failed to get link speed/duplex [ 1444.810555][T14503] usb 6-1: config 0 descriptor?? [ 1444.868498][T14503] usb 6-1: can't set config #0, error -71 [ 1444.876720][T14503] usb 6-1: USB disconnect, device number 15 [ 1446.212742][T12274] net_ratelimit: 4 callbacks suppressed [ 1446.212773][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1446.501158][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1446.672278][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1446.907388][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1447.519984][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1447.542370][ T31] audit: type=1107 audit(1777535326.470:398): pid=17951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1447.565449][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1447.696573][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1447.966469][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1448.034011][T17969] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2568'. [ 1448.091252][T17479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.188614][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1448.364270][T17479] veth0_vlan: entered promiscuous mode [ 1448.421706][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1448.456258][T17479] veth1_vlan: entered promiscuous mode [ 1448.595174][T17479] veth0_macvtap: entered promiscuous mode [ 1448.668013][T17479] veth1_macvtap: entered promiscuous mode [ 1448.759644][T17479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.771972][T17479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.856618][T10084] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1448.869881][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1449.385975][ T6381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.396598][ T6381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.975472][ T6381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.324612][ T6381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.384444][T10084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.394676][T10084] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1450.620526][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.628399][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.850153][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.858068][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.280802][ T6381] net_ratelimit: 4 callbacks suppressed [ 1451.280831][ T6381] bond1: (slave macvlan2): failed to get link speed/duplex [ 1451.396213][T10084] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1451.405353][T10084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.413488][T10084] usb 6-1: Product: syz [ 1451.417776][T10084] usb 6-1: Manufacturer: syz [ 1451.422519][T10084] usb 6-1: SerialNumber: syz [ 1451.437873][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1451.472840][T10084] usb 6-1: config 0 descriptor?? [ 1451.637094][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1451.666930][T10084] usb 6-1: can't set config #0, error -71 [ 1451.691717][T10084] usb 6-1: USB disconnect, device number 16 [ 1451.795828][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1451.910745][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 1452.023094][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1452.198617][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1452.349745][T18038] syzkaller0: entered promiscuous mode [ 1452.359521][T18038] syzkaller0: entered allmulticast mode [ 1452.511821][ T31] audit: type=1107 audit(1777535331.440:399): pid=18044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1452.712986][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.724654][T18049] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1452.739741][T18047] bridge_slave_0 (unregistering): left allmulticast mode [ 1452.746807][T18047] bridge_slave_0 (unregistering): left promiscuous mode [ 1452.803905][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.008300][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1453.289413][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1454.480213][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1454.788345][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1456.564530][T18076] loop5: detected capacity change from 0 to 256 [ 1456.571919][T18076] exfat: Deprecated parameter 'utf8' [ 1456.595478][T18067] loop1: detected capacity change from 0 to 131072 [ 1456.814281][T18076] exFAT-fs (loop5): bogus number of FAT structure [ 1456.820751][T18076] exFAT-fs (loop5): failed to read boot sector [ 1456.902461][T18067] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1456.932840][T18076] exFAT-fs (loop5): failed to recognize exfat type [ 1456.953080][T18067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1457.114676][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2598'. [ 1457.513702][T12261] net_ratelimit: 1 callbacks suppressed [ 1457.513733][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1457.548439][T18088] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1457.615476][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1457.726099][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1457.994597][ T31] audit: type=1804 audit(1777535336.760:400): pid=18091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2593" name="/newroot/4/file1/bus" dev="loop1" ino=10 res=1 errno=0 [ 1457.994810][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1457.995479][T18098] F2FS-fs (loop1): access invalid blkaddr:0 [ 1457.995548][T18098] CPU: 1 UID: 0 PID: 18098 Comm: syz.1.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.995601][T18098] Tainted: [L]=SOFTLOCKUP [ 1457.995614][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1457.995637][T18098] Call Trace: [ 1457.995650][T18098] [ 1457.995665][T18098] dump_stack_lvl+0x100/0x190 [ 1457.995711][T18098] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 1457.995788][T18098] ? sanity_check_extent_cache+0x23a/0x6e0 [ 1457.995830][T18098] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 1457.995880][T18098] sanity_check_extent_cache+0x23a/0x6e0 [ 1457.995929][T18098] f2fs_iget+0x2545/0x6930 [ 1457.996019][T18098] f2fs_lookup+0x516/0xad0 [ 1457.996059][T18098] ? __pfx_f2fs_lookup+0x10/0x10 [ 1457.996098][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.996145][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.996200][T18098] ? security_inode_create+0xc4/0x280 [ 1457.996249][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.996296][T18098] ? may_o_create+0x46/0x3a0 [ 1457.996352][T18098] lookup_open.isra.0+0x631/0x11b0 [ 1457.996419][T18098] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1457.996484][T18098] ? __pfx___might_resched+0x10/0x10 [ 1457.996537][T18098] ? mnt_get_write_access+0x52/0x2f0 [ 1457.996601][T18098] ? __pfx_down_write+0x10/0x10 [ 1457.996655][T18098] ? mnt_get_write_access+0x1e9/0x2f0 [ 1457.996716][T18098] path_openat+0x2291/0x31a0 [ 1457.996769][T18098] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 1457.996815][T18098] ? __pfx_path_openat+0x10/0x10 [ 1457.996871][T18098] do_file_open+0x20e/0x430 [ 1457.996913][T18098] ? __pfx_do_file_open+0x10/0x10 [ 1457.996985][T18098] ? _raw_spin_unlock+0x28/0x50 [ 1457.997024][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.997071][T18098] ? alloc_fd+0x476/0x790 [ 1457.997122][T18098] do_sys_openat2+0x10d/0x1e0 [ 1457.997169][T18098] ? __pfx_do_sys_openat2+0x10/0x10 [ 1457.997216][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.997277][T18098] __x64_sys_open+0xfe/0x1d0 [ 1457.997322][T18098] ? __pfx___x64_sys_open+0x10/0x10 [ 1457.997375][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1457.997421][T18098] ? rcu_is_watching+0x12/0xc0 [ 1457.997482][T18098] do_syscall_64+0x10b/0xf80 [ 1457.997529][T18098] ? irqentry_exit+0x117/0x790 [ 1457.997581][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.997622][T18098] RIP: 0033:0x7f9fbb99cdd9 [ 1457.997652][T18098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.997690][T18098] RSP: 002b:00007f9fbc7d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1457.997730][T18098] RAX: ffffffffffffffda RBX: 00007f9fbbc16180 RCX: 00007f9fbb99cdd9 [ 1457.997756][T18098] RDX: 0000000000000002 RSI: 0000000000060840 RDI: 00002000009e1000 [ 1457.997781][T18098] RBP: 00007f9fbba32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1457.997805][T18098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1457.997830][T18098] R13: 00007f9fbbc16218 R14: 00007f9fbbc16180 R15: 00007ffed44ca208 [ 1457.997881][T18098] [ 1457.997925][T18098] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 1458.013624][T18098] F2FS-fs (loop1): access invalid blkaddr:0 [ 1458.013672][T18098] CPU: 1 UID: 0 PID: 18098 Comm: syz.1.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.013737][T18098] Tainted: [L]=SOFTLOCKUP [ 1458.013751][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.013774][T18098] Call Trace: [ 1458.013787][T18098] [ 1458.013802][T18098] dump_stack_lvl+0x100/0x190 [ 1458.013848][T18098] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 1458.013920][T18098] ? sanity_check_extent_cache+0x23a/0x6e0 [ 1458.013962][T18098] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 1458.014011][T18098] sanity_check_extent_cache+0x23a/0x6e0 [ 1458.014061][T18098] f2fs_iget+0x2545/0x6930 [ 1458.014151][T18098] f2fs_lookup+0x516/0xad0 [ 1458.014191][T18098] ? __pfx_f2fs_lookup+0x10/0x10 [ 1458.014230][T18098] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1458.014299][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.014347][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.014393][T18098] ? lockdep_init_map_type+0x5c/0x250 [ 1458.014443][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.014492][T18098] __lookup_slow+0x251/0x460 [ 1458.014544][T18098] ? __pfx___lookup_slow+0x10/0x10 [ 1458.014604][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.014676][T18098] lookup_slow+0x50/0x70 [ 1458.014722][T18098] path_lookupat+0x5e8/0xc40 [ 1458.014791][T18098] filename_lookup+0x202/0x590 [ 1458.014853][T18098] ? __pfx_filename_lookup+0x10/0x10 [ 1458.014943][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.014990][T18098] ? strncpy_from_user+0x19d/0x2d0 [ 1458.015059][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.015115][T18098] user_path_at+0x3c/0x60 [ 1458.015176][T18098] __x64_sys_mount+0x1fb/0x310 [ 1458.015225][T18098] ? __pfx___x64_sys_mount+0x10/0x10 [ 1458.015274][T18098] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.015320][T18098] ? rcu_is_watching+0x12/0xc0 [ 1458.015383][T18098] do_syscall_64+0x10b/0xf80 [ 1458.015432][T18098] ? irqentry_exit+0x117/0x790 [ 1458.015484][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.015524][T18098] RIP: 0033:0x7f9fbb99cdd9 [ 1458.015554][T18098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.015592][T18098] RSP: 002b:00007f9fbc7d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1458.015627][T18098] RAX: ffffffffffffffda RBX: 00007f9fbbc16180 RCX: 00007f9fbb99cdd9 [ 1458.015653][T18098] RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1458.015677][T18098] RBP: 00007f9fbba32d69 R08: 0000200000000080 R09: 0000000000000000 [ 1458.015702][T18098] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.015732][T18098] R13: 00007f9fbbc16218 R14: 00007f9fbbc16180 R15: 00007ffed44ca208 [ 1458.015783][T18098] [ 1458.015799][T18098] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 1458.018080][T18091] F2FS-fs (loop1): access invalid blkaddr:0 [ 1458.018122][T18091] CPU: 1 UID: 0 PID: 18091 Comm: syz.1.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.018175][T18091] Tainted: [L]=SOFTLOCKUP [ 1458.018188][T18091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.018211][T18091] Call Trace: [ 1458.018223][T18091] [ 1458.018237][T18091] dump_stack_lvl+0x100/0x190 [ 1458.018282][T18091] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 1458.018351][T18091] ? sanity_check_extent_cache+0x23a/0x6e0 [ 1458.018394][T18091] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 1458.018442][T18091] sanity_check_extent_cache+0x23a/0x6e0 [ 1458.018491][T18091] f2fs_iget+0x2545/0x6930 [ 1458.018582][T18091] f2fs_lookup+0x516/0xad0 [ 1458.018622][T18091] ? __pfx_f2fs_lookup+0x10/0x10 [ 1458.018665][T18091] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1458.018737][T18091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.018784][T18091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.018831][T18091] ? lockdep_init_map_type+0x5c/0x250 [ 1458.018879][T18091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.018932][T18091] __lookup_slow+0x251/0x460 [ 1458.018980][T18091] ? __pfx___lookup_slow+0x10/0x10 [ 1458.019041][T18091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.019112][T18091] lookup_slow+0x50/0x70 [ 1458.019161][T18091] path_lookupat+0x5e8/0xc40 [ 1458.019226][T18091] filename_lookup+0x202/0x590 [ 1458.019293][T18091] ? __pfx_filename_lookup+0x10/0x10 [ 1458.019388][T18091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.019434][T18091] ? strncpy_from_user+0x19d/0x2d0 [ 1458.019501][T18091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1458.019556][T18091] do_fchmodat+0xea/0x1b0 [ 1458.019595][T18091] ? __pfx_do_fchmodat+0x10/0x10 [ 1458.019647][T18091] __x64_sys_chmod+0x5e/0x80 [ 1458.019686][T18091] do_syscall_64+0x10b/0xf80 [ 1458.019739][T18091] ? irqentry_exit+0x117/0x790 [ 1458.019792][T18091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.019831][T18091] RIP: 0033:0x7f9fbb99cdd9 [ 1458.019860][T18091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.019897][T18091] RSP: 002b:00007f9fbc7f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1458.019932][T18091] RAX: ffffffffffffffda RBX: 00007f9fbbc16090 RCX: 00007f9fbb99cdd9 [ 1458.019957][T18091] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000200000000000 [ 1458.019982][T18091] RBP: 00007f9fbba32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1458.020007][T18091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.020031][T18091] R13: 00007f9fbbc16128 R14: 00007f9fbbc16090 R15: 00007ffed44ca208 [ 1458.020082][T18091] [ 1458.020098][T18091] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 1458.167579][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1458.474327][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1458.645137][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1458.716423][T10100] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1458.979783][T18113] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2605'. [ 1459.638513][ T31] audit: type=1107 audit(1777535338.570:401): pid=18108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1459.676376][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1459.839246][T10100] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1459.849418][T10100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.859915][T10100] usb 2-1: Product: syz [ 1459.864125][T10100] usb 2-1: Manufacturer: syz [ 1459.893080][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1459.949398][T10100] usb 2-1: can't set config #1, error -71 [ 1459.967303][T10100] usb 2-1: USB disconnect, device number 24 [ 1460.096465][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1462.646605][ T48] net_ratelimit: 7 callbacks suppressed [ 1462.646634][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1463.048845][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1463.220720][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1463.451939][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1463.791245][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1464.025786][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1464.254492][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1464.389977][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1464.673181][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1464.966857][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1466.260424][ T31] audit: type=1107 audit(1777535345.190:402): pid=18176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1467.755231][T12274] net_ratelimit: 8 callbacks suppressed [ 1467.755262][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1468.028788][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1468.254801][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1469.311031][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1469.749872][T10073] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1470.253397][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1470.405398][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1470.659020][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1470.785323][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1470.929940][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1471.055142][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1471.924094][T10073] usb 6-1: Using ep0 maxpacket: 8 [ 1472.402005][T10073] usb 6-1: device descriptor read/all, error -71 [ 1472.822290][ T31] audit: type=1107 audit(1777535351.750:403): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1472.836305][ T48] net_ratelimit: 9 callbacks suppressed [ 1472.836335][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1473.141991][ T6381] bond1: (slave macvlan2): failed to get link speed/duplex [ 1473.913204][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1474.283383][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1474.425577][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1475.353612][T10661] Bluetooth: hci1: command 0x2016 tx timeout [ 1475.746312][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1476.093422][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1476.114574][T18297] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2660'. [ 1476.259799][T18297] macsec1: entered promiscuous mode [ 1476.265169][T18297] dummy0: entered promiscuous mode [ 1476.932190][T18297] macsec1: entered allmulticast mode [ 1476.937555][T18297] dummy0: entered allmulticast mode [ 1477.007775][T18308] loop5: detected capacity change from 0 to 1024 [ 1477.015365][T18297] dummy0: left allmulticast mode [ 1477.023302][T18308] EXT4-fs: inline encryption not supported [ 1477.099552][T18308] EXT4-fs: Ignoring removed mblk_io_submit option [ 1477.223772][T18308] EXT4-fs (loop5): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1477.292271][T10073] dummy0: left promiscuous mode [ 1477.317615][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1477.372870][T18308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1477.385405][ T5642] Bluetooth: hci1: command 0x2016 tx timeout [ 1477.426208][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1477.980917][T17030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.094523][T18329] fuse: fd is not a fuse device [ 1478.179127][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1478.370756][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1478.470292][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.588397][T18338] bridge_slave_0 (unregistering): left allmulticast mode [ 1478.622659][T18338] bridge_slave_0 (unregistering): left promiscuous mode [ 1478.667787][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.466770][ T31] audit: type=1107 audit(1777535359.390:404): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1480.526519][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1480.649877][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1481.615581][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1481.786312][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1482.742218][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1483.042465][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1483.164612][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2680'. [ 1484.208731][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.217136][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.933117][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1485.213124][T18372] fuse: Unknown parameter 'f' [ 1487.135660][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1487.377215][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1487.553727][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1487.909752][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1488.380291][T18376] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2685'. [ 1488.422313][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2686'. [ 1488.664399][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1488.872936][T18394] loop5: detected capacity change from 0 to 256 [ 1488.881061][T18394] exfat: Deprecated parameter 'utf8' [ 1488.909358][T18394] exFAT-fs (loop5): bogus number of FAT structure [ 1489.158698][T18394] exFAT-fs (loop5): failed to read boot sector [ 1489.206042][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1489.234799][T18402] fuse: fd is not a fuse device [ 1489.311980][T18394] exFAT-fs (loop5): failed to recognize exfat type [ 1489.490909][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1489.848051][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1490.005068][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1490.119312][ T31] audit: type=1107 audit(1777535369.050:405): pid=18412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1490.903855][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1490.922047][ T31] audit: type=1326 audit(1777535369.150:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1490.964849][ T31] audit: type=1326 audit(1777535369.150:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.040609][ T31] audit: type=1326 audit(1777535369.150:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.082458][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1491.251512][ T31] audit: type=1326 audit(1777535369.150:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.278366][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1491.310297][ T31] audit: type=1326 audit(1777535369.150:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.350642][ T31] audit: type=1326 audit(1777535369.160:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.415733][ T31] audit: type=1326 audit(1777535369.160:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.515761][ T31] audit: type=1326 audit(1777535369.160:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.603164][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1491.671541][ T31] audit: type=1326 audit(1777535369.160:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.1.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9fbb99cdd9 code=0x7ffc0000 [ 1491.824099][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1492.031711][T18428] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1492.096971][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1492.262072][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1493.468521][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1493.722312][T18448] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2702'. [ 1493.775157][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1494.501200][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2707'. [ 1495.107019][ T5826] net_ratelimit: 8 callbacks suppressed [ 1495.107050][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1495.386236][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1495.460755][T18472] loop5: detected capacity change from 0 to 256 [ 1495.467978][T18472] exfat: Deprecated parameter 'utf8' [ 1495.508366][T18472] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 1495.635826][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1495.801083][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1495.920986][T18484] fuse: fd is not a fuse device [ 1495.936725][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1496.055201][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1496.267942][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1496.377052][ T5642] Bluetooth: hci1: command 0x2016 tx timeout [ 1496.498492][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1496.746814][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1496.971660][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1497.020175][T18495] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2717'. [ 1499.444757][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2725'. [ 1499.462467][T18522] macsec1: entered promiscuous mode [ 1499.471254][T18522] dummy0: entered promiscuous mode [ 1499.477493][T18522] macsec1: entered allmulticast mode [ 1499.483038][T18522] dummy0: entered allmulticast mode [ 1499.994744][T18522] dummy0: left allmulticast mode [ 1500.502377][ T48] net_ratelimit: 11 callbacks suppressed [ 1500.502401][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1500.682594][ T9] dummy0: left promiscuous mode [ 1500.824786][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1501.046864][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1501.164069][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1501.286251][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1501.442388][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1501.442414][ T31] audit: type=1107 audit(1777535380.370:418): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1501.655304][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1502.682111][T18544] loop5: detected capacity change from 0 to 131072 [ 1502.702355][T18544] F2FS-fs (loop5): Test dummy encryption mode enabled [ 1502.710836][T18544] F2FS-fs (loop5): invalid crc value [ 1502.795089][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1502.810564][T18544] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1502.826027][T18544] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1502.974025][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1503.096180][T18551] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2733'. [ 1503.200200][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1503.348508][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1505.718528][ T48] net_ratelimit: 10 callbacks suppressed [ 1505.718560][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1505.941445][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.106140][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.225030][T10064] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1506.238350][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.365919][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.398989][T10064] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1506.422277][T10064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.466724][T10064] usb 2-1: Product: syz [ 1506.471017][T10064] usb 2-1: Manufacturer: syz [ 1506.479453][T10064] usb 2-1: SerialNumber: syz [ 1506.515821][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.579428][T10064] usb 2-1: config 0 descriptor?? [ 1506.638988][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.765088][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1506.967729][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1507.941956][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1508.617050][T10064] usb 2-1: USB disconnect, device number 25 [ 1509.238805][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2756'. [ 1509.758185][T18632] loop1: detected capacity change from 0 to 32768 [ 1509.772287][T10084] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1509.781150][T18632] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1509.908676][T18632] XFS (loop1): Ending clean mount [ 1510.166758][T10084] usb 6-1: device descriptor read/64, error -71 [ 1510.617746][T10084] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1510.749250][T12263] net_ratelimit: 16 callbacks suppressed [ 1510.749280][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1510.814533][T17479] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1511.348009][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1511.567734][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1511.596906][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1511.637584][T10084] usb 6-1: device descriptor read/64, error -71 [ 1511.845454][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1512.005145][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1512.185989][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1512.355153][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1512.485334][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1512.625085][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1512.666595][T10084] usb usb6-port1: attempt power cycle [ 1512.769347][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1513.112073][T10661] block nbd5: Receive control failed (result -32) [ 1513.797873][T18553] block nbd5: shutting down sockets [ 1513.978439][T18679] overlayfs: missing 'lowerdir' [ 1514.002125][T18656] fuse: Unknown parameter 'f' [ 1515.265345][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2770'. [ 1515.780034][T12263] net_ratelimit: 17 callbacks suppressed [ 1515.780063][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1515.984409][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1516.439095][T18713] fuse: fd is not a fuse device [ 1516.466092][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1516.608906][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1516.729067][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1516.889357][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1517.012982][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1517.161369][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1517.305864][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1517.467158][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1518.335046][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1518.535187][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1518.553040][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1518.581506][ T9] usb 6-1: config 0 has no interface number 0 [ 1518.624084][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1518.642341][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1518.662356][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.721212][ T9] usb 6-1: Product: syz [ 1518.732586][ T9] usb 6-1: Manufacturer: syz [ 1518.749044][ T9] usb 6-1: SerialNumber: syz [ 1518.788467][ T9] usb 6-1: config 0 descriptor?? [ 1520.845830][ T5826] net_ratelimit: 19 callbacks suppressed [ 1520.845859][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1520.956262][T18757] loop1: detected capacity change from 0 to 32768 [ 1521.185166][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1521.297194][T18757] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1521.377048][T18757] XFS (loop1): Ending clean mount [ 1521.476595][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1521.946812][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1522.165897][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1522.176623][T17479] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1522.180606][ T9] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71 [ 1522.248268][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1522.280169][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1522.312457][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1522.321592][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1522.592393][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1522.616639][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2799'. [ 1523.560744][ T9] usb 6-1: USB disconnect, device number 22 [ 1523.683453][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1523.877253][T18800] loop5: detected capacity change from 0 to 256 [ 1523.889378][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1523.899705][T18800] exfat: Deprecated parameter 'utf8' [ 1524.013324][T18800] exFAT-fs (loop5): bogus number of FAT structure [ 1524.056731][T18800] exFAT-fs (loop5): failed to read boot sector [ 1524.148128][T18800] exFAT-fs (loop5): failed to recognize exfat type [ 1524.170269][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1524.676142][T18807] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1525.202570][T18808] fuse: fd is not a fuse device [ 1525.897766][T12263] net_ratelimit: 8 callbacks suppressed [ 1525.897823][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1526.208129][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1526.423085][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1526.688766][ T31] audit: type=1804 audit(1777535405.590:419): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2804" name="file0" dev="tmpfs" ino=894 res=1 errno=0 [ 1526.785510][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1526.905427][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1527.061390][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1527.578651][T18830] loop5: detected capacity change from 0 to 32768 [ 1527.595509][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1527.686939][T18830] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1527.804009][T18830] XFS (loop5): Ending clean mount [ 1527.954875][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1528.497933][ T31] audit: type=1800 audit(1777535407.420:420): pid=18830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2809" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 1529.120767][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1529.255339][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1529.779680][T17030] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1530.976156][T12263] net_ratelimit: 2 callbacks suppressed [ 1530.976185][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1531.155846][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1531.285090][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1531.609277][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1531.804202][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1531.995861][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1532.108407][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1532.187108][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 1532.219946][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1532.275007][T10100] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1532.301967][T18887] fuse: fd is not a fuse device [ 1532.450764][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1532.464556][T10100] usb 2-1: Using ep0 maxpacket: 32 [ 1532.493473][T10100] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1532.544198][T10100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.604486][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1532.627421][T10100] usb 2-1: Product: syz [ 1532.640468][T10100] usb 2-1: Manufacturer: syz [ 1532.662473][T10100] usb 2-1: SerialNumber: syz [ 1533.178905][T18893] block nbd5: shutting down sockets [ 1533.338258][T10100] usb 2-1: config 0 descriptor?? [ 1533.574086][T10100] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 026 [ 1534.810066][T18917] loop5: detected capacity change from 0 to 1024 [ 1534.849326][T18917] EXT4-fs: inline encryption not supported [ 1534.887618][T18917] EXT4-fs: Ignoring removed mblk_io_submit option [ 1534.919920][T18917] EXT4-fs (loop5): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1535.620183][T18917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1535.827805][T17030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.981596][T18926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2840'. [ 1536.026634][T12272] net_ratelimit: 19 callbacks suppressed [ 1536.026662][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1536.187655][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1536.307411][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1536.446850][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1536.977141][T18910] i2c i2c-1: failure reading status [ 1537.245458][T10084] usb 2-1: USB disconnect, device number 26 [ 1537.454207][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1538.136206][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1538.445585][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1538.600357][T18957] loop1: detected capacity change from 0 to 256 [ 1538.828486][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1538.842792][T18957] exfat: Deprecated parameter 'utf8' [ 1539.003288][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1539.017224][T18957] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 1539.291230][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1540.657019][T18978] fuse: fd is not a fuse device [ 1541.078468][ T48] net_ratelimit: 5 callbacks suppressed [ 1541.078496][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1541.268385][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1541.387695][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1541.637165][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1541.773484][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1541.936574][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1542.040882][T19008] 9p: Bad value for 'rfdno' [ 1542.284974][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1542.495659][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1542.841587][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1543.038552][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1544.908881][T15743] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1545.329882][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.337682][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.139344][ T48] net_ratelimit: 15 callbacks suppressed [ 1546.139374][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1546.155319][T19063] sctp: [Deprecated]: syz.8.2880 (pid 19063) Use of int in max_burst socket option. [ 1546.155319][T19063] Use struct sctp_assoc_value instead [ 1546.243714][T19062] fuse: fd is not a fuse device [ 1546.250351][T15743] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1546.274955][T15743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.283145][T15743] usb 6-1: Product: syz [ 1546.306051][T15743] usb 6-1: Manufacturer: syz [ 1546.311887][T15743] usb 6-1: SerialNumber: syz [ 1546.355270][T15743] usb 6-1: config 0 descriptor?? [ 1546.385875][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1546.594162][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1546.930107][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1547.652623][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1547.721607][T10084] usb 6-1: USB disconnect, device number 23 [ 1547.843801][T12360] bond1: (slave macvlan2): failed to get link speed/duplex [ 1548.264618][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 1548.387273][T12267] bond1: (slave macvlan2): failed to get link speed/duplex [ 1548.769864][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1548.936046][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1549.069311][T19120] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2892'. [ 1549.586827][T10084] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1550.244664][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2899'. [ 1550.480981][T19146] sctp: [Deprecated]: syz.9.2900 (pid 19146) Use of int in max_burst socket option. [ 1550.480981][T19146] Use struct sctp_assoc_value instead [ 1551.478270][ T5642] Bluetooth: hci7: command 0x2016 tx timeout [ 1551.554375][T12261] net_ratelimit: 13 callbacks suppressed [ 1551.554405][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1551.737530][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1551.860410][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1552.084324][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1552.118966][T15743] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1552.139896][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 1552.151572][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'. [ 1552.300800][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1552.347362][T19164] fuse: fd is not a fuse device [ 1552.370357][T15743] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1552.382360][T15743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.406238][T15743] usb 2-1: Product: syz [ 1552.410526][T15743] usb 2-1: Manufacturer: syz [ 1552.420951][T15743] usb 2-1: SerialNumber: syz [ 1552.441035][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1552.472724][T15743] usb 2-1: config 0 descriptor?? [ 1552.733388][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1552.802913][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2906'. [ 1552.818418][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1553.134837][T10084] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1553.143971][T10084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.155971][T10084] usb 6-1: config 0 descriptor?? [ 1553.180745][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1553.241844][T10084] usb 6-1: can't set config #0, error -71 [ 1553.291717][T10084] usb 6-1: USB disconnect, device number 24 [ 1553.474645][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1553.540380][T15743] usb 2-1: USB disconnect, device number 27 [ 1553.664151][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1554.380664][T19192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.393374][T19194] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2917'. [ 1554.410313][T19192] bridge_slave_0 (unregistering): left allmulticast mode [ 1554.417539][T19192] bridge_slave_0 (unregistering): left promiscuous mode [ 1554.424652][T19192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.594306][T19199] sctp: [Deprecated]: syz.5.2916 (pid 19199) Use of int in max_burst socket option. [ 1554.594306][T19199] Use struct sctp_assoc_value instead [ 1554.874668][T19201] loop5: detected capacity change from 0 to 4096 [ 1555.419046][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2921'. [ 1555.822726][ T5642] Bluetooth: hci1: command 0x2016 tx timeout [ 1556.634031][T12265] net_ratelimit: 15 callbacks suppressed [ 1556.634075][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1556.806652][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1556.980872][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1557.183167][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1557.400208][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1557.459487][T19240] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2930'. [ 1557.518493][T19244] sctp: [Deprecated]: syz.1.2931 (pid 19244) Use of int in max_burst socket option. [ 1557.518493][T19244] Use struct sctp_assoc_value instead [ 1557.780801][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1557.934819][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1558.329724][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1558.654385][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1558.825345][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1558.855070][T15743] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1558.952771][ T31] audit: type=1107 audit(1777535437.880:421): pid=19257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1559.265384][T15743] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1559.274694][T15743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.287134][T15743] usb 6-1: Product: syz [ 1559.288820][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1559.292380][T15743] usb 6-1: Manufacturer: syz [ 1559.310655][T15743] usb 6-1: SerialNumber: syz [ 1559.321945][T15743] usb 6-1: config 0 descriptor?? [ 1559.820710][T15743] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1560.530944][T19280] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2943'. [ 1561.294716][T19287] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2947'. [ 1561.320629][T15743] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1561.512271][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2948'. [ 1562.338783][T19297] sctp: [Deprecated]: syz.7.2949 (pid 19297) Use of int in max_burst socket option. [ 1562.338783][T19297] Use struct sctp_assoc_value instead [ 1562.567342][T10073] usb 6-1: USB disconnect, device number 25 [ 1562.707740][T12274] net_ratelimit: 15 callbacks suppressed [ 1562.707771][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1562.857402][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1563.205739][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1563.263747][T10084] IPVS: starting estimator thread 0... [ 1563.501094][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1563.620855][T19309] IPVS: using max 22 ests per chain, 52800 per kthread [ 1563.703037][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1563.922673][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1563.938610][T19319] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2955'. [ 1564.124230][T19317] overlay: Bad value for 'workdir' [ 1564.174293][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1564.188025][T19320] loop1: detected capacity change from 0 to 4096 [ 1564.336049][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1565.065087][T10064] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1565.360118][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1565.633337][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1565.645259][ T31] audit: type=1804 audit(1777535444.480:422): pid=19333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2957" name="/newroot/47/bus/file0" dev="loop1" ino=34 res=1 errno=0 [ 1565.919364][T10064] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1565.936238][T19335] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2959'. [ 1565.950896][T10064] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.962988][T10064] usb 6-1: config 8 has no interface number 0 [ 1566.032586][T10064] usb 6-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1566.078758][T10064] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1566.101296][T10064] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1566.122677][T10064] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1566.132641][T10064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.383364][T10064] usb 6-1: NFC: intf ffff88803409d000 id ffffffff8f7df740 [ 1567.652825][T10064] usb 6-1: USB disconnect, device number 26 [ 1567.702691][T19357] sctp: [Deprecated]: syz.9.2966 (pid 19357) Use of int in max_burst socket option. [ 1567.702691][T19357] Use struct sctp_assoc_value instead [ 1567.731126][ T48] ntfs3(loop1): ino=5, mi_enum_attr [ 1567.916518][T12274] net_ratelimit: 7 callbacks suppressed [ 1567.916545][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1568.144878][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1568.309126][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1568.449232][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1568.604240][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1569.763719][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1569.825972][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1569.867959][T19383] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2976'. [ 1569.929865][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1570.125739][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1570.275051][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1570.406115][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1572.032274][T19414] fuse: fd is not a fuse device [ 1572.984036][T12274] net_ratelimit: 10 callbacks suppressed [ 1572.984065][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1573.007781][T10064] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1573.080930][T19425] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1573.173669][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1573.198664][T10064] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1573.226377][T10064] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.247070][T10064] usb 6-1: Product: syz [ 1573.255867][T10064] usb 6-1: Manufacturer: syz [ 1573.276261][T10064] usb 6-1: SerialNumber: syz [ 1573.332684][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1573.444089][T10064] usb 6-1: config 0 descriptor?? [ 1573.702846][T10064] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1573.728122][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1573.793042][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2995'. [ 1574.647131][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1574.960550][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1575.125231][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1575.288922][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1575.426997][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1575.612163][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1576.651812][T10064] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1576.653144][T19458] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.3002'. [ 1577.987321][T10073] usb 6-1: USB disconnect, device number 27 [ 1578.692282][ T5826] net_ratelimit: 4 callbacks suppressed [ 1578.692310][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1579.061209][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1580.177839][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1580.339041][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1580.458949][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1581.170592][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1581.203896][T19492] netlink: 'syz.5.3012': attribute type 25 has an invalid length. [ 1581.214923][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3011'. [ 1581.329434][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1581.685796][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1581.975390][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1582.215527][T19512] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3018'. [ 1582.240024][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1583.719041][ T37] net_ratelimit: 3 callbacks suppressed [ 1583.719074][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1584.168937][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1584.305061][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1584.529342][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1585.070803][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1585.188801][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1585.370893][T19540] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1586.097071][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1586.223368][T19546] netlink: 'syz.1.3030': attribute type 25 has an invalid length. [ 1586.287258][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1586.570849][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1587.478709][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1587.646386][T19558] loop5: detected capacity change from 0 to 512 [ 1587.819670][T19558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.911347][T19558] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1589.071805][ T5826] net_ratelimit: 6 callbacks suppressed [ 1589.071836][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1589.370519][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1589.423861][T17030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.498462][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1589.648263][T19592] netlink: 'syz.9.3046': attribute type 25 has an invalid length. [ 1589.820681][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1590.050463][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1590.987071][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1591.106537][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1591.310157][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1591.541446][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1591.567247][T19622] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3057'. [ 1591.656996][T19628] loop5: detected capacity change from 0 to 256 [ 1591.666053][T19628] exfat: Deprecated parameter 'utf8' [ 1591.678715][T19628] exFAT-fs (loop5): bogus number of FAT structure [ 1591.686351][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1591.693625][T19628] exFAT-fs (loop5): failed to read boot sector [ 1591.699832][T19628] exFAT-fs (loop5): failed to recognize exfat type [ 1592.257654][T19636] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1592.827704][T19631] netlink: 'syz.9.3062': attribute type 24 has an invalid length. [ 1594.389495][T10073] IPVS: starting estimator thread 0... [ 1594.458005][T12265] net_ratelimit: 8 callbacks suppressed [ 1594.458029][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1594.660915][T19661] IPVS: using max 28 ests per chain, 67200 per kthread [ 1594.678035][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1594.849649][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1594.861270][T19671] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3074'. [ 1595.018270][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1595.072275][T19675] loop5: detected capacity change from 0 to 512 [ 1595.119332][T19675] EXT4-fs: Ignoring removed orlov option [ 1595.155639][T19682] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.3078'. [ 1595.195933][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1595.208179][T19675] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1595.237882][T19675] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1595.422174][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1595.565368][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1595.696058][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1595.837801][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1595.930801][T19675] EXT4-fs (loop5): 1 truncate cleaned up [ 1596.008226][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1596.020424][T19675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1596.828792][T19712] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1597.222544][T19712] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1597.562909][T17030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.855836][T19723] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3091'. [ 1597.977810][T19730] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3093'. [ 1598.935236][T19728] loop5: detected capacity change from 0 to 32768 [ 1599.234039][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 1599.615234][T12261] net_ratelimit: 16 callbacks suppressed [ 1599.615263][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1599.971661][T19728] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1600.128266][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1600.151310][T19771] sctp: [Deprecated]: syz.7.3104 (pid 19771) Use of int in max_burst socket option. [ 1600.151310][T19771] Use struct sctp_assoc_value instead [ 1600.205581][T19728] XFS (loop5): Ending clean mount [ 1600.295023][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1600.487408][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1600.507560][T19776] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3107'. [ 1600.569155][T17030] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1600.660346][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1600.939200][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1601.214711][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1601.386321][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1601.754754][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1602.034194][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1602.601231][T19800] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3114'. [ 1604.671404][ T8436] net_ratelimit: 9 callbacks suppressed [ 1604.671434][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1604.687341][T19827] sctp: [Deprecated]: syz.2.3122 (pid 19827) Use of int in max_burst socket option. [ 1604.687341][T19827] Use struct sctp_assoc_value instead [ 1604.950948][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1605.482107][T19826] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3123'. [ 1606.437573][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1606.751127][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.757774][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.779846][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1608.712603][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1608.878762][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1609.015408][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1609.180056][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1609.527302][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1610.334989][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1610.373491][ T31] audit: type=1107 audit(1777535489.300:423): pid=19860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1610.498489][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1610.717615][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1610.826299][T19877] sctp: [Deprecated]: syz.2.3140 (pid 19877) Use of int in max_burst socket option. [ 1610.826299][T19877] Use struct sctp_assoc_value instead [ 1610.945049][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1610.963884][T19880] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3142'. [ 1611.061723][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1611.300206][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1612.345710][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1612.668598][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1612.932541][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1613.242513][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1613.258954][T10073] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1614.505481][ T31] audit: type=1107 audit(1777535493.430:424): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1614.529165][T19930] tipc: Enabled bearer , priority 10 [ 1614.718583][T19937] ÿ: renamed from dummy0 (while UP) [ 1615.001981][T19946] netlink: 'syz.7.3168': attribute type 4 has an invalid length. [ 1615.412117][T19951] overlayfs: failed to clone upperpath [ 1615.601835][T12261] net_ratelimit: 9 callbacks suppressed [ 1615.601863][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1616.499902][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1616.701969][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1616.966120][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1617.130792][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1617.237611][T10073] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1617.246890][T10073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.255070][T10073] usb 6-1: Product: syz [ 1617.344496][T12274] bond1: (slave macvlan2): failed to get link speed/duplex [ 1617.370578][T10073] usb 6-1: config 0 descriptor?? [ 1617.458466][T10073] usb 6-1: can't set config #0, error -71 [ 1617.519498][T10073] usb 6-1: USB disconnect, device number 28 [ 1617.607634][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1617.904413][T19985] netlink: 'syz.8.3182': attribute type 25 has an invalid length. [ 1617.944447][ T31] audit: type=1107 audit(1777535496.860:425): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1618.154360][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1618.381074][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1618.769062][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1621.647623][ T37] net_ratelimit: 3 callbacks suppressed [ 1621.647653][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1622.067648][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1622.208985][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1622.333286][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1622.646277][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1623.727764][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1624.075164][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1625.208718][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1625.969189][T20047] netlink: 'syz.1.3202': attribute type 25 has an invalid length. [ 1626.201678][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1626.279501][T10084] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1626.527280][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1627.442251][ T5826] bond1: (slave macvlan2): failed to get link speed/duplex [ 1627.469271][T20062] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3205'. [ 1627.643779][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1627.761442][T20073] fuse: Bad value for 'fd' [ 1627.875666][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1627.990912][T10084] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1627.999149][T10084] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.009281][T10084] usb 6-1: config 8 has no interface number 0 [ 1628.015417][T10084] usb 6-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1628.027082][T10084] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1628.037959][T10084] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1628.051043][T10084] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1628.060103][T10084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.401537][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1628.564829][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1628.669829][T10084] usb 6-1: can't set config #8, error -71 [ 1628.686215][T10084] usb 6-1: USB disconnect, device number 29 [ 1628.795706][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1628.883133][T20092] netlink: 'syz.1.3220': attribute type 25 has an invalid length. [ 1628.921922][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1630.002627][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1630.179617][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1630.363391][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1630.719474][T20117] random: crng reseeded on system resumption [ 1631.441977][ T31] audit: type=1107 audit(1777535510.370:426): pid=20124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1632.253389][T20141] loop5: detected capacity change from 0 to 128 [ 1632.442118][T20145] netlink: 'syz.7.3239': attribute type 25 has an invalid length. [ 1632.450734][T20141] FAT-fs (loop5): Directory bread(block 32) failed [ 1632.457285][T20141] FAT-fs (loop5): Directory bread(block 33) failed [ 1632.463912][T20141] FAT-fs (loop5): Directory bread(block 34) failed [ 1632.470446][T20141] FAT-fs (loop5): Directory bread(block 35) failed [ 1632.514697][T20141] FAT-fs (loop5): Directory bread(block 36) failed [ 1632.556638][T12261] net_ratelimit: 9 callbacks suppressed [ 1632.556660][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1632.585116][T20141] FAT-fs (loop5): Directory bread(block 37) failed [ 1632.613039][T20141] FAT-fs (loop5): Directory bread(block 38) failed [ 1632.687746][T20141] FAT-fs (loop5): Directory bread(block 39) failed [ 1632.732985][T20141] FAT-fs (loop5): Directory bread(block 40) failed [ 1632.754730][T20151] io-wq is not configured for unbound workers [ 1632.780712][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1632.796271][T20141] FAT-fs (loop5): Directory bread(block 41) failed [ 1633.022484][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1633.274667][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1633.415821][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1633.893995][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1634.271414][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1634.296181][T20171] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3250'. [ 1634.830408][T20179] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3252'. [ 1634.871625][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1635.036907][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1635.165050][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1635.494864][T20195] netlink: 'syz.2.3258': attribute type 25 has an invalid length. [ 1636.220440][T10086] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1637.201937][T20217] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3268'. [ 1637.511441][T20229] netlink: 'syz.7.3273': attribute type 25 has an invalid length. [ 1637.595245][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 1637.700955][T12261] net_ratelimit: 13 callbacks suppressed [ 1637.700984][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1637.805151][T10086] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1637.813337][T10086] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.823447][T10086] usb 6-1: config 8 has no interface number 0 [ 1637.831052][T10086] usb 6-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1637.856024][T10086] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1637.856384][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1637.880445][T10086] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1637.893666][T10086] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1638.012497][T10086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.040332][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1638.156677][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1638.277174][T10086] usb 6-1: can't set config #8, error -71 [ 1638.318773][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1638.326785][T10086] usb 6-1: USB disconnect, device number 30 [ 1638.498207][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1638.664260][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1639.330216][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1639.445104][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1639.570024][T12261] bond1: (slave macvlan2): failed to get link speed/duplex [ 1639.599052][T20259] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3284'. [ 1639.654998][T20252] block nbd5: shutting down sockets [ 1640.547437][T20265] netlink: 'syz.9.3286': attribute type 25 has an invalid length. [ 1640.565782][ T31] audit: type=1326 audit(1777535519.490:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1640.612387][ T31] audit: type=1326 audit(1777535519.490:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1640.634891][ T31] audit: type=1326 audit(1777535519.500:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.380696][ T31] audit: type=1326 audit(1777535519.500:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.418416][ T31] audit: type=1326 audit(1777535519.500:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.492514][ T31] audit: type=1326 audit(1777535519.500:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.545293][ T31] audit: type=1326 audit(1777535519.500:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.703694][ T31] audit: type=1326 audit(1777535519.520:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.754094][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 1641.763090][ T31] audit: type=1326 audit(1777535519.520:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1641.827347][ T31] audit: type=1326 audit(1777535519.520:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20262 comm="syz.8.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1642.063340][T20290] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3298'. [ 1642.709581][ T5898] net_ratelimit: 19 callbacks suppressed [ 1642.709621][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1643.568169][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1643.772188][T12265] bond1: (slave macvlan2): failed to get link speed/duplex [ 1644.016968][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1644.242009][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1644.450826][ T6016] bond1: (slave macvlan2): failed to get link speed/duplex [ 1644.641697][T20328] loop5: detected capacity change from 0 to 4096 [ 1644.724471][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1644.938265][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1644.988685][T20335] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1645.058357][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1645.307047][ T48] bond1: (slave macvlan2): failed to get link speed/duplex [ 1647.494602][T20357] netlink: 'syz.1.3320': attribute type 25 has an invalid length. [ 1647.759931][ T5898] net_ratelimit: 8 callbacks suppressed [ 1647.759962][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1647.938014][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1648.096728][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 1648.194184][T10661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1648.229450][T10661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1648.242066][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1648.258467][T10661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1648.300475][T10661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1648.350596][T10661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1648.366053][T12272] bond1: (slave macvlan2): failed to get link speed/duplex [ 1648.485737][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1648.873344][T12263] bond1: (slave macvlan2): failed to get link speed/duplex [ 1649.065405][ T8436] bond1: (slave macvlan2): failed to get link speed/duplex [ 1649.311516][ T5898] bond1: (slave macvlan2): failed to get link speed/duplex [ 1649.544148][ T9309] bond0: (slave syz_tun): Releasing backup interface [ 1649.773073][T12263] bond1: (slave macvlan2): link status definitely down, disabling slave [ 1650.051182][T20405] random: crng reseeded on system resumption [ 1650.515777][T10661] Bluetooth: hci0: command tx timeout [ 1650.551133][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1650.551153][ T31] audit: type=1804 audit(1777535529.470:466): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3331" name="file0" dev="tmpfs" ino=2791 res=1 errno=0 [ 1650.649788][T20408] netlink: 'syz.2.3338': attribute type 25 has an invalid length. [ 1651.021587][T12263] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.587420][T10661] Bluetooth: hci0: command tx timeout [ 1652.603680][T12263] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.961861][T20427] loop5: detected capacity change from 0 to 2048 [ 1653.146997][T12263] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.696199][T10661] Bluetooth: hci0: command tx timeout [ 1656.153886][T12263] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.822139][T10661] Bluetooth: hci0: command tx timeout [ 1658.177012][T20476] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1658.573329][T10661] Bluetooth: hci6: unexpected event for opcode 0x0c1a [ 1658.877652][T20495] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1659.106997][T20381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.115107][T20381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.122622][T20381] bridge_slave_0: entered allmulticast mode [ 1659.134382][T20381] bridge_slave_0: entered promiscuous mode [ 1659.147393][T20381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.154626][T20381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.161887][T20381] bridge_slave_1: entered allmulticast mode [ 1659.169933][T20381] bridge_slave_1: entered promiscuous mode [ 1659.518755][T20381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.632186][T20381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.111102][T20536] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1661.980445][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3383'. [ 1662.093522][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3384'. [ 1662.348474][T12263] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1662.378765][T12263] bond0 (unregistering): Released all slaves [ 1662.410107][T12263] bond1 (unregistering): Released all slaves [ 1662.497181][T20381] team0: Port device team_slave_0 added [ 1662.521259][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1662.604481][T20381] team0: Port device team_slave_1 added [ 1662.976551][T20579] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1662.980143][T12263] tipc: Disabling bearer [ 1663.072103][T12263] tipc: Left network mode [ 1663.083969][T20381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.168375][T20381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.241874][T20381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.308984][T20381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.319027][T20381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.426813][T20585] loop5: detected capacity change from 0 to 2048 [ 1663.470377][T20381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.501488][T20585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1665.059076][T20381] hsr_slave_0: entered promiscuous mode [ 1665.092421][T20381] hsr_slave_1: entered promiscuous mode [ 1665.133243][T20381] debugfs: 'hsr0' already exists in 'hsr' [ 1665.152577][T20381] Cannot create hsr debugfs directory [ 1665.435432][T20617] fuse: Bad value for 'fd' [ 1666.042540][T12263] hsr_slave_0: left promiscuous mode [ 1666.063803][T12263] hsr_slave_1: left promiscuous mode [ 1666.141122][T12263] veth1_macvtap: left promiscuous mode [ 1666.201074][T12263] veth0_macvtap: left promiscuous mode [ 1667.047970][T12263] veth1_vlan: left promiscuous mode [ 1667.531229][T20648] loop5: detected capacity change from 0 to 2048 [ 1668.206164][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.212746][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.709234][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1671.788607][T20676] loop5: detected capacity change from 0 to 4096 [ 1672.499259][ T31] audit: type=1804 audit(1777535551.430:467): pid=20687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3425" name="file0" dev="tmpfs" ino=736 res=1 errno=0 [ 1672.807237][ T6016] ntfs3(loop5): ino=5, mi_enum_attr [ 1676.758339][T12263] IPVS: stop unused estimator thread 0... [ 1676.922591][T20737] fuse: fd is not a fuse device [ 1678.340747][T20757] netlink: 212332 bytes leftover after parsing attributes in process `syz.1.3445'. [ 1679.511386][T20381] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1680.059555][T20381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1680.075168][T20381] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1680.741855][T20381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1681.040816][T20381] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1681.225803][T20381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1681.233942][T20381] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1681.245907][T20381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1681.684347][T20381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.733689][T20381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.748338][T12263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.755597][T12263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.790182][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.797347][T12263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.881835][T20381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1681.905026][T20381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1684.077343][ T31] audit: type=1326 audit(1777535562.990:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1684.236161][ T31] audit: type=1326 audit(1777535562.990:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1684.369981][ T31] audit: type=1326 audit(1777535562.990:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1684.386606][T20832] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.3459'. [ 1684.485703][ T31] audit: type=1326 audit(1777535562.990:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1684.537326][ T31] audit: type=1326 audit(1777535562.990:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1684.637258][ T31] audit: type=1326 audit(1777535562.990:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1684.740976][ T31] audit: type=1326 audit(1777535562.990:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1685.260159][ T31] audit: type=1326 audit(1777535562.990:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1686.753390][ T31] audit: type=1326 audit(1777535562.990:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1686.795133][ T31] audit: type=1326 audit(1777535562.990:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20816 comm="syz.8.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f59cdd9 code=0x7ffc0000 [ 1686.912255][T20381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.620474][T20862] loop5: detected capacity change from 0 to 4096 [ 1687.647380][T20862] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1688.022824][T20862] ntfs3(loop5): ino=19, mi_enum_attr [ 1688.032575][T20862] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1688.254982][T10661] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1688.681421][T20889] netlink: 181284 bytes leftover after parsing attributes in process `syz.2.3472'. [ 1689.668552][T20381] veth0_vlan: entered promiscuous mode [ 1690.083331][T20381] veth1_vlan: entered promiscuous mode [ 1691.215807][T20381] veth0_macvtap: entered promiscuous mode [ 1691.985705][T20381] veth1_macvtap: entered promiscuous mode [ 1692.145235][T20381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1692.220018][T20381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1692.563708][ T5898] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.420077][ T5898] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.475180][ T5898] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.530011][T20925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3480'. [ 1693.581867][ T5898] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.183389][T12274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.330953][T12274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.515904][ T5898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.523778][ T5898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.350653][T10073] IPVS: starting estimator thread 0... [ 1697.439711][T20964] IPVS: using max 23 ests per chain, 55200 per kthread [ 1697.538884][T20969] loop7: detected capacity change from 0 to 32768 [ 1697.555639][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1697.614174][T20969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3490 (20969) [ 1697.646069][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1697.675397][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1697.683917][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1697.691839][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1697.737136][T20969] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1697.747348][T20969] BTRFS info (device loop7): using sha256 checksum algorithm [ 1698.396758][T20969] BTRFS info (device loop7): setting nodatasum [ 1698.403004][T20969] BTRFS info (device loop7): enabling ssd optimizations [ 1698.410103][T20969] BTRFS info (device loop7): turning on async discard [ 1698.420047][T20969] BTRFS info (device loop7): enabling free space tree [ 1699.024533][T21009] mmap: syz.7.3490 (21009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1699.485235][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 1699.485263][ T31] audit: type=1800 audit(1777535577.950:514): pid=21009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3490" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1699.596097][T10084] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1699.935778][T10661] Bluetooth: hci4: command tx timeout [ 1701.149559][T20381] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1701.759861][T21034] can: request_module (can-proto-4) failed. [ 1701.799985][T21037] loop5: detected capacity change from 0 to 1764 [ 1702.142619][T10661] Bluetooth: hci4: command tx timeout [ 1703.822881][ T5826] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.897406][ T5826] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1704.216243][T10661] Bluetooth: hci4: command tx timeout [ 1704.324863][T21068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3513'. [ 1704.430671][T10079] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1704.880200][ T5826] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.039802][ T5826] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1706.041460][ T5826] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.052986][ T5826] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1706.211079][T20971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.221636][T20971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.228993][T20971] bridge_slave_0: entered allmulticast mode [ 1706.238407][T20971] bridge_slave_0: entered promiscuous mode [ 1706.252991][T20971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.260665][T20971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.268204][T10661] Bluetooth: hci4: command tx timeout [ 1706.273937][T20971] bridge_slave_1: entered allmulticast mode [ 1706.285487][T20971] bridge_slave_1: entered promiscuous mode [ 1706.341865][T20971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.356376][T20971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.407495][T20971] team0: Port device team_slave_0 added [ 1706.417067][T20971] team0: Port device team_slave_1 added [ 1707.319697][ T5826] bridge0: port 1(netdevsim0) entered disabled state [ 1707.463295][ T5826] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 1707.527081][ T5826] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 1707.537197][ T5826] bridge0: port 1(netdevsim0) entered disabled state [ 1707.565507][ T5826] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.580664][ T5826] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1707.639685][T10079] usb 8-1: unable to read config index 0 descriptor/all [ 1707.646707][T10079] usb 8-1: can't read configurations, error -71 [ 1707.914093][T20971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.926488][T21126] overlayfs: failed to clone upperpath [ 1707.932665][T20971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.018165][T20971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.124758][T20971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.149239][T20971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.222947][T20971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.780476][T20971] hsr_slave_0: entered promiscuous mode [ 1709.960668][T20971] hsr_slave_1: entered promiscuous mode [ 1710.171695][ T31] audit: type=1107 audit(1777535589.100:515): pid=21150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1710.176105][T20971] debugfs: 'hsr0' already exists in 'hsr' [ 1710.207601][T20971] Cannot create hsr debugfs directory [ 1710.285005][T21149] block nbd7: shutting down sockets [ 1710.773651][T10661] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1710.959084][T10073] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1711.689003][T21173] netlink: 'syz.9.3552': attribute type 24 has an invalid length. [ 1712.023578][T10073] usb 8-1: Using ep0 maxpacket: 8 [ 1712.798970][T10073] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1712.809966][T10073] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1712.819101][T10073] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.871287][ T5826] bond0 (unregistering): Released all slaves [ 1712.953977][T10073] usb 8-1: config 0 descriptor?? [ 1713.314701][ T5826] tipc: Disabling bearer [ 1713.340472][ T5826] tipc: Left network mode [ 1713.954164][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1714.534375][T10073] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1714.576715][T10073] usb 8-1: USB disconnect, device number 21 [ 1714.715390][T21208] netlink: 181284 bytes leftover after parsing attributes in process `syz.2.3558'. [ 1715.920427][ T5826] hsr_slave_0: left promiscuous mode [ 1715.927158][ T5826] hsr_slave_1: left promiscuous mode [ 1715.963083][ T5826] dummy0: left allmulticast mode [ 1715.968699][ T5826] veth1_macvtap: left promiscuous mode [ 1715.974189][ T5826] veth0_macvtap: left promiscuous mode [ 1715.979797][ T5826] veth1_vlan: left promiscuous mode [ 1715.985064][ T5826] veth0_vlan: left promiscuous mode [ 1716.247776][T10661] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1720.580204][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1720.781636][T21273] netlink: 181284 bytes leftover after parsing attributes in process `syz.9.3573'. [ 1721.037679][T10661] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1721.099568][T21285] Bluetooth: MGMT ver 1.23 [ 1721.337159][T21291] netlink: 'syz.9.3579': attribute type 25 has an invalid length. [ 1723.475543][T21327] netlink: 181284 bytes leftover after parsing attributes in process `syz.5.3589'. [ 1723.590458][T20971] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1723.721936][T20971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1723.745160][T20971] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1723.841842][T20971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1723.852614][T20971] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1723.864728][T20971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1723.954527][T20971] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1723.973734][T20971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1724.318069][ T5826] IPVS: stop unused estimator thread 0... [ 1724.324844][T21344] netlink: 'syz.2.3594': attribute type 25 has an invalid length. [ 1725.496555][T21361] tipc: Enabling of bearer rejected, failed to enable media [ 1725.636916][T20971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.835674][T21374] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3597'. [ 1725.896674][T20971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.969096][T12263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.976281][T12263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.025604][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.032862][T12265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.158247][T21415] loop7: detected capacity change from 0 to 64 [ 1727.924731][T21435] netlink: 'syz.7.3610': attribute type 16 has an invalid length. [ 1727.942774][T20971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.364366][T21378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1729.941127][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.947494][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.164309][T20971] veth0_vlan: entered promiscuous mode [ 1730.233904][T20971] veth1_vlan: entered promiscuous mode [ 1730.545740][T21464] block nbd7: shutting down sockets [ 1730.734120][T20971] veth0_macvtap: entered promiscuous mode [ 1730.800256][T20971] veth1_macvtap: entered promiscuous mode [ 1730.913785][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 1730.949826][T21466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3616'. [ 1730.972824][T20971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.027212][T20971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1731.057634][T21471] syzkaller0: entered promiscuous mode [ 1731.063158][T21471] syzkaller0: entered allmulticast mode [ 1731.787407][T12267] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.553162][T12267] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.617776][T12267] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.714859][T12267] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.486324][ T8436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.521197][ T8436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.482182][ T8436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.490093][ T8436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.644225][T21516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1735.811799][T21518] netlink: 181392 bytes leftover after parsing attributes in process `syz.5.3627'. [ 1736.511973][T21527] random: crng reseeded on system resumption [ 1737.362450][T21530] netlink: 'syz.5.3629': attribute type 24 has an invalid length. [ 1737.919171][T21535] block nbd8: shutting down sockets [ 1741.676914][T21586] netlink: 'syz.7.3644': attribute type 24 has an invalid length. [ 1745.385081][T21651] random: crng reseeded on system resumption [ 1850.264910][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1850.271907][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10086/1:b..l [ 1850.280727][ C0] rcu: (detected by 0, t=10502 jiffies, g=151169, q=684 ncpus=2) [ 1850.288538][ C0] task:kworker/1:15 state:R running task stack:23496 pid:10086 tgid:10086 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1850.303294][ C0] Workqueue: events_power_efficient gc_worker [ 1850.309609][ C0] Call Trace: [ 1850.312886][ C0] [ 1850.315825][ C0] __schedule+0x10e9/0x6820 [ 1850.320389][ C0] ? __pfx___schedule+0x10/0x10 [ 1850.325272][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.330932][ C0] ? mark_held_locks+0x40/0x70 [ 1850.335826][ C0] preempt_schedule_irq+0x50/0x90 [ 1850.340876][ C0] irqentry_exit+0x1fe/0x790 [ 1850.345587][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1850.351590][ C0] RIP: 0010:gc_worker+0x93e/0x1630 [ 1850.356769][ C0] Code: 58 e8 96 00 5b f8 e8 41 c8 da 01 31 ff 89 c3 89 c6 e8 36 fb 5a f8 85 db 0f 85 12 06 00 00 e8 79 00 5b f8 48 c7 c7 e0 54 7e 8e <41> 83 c6 01 48 8d 35 00 00 00 00 e8 72 ed 36 f8 e8 6d 45 40 f8 31 [ 1850.376400][ C0] RSP: 0018:ffffc90003667b40 EFLAGS: 00000293 [ 1850.382565][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff89ad7009 [ 1850.390541][ C0] RDX: ffff888055888000 RSI: ffffffff89ad69e7 RDI: ffffffff8e7e54e0 [ 1850.398529][ C0] RBP: 000000000002757b R08: 0000000000000001 R09: 0000000000000000 [ 1850.406510][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1850.414483][ C0] R13: 0000000000040000 R14: 0000000000013abd R15: 00000000000017a9 [ 1850.422476][ C0] ? gc_worker+0xf59/0x1630 [ 1850.427021][ C0] ? gc_worker+0x937/0x1630 [ 1850.431591][ C0] ? __pfx_gc_worker+0x10/0x10 [ 1850.436390][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.442044][ C0] ? rcu_is_watching+0x12/0xc0 [ 1850.446840][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.452505][ C0] process_one_work+0xa0e/0x1980 [ 1850.457490][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1850.462883][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.468554][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.474224][ C0] worker_thread+0x5ef/0xe50 [ 1850.478852][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1850.483995][ C0] ? kthread+0x13a/0x450 [ 1850.488258][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1850.493395][ C0] kthread+0x370/0x450 [ 1850.497484][ C0] ? __pfx_kthread+0x10/0x10 [ 1850.502097][ C0] ret_from_fork+0x72b/0xd50 [ 1850.506712][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1850.511879][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.517537][ C0] ? __switch_to+0x800/0x1100 [ 1850.522245][ C0] ? __switch_to_asm+0x39/0x70 [ 1850.527048][ C0] ? __pfx_kthread+0x10/0x10 [ 1850.531664][ C0] ret_from_fork_asm+0x1a/0x30 [ 1850.536568][ C0] [ 1850.539597][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10495 jiffies! g151169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1850.552024][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=80009 [ 1850.559913][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g151169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1850.571385][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1850.581356][ C0] rcu: RCU grace-period kthread stack dump: [ 1850.587239][ C0] task:rcu_preempt state:I stack:28904 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1850.599236][ C0] Call Trace: [ 1850.602513][ C0] [ 1850.605450][ C0] __schedule+0x10e9/0x6820 [ 1850.609988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.615675][ C0] ? __pfx___schedule+0x10/0x10 [ 1850.620546][ C0] ? find_held_lock+0x2b/0x80 [ 1850.625263][ C0] ? schedule+0x2bf/0x390 [ 1850.629608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.635275][ C0] schedule+0xdd/0x390 [ 1850.639366][ C0] schedule_timeout+0x127/0x280 [ 1850.644230][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1850.649617][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1850.654949][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.660613][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1850.666440][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.672095][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1850.677598][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1850.682474][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.688140][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1850.693452][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1850.698415][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1850.703664][ C0] rcu_gp_kthread+0x179/0x230 [ 1850.708362][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1850.713576][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1850.719406][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.725061][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.730717][ C0] ? __kthread_parkme+0x18c/0x230 [ 1850.735787][ C0] ? kthread+0x13a/0x450 [ 1850.740046][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1850.745261][ C0] kthread+0x370/0x450 [ 1850.749346][ C0] ? __pfx_kthread+0x10/0x10 [ 1850.754047][ C0] ret_from_fork+0x72b/0xd50 [ 1850.758662][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1850.763814][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.769473][ C0] ? __switch_to+0x800/0x1100 [ 1850.774180][ C0] ? __switch_to_asm+0x39/0x70 [ 1850.778970][ C0] ? __pfx_kthread+0x10/0x10 [ 1850.783629][ C0] ret_from_fork_asm+0x1a/0x30 [ 1850.788444][ C0] [ 1850.791462][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1850.797779][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1850.802991][ C1] NMI backtrace for cpu 1 [ 1850.803017][ C1] CPU: 1 UID: 0 PID: 21654 Comm: syz.8.3658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1850.803064][ C1] Tainted: [L]=SOFTLOCKUP [ 1850.803076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1850.803097][ C1] RIP: 0010:__remove_hrtimer+0x1d0/0x440 [ 1850.803149][ C1] Code: 83 c0 03 38 d0 7c 08 84 d2 0f 85 0c 02 00 00 45 21 7d 44 e8 82 2d 14 00 4d 85 f6 0f 85 ff fe ff ff e8 74 2d 14 00 48 8d 7d 60 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f [ 1850.803182][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000046 [ 1850.803208][ C1] RAX: 0000000000010002 RBX: ffff888022f45300 RCX: 0000000000000001 [ 1850.803230][ C1] RDX: ffff8880335f3d80 RSI: ffffffff81f43cec RDI: ffff8880b8528660 [ 1850.803253][ C1] RBP: ffff8880b8528600 R08: 0000000000000005 R09: 000000000000001f [ 1850.803275][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1850.803295][ C1] R13: ffff8880b85284c0 R14: 0000000000000000 R15: 00000000fffffffd [ 1850.803320][ C1] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 1850.803350][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1850.803373][ C1] CR2: 0000001b2e508ff8 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 1850.803395][ C1] Call Trace: [ 1850.803406][ C1] [ 1850.803423][ C1] __hrtimer_run_queues+0x359/0xa00 [ 1850.803476][ C1] ? rcu_is_watching+0x12/0xc0 [ 1850.803529][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1850.803592][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1850.803641][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1850.803683][ C1] [ 1850.803694][ C1] [ 1850.803707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1850.803752][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1850.803792][ C1] Code: 05 fb 1d 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 64 f3 0e 0f 82 a4 02 00 00 8b 35 6e 97 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 1d 26 12 0f 85 ed 02 00 00 48 83 c4 [ 1850.803824][ C1] RSP: 0018:ffffc90006327670 EFLAGS: 00000206 [ 1850.803849][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 1850.803870][ C1] RDX: 0000000000000000 RSI: ffffffff8def71ea RDI: ffffffff8c1c3400 [ 1850.803892][ C1] RBP: ffffffff8e7e54e0 R08: 00000000acf70bd3 R09: 0000000000000007 [ 1850.803914][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1850.803935][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1850.803970][ C1] ? page_table_check_clear+0x175/0x8f0 [ 1850.804018][ C1] ? page_table_check_clear+0x175/0x8f0 [ 1850.804063][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.804109][ C1] page_table_check_clear+0x2ae/0x8f0 [ 1850.804156][ C1] ? page_table_check_clear+0x299/0x8f0 [ 1850.804206][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 1850.804255][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 1850.804304][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 1850.804341][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 1850.804384][ C1] __zap_vma_range+0x2da3/0x4bf0 [ 1850.804456][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1850.804511][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.804552][ C1] ? find_held_lock+0x2b/0x80 [ 1850.804611][ C1] unmap_vmas+0x299/0x5f0 [ 1850.804665][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1850.804716][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.804761][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1850.804822][ C1] exit_mmap+0x1ef/0xa10 [ 1850.804873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.804917][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1850.804969][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.805010][ C1] ? trace_contention_end+0x122/0x170 [ 1850.805057][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1850.805100][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1850.805140][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.805189][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1850.805238][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.805279][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1850.805327][ C1] __mmput+0x12a/0x410 [ 1850.805375][ C1] mmput+0x67/0x80 [ 1850.805419][ C1] do_exit+0x833/0x2a60 [ 1850.805451][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1850.805506][ C1] ? __pfx_do_exit+0x10/0x10 [ 1850.805536][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.805576][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1850.805634][ C1] do_group_exit+0xd5/0x2a0 [ 1850.805669][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1850.805703][ C1] x64_sys_call+0x102c/0x1530 [ 1850.805753][ C1] do_syscall_64+0x10b/0xf80 [ 1850.805794][ C1] ? irqentry_exit+0x117/0x790 [ 1850.805838][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.805873][ C1] RIP: 0033:0x7f6ec4d9cdd9 [ 1850.805897][ C1] Code: Unable to access opcode bytes at 0x7f6ec4d9cdaf. [ 1850.805913][ C1] RSP: 002b:00007ffc40d4ea68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1850.805942][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ec4d9cdd9 [ 1850.805965][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1850.805986][ C1] RBP: 00007ffc40d4eacc R08: 0000000000000000 R09: 00005555648ee9f0 [ 1850.806007][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 1850.806027][ C1] R13: 00005555648ee9f0 R14: 00000000001a969a R15: 00007ffc40d4eb20 [ 1850.806064][ C1] [ 2003.881020][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/u8:8:1163] [ 2003.881063][ C0] Modules linked in: [ 2003.881082][ C0] irq event stamp: 5949182 [ 2003.881096][ C0] hardirqs last enabled at (5949181): [] irqentry_exit+0x246/0x790 [ 2003.881159][ C0] hardirqs last disabled at (5949182): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 2003.881214][ C0] softirqs last enabled at (5949180): [] __irq_exit_rcu+0x162/0x210 [ 2003.881276][ C0] softirqs last disabled at (5949147): [] __irq_exit_rcu+0x162/0x210 [ 2003.881351][ C0] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 2003.881405][ C0] Tainted: [L]=SOFTLOCKUP [ 2003.881419][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2003.881445][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2003.881495][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2003.881538][ C0] Code: 76 67 5b 00 48 89 df 5b e9 bd f2 60 00 be 03 00 00 00 5b e9 f2 71 ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 05 02 12 48 8b 34 24 65 48 8b 15 a1 05 02 [ 2003.881576][ C0] RSP: 0018:ffffc900055af868 EFLAGS: 00000202 [ 2003.881605][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fbee2d [ 2003.881630][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880298e1ec0 [ 2003.881655][ C0] RBP: ffff8880b8541080 R08: 0000000000000005 R09: 0000000000000000 [ 2003.881679][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 2003.881702][ C0] R13: ffffed10170a8211 R14: 0000000000000001 R15: ffff8880b843c700 [ 2003.881729][ C0] FS: 0000000000000000(0000) GS:ffff888124379000(0000) knlGS:0000000000000000 [ 2003.881763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2003.881789][ C0] CR2: 00007f5ade05b000 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 2003.881814][ C0] Call Trace: [ 2003.881828][ C0] [ 2003.881842][ C0] smp_call_function_many_cond+0x587/0x1700 [ 2003.881895][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2003.881959][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2003.882005][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 2003.882074][ C0] ? __pfx___text_poke+0x10/0x10 [ 2003.882130][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2003.882183][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 2003.882230][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 2003.882288][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 2003.882360][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 2003.882428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.882476][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2003.882543][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.882590][ C0] ? find_held_lock+0x2b/0x80 [ 2003.882663][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 2003.882727][ C0] jump_label_update+0x37a/0x550 [ 2003.882794][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 2003.882857][ C0] static_key_enable+0x1a/0x20 [ 2003.882916][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 2003.882968][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2003.883023][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.883077][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.883122][ C0] ? rcu_is_watching+0x12/0xc0 [ 2003.883176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.883230][ C0] process_one_work+0xa0e/0x1980 [ 2003.883298][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2003.883342][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.883403][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.883455][ C0] worker_thread+0x5ef/0xe50 [ 2003.883519][ C0] ? kthread+0x13a/0x450 [ 2003.883558][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2003.883602][ C0] kthread+0x370/0x450 [ 2003.883642][ C0] ? __pfx_kthread+0x10/0x10 [ 2003.883686][ C0] ret_from_fork+0x72b/0xd50 [ 2003.883733][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2003.883780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2003.883825][ C0] ? __switch_to+0x800/0x1100 [ 2003.883878][ C0] ? __switch_to_asm+0x39/0x70 [ 2003.883929][ C0] ? __pfx_kthread+0x10/0x10 [ 2003.883974][ C0] ret_from_fork_asm+0x1a/0x30 [ 2003.884052][ C0] [ 2003.884066][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2004.292232][ C1] NMI backtrace for cpu 1 [ 2004.292263][ C1] CPU: 1 UID: 0 PID: 21654 Comm: syz.8.3658 Tainted: G L syzkaller #0 PREEMPT(full) [ 2004.292311][ C1] Tainted: [L]=SOFTLOCKUP [ 2004.292324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2004.292345][ C1] RIP: 0010:lock_release+0x17d/0x310 [ 2004.292393][ C1] Code: 74 0e 8b 05 f5 90 f3 0e 85 c0 0f 84 84 01 00 00 90 48 c7 c7 ea 71 ef 8d e8 00 f0 a3 09 b8 ff ff ff ff 65 0f c1 05 9b 5e 26 12 <83> f8 01 0f 85 28 01 00 00 9c 58 f6 c4 02 0f 85 13 01 00 00 41 f7 [ 2004.292426][ C1] RSP: 0018:ffffc90000a08d40 EFLAGS: 00000057 [ 2004.292453][ C1] RAX: 0000000000000001 RBX: ffffffff9b430e28 RCX: ffffc90000a08d4c [ 2004.292475][ C1] RDX: 0000000000000005 RSI: ffffffff8def71ea RDI: ffffffff8c1c3400 [ 2004.292498][ C1] RBP: ffffffff8500c564 R08: 0000000000000001 R09: fffff520001411a2 [ 2004.292520][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff8880335f3d80 [ 2004.292542][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000006 [ 2004.292568][ C1] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 2004.292598][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2004.292621][ C1] CR2: 0000001b2e508ff8 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 2004.292643][ C1] Call Trace: [ 2004.292656][ C1] [ 2004.292683][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 2004.292724][ C1] debug_object_deactivate+0x2e4/0x3b0 [ 2004.292779][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2004.292844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.292886][ C1] ? timerqueue_linked_add+0x260/0x430 [ 2004.292937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.292982][ C1] __hrtimer_run_queues+0x2f0/0xa00 [ 2004.293037][ C1] ? rcu_is_watching+0x12/0xc0 [ 2004.293090][ C1] hrtimer_interrupt+0x3e5/0x940 [ 2004.293153][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 2004.293202][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 2004.293243][ C1] [ 2004.293254][ C1] [ 2004.293267][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2004.293304][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 2004.293344][ C1] Code: 05 fb 1d 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 64 f3 0e 0f 82 a4 02 00 00 8b 35 6e 97 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 1d 26 12 0f 85 ed 02 00 00 48 83 c4 [ 2004.293377][ C1] RSP: 0018:ffffc90006327670 EFLAGS: 00000206 [ 2004.293402][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 2004.293423][ C1] RDX: 0000000000000000 RSI: ffffffff8def71ea RDI: ffffffff8c1c3400 [ 2004.293445][ C1] RBP: ffffffff8e7e54e0 R08: 00000000acf70bd3 R09: 0000000000000007 [ 2004.293467][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 2004.293487][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2004.293522][ C1] ? page_table_check_clear+0x175/0x8f0 [ 2004.293570][ C1] ? page_table_check_clear+0x175/0x8f0 [ 2004.293616][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.293662][ C1] page_table_check_clear+0x2ae/0x8f0 [ 2004.293716][ C1] ? page_table_check_clear+0x299/0x8f0 [ 2004.293767][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 2004.293821][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 2004.293870][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 2004.293906][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 2004.293949][ C1] __zap_vma_range+0x2da3/0x4bf0 [ 2004.294023][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 2004.294078][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.294118][ C1] ? find_held_lock+0x2b/0x80 [ 2004.294177][ C1] unmap_vmas+0x299/0x5f0 [ 2004.294231][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2004.294282][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.294322][ C1] ? mas_next_slot+0x10a3/0x1960 [ 2004.294383][ C1] exit_mmap+0x1ef/0xa10 [ 2004.294434][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.294478][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2004.294531][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.294571][ C1] ? trace_contention_end+0x122/0x170 [ 2004.294618][ C1] ? uprobe_clear_state+0x5f/0x260 [ 2004.294660][ C1] ? uprobe_clear_state+0x5f/0x260 [ 2004.294708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.294757][ C1] ? __lock_acquire+0x4a5/0x2630 [ 2004.294810][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.294850][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 2004.294899][ C1] __mmput+0x12a/0x410 [ 2004.294947][ C1] mmput+0x67/0x80 [ 2004.294991][ C1] do_exit+0x833/0x2a60 [ 2004.295022][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2004.295078][ C1] ? __pfx_do_exit+0x10/0x10 [ 2004.295108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.295149][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2004.295207][ C1] do_group_exit+0xd5/0x2a0 [ 2004.295242][ C1] __x64_sys_exit_group+0x3e/0x50 [ 2004.295275][ C1] x64_sys_call+0x102c/0x1530 [ 2004.295320][ C1] do_syscall_64+0x10b/0xf80 [ 2004.295361][ C1] ? irqentry_exit+0x117/0x790 [ 2004.295404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.295439][ C1] RIP: 0033:0x7f6ec4d9cdd9 [ 2004.295464][ C1] Code: Unable to access opcode bytes at 0x7f6ec4d9cdaf. [ 2004.295480][ C1] RSP: 002b:00007ffc40d4ea68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2004.295510][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ec4d9cdd9 [ 2004.295532][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2004.295552][ C1] RBP: 00007ffc40d4eacc R08: 0000000000000000 R09: 00005555648ee9f0 [ 2004.295575][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 2004.295595][ C1] R13: 00005555648ee9f0 R14: 00000000001a969a R15: 00007ffc40d4eb20 [ 2004.295631][ C1] [ 2004.844183][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 2004.850874][ C0] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 2004.861929][ C0] Tainted: [L]=SOFTLOCKUP [ 2004.866252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2004.876318][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2004.882867][ C0] Call Trace: [ 2004.886154][ C0] [ 2004.889002][ C0] dump_stack_lvl+0x100/0x190 [ 2004.893707][ C0] vpanic+0x552/0x970 [ 2004.897720][ C0] ? __pfx_vpanic+0x10/0x10 [ 2004.902236][ C0] ? __entry_text_end+0x1020b5/0x1020b9 [ 2004.907810][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 2004.913052][ C0] panic+0xd1/0xe0 [ 2004.916797][ C0] ? __pfx_panic+0x10/0x10 [ 2004.921232][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.926896][ C0] ? __pfx_printk_trigger_flush+0x10/0x10 [ 2004.932672][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2004.938424][ C0] ? wq_watchdog_touch+0xec/0x1a0 [ 2004.943478][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 2004.948811][ C0] ? watchdog_timer_fn+0x702/0x7a0 [ 2004.953970][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 2004.959206][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 2004.964792][ C0] __hrtimer_run_queues+0x142/0xa00 [ 2004.970052][ C0] hrtimer_interrupt+0x3e5/0x940 [ 2004.975140][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 2004.981156][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 2004.986820][ C0] [ 2004.989751][ C0] [ 2004.992687][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2004.998727][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2005.004906][ C0] Code: 76 67 5b 00 48 89 df 5b e9 bd f2 60 00 be 03 00 00 00 5b e9 f2 71 ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 05 02 12 48 8b 34 24 65 48 8b 15 a1 05 02 [ 2005.024535][ C0] RSP: 0018:ffffc900055af868 EFLAGS: 00000202 [ 2005.030629][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fbee2d [ 2005.038631][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880298e1ec0 [ 2005.046616][ C0] RBP: ffff8880b8541080 R08: 0000000000000005 R09: 0000000000000000 [ 2005.054614][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 2005.062614][ C0] R13: ffffed10170a8211 R14: 0000000000000001 R15: ffff8880b843c700 [ 2005.070649][ C0] ? smp_call_function_many_cond+0x5ad/0x1700 [ 2005.076784][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.082454][ C0] smp_call_function_many_cond+0x587/0x1700 [ 2005.088383][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2005.093476][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2005.099869][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 2005.105387][ C0] ? __pfx___text_poke+0x10/0x10 [ 2005.110372][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2005.115531][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 2005.120688][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 2005.127236][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 2005.133451][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 2005.139744][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.145415][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2005.151704][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.157369][ C0] ? find_held_lock+0x2b/0x80 [ 2005.162105][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 2005.168138][ C0] jump_label_update+0x37a/0x550 [ 2005.173128][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 2005.179196][ C0] static_key_enable+0x1a/0x20 [ 2005.184021][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 2005.189440][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2005.195473][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.201227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.206887][ C0] ? rcu_is_watching+0x12/0xc0 [ 2005.211692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.217392][ C0] process_one_work+0xa0e/0x1980 [ 2005.222443][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2005.227849][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.233552][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.239253][ C0] worker_thread+0x5ef/0xe50 [ 2005.243902][ C0] ? kthread+0x13a/0x450 [ 2005.248165][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2005.253302][ C0] kthread+0x370/0x450 [ 2005.257399][ C0] ? __pfx_kthread+0x10/0x10 [ 2005.262019][ C0] ret_from_fork+0x72b/0xd50 [ 2005.266651][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2005.271791][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2005.277448][ C0] ? __switch_to+0x800/0x1100 [ 2005.282193][ C0] ? __switch_to_asm+0x39/0x70 [ 2005.287003][ C0] ? __pfx_kthread+0x10/0x10 [ 2005.291633][ C0] ret_from_fork_asm+0x1a/0x30 [ 2005.296461][ C0] [ 2006.478319][ C0] Shutting down cpus with NMI [ 2006.483352][ C0] Kernel Offset: disabled [ 2006.487677][ C0] Rebooting in 86400 seconds..