last executing test programs: 18m45.295741047s ago: executing program 32 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, 0x0, 0x0, 0x9}, 0x94) 16m17.656660868s ago: executing program 33 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x18, r1, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 13m44.460218233s ago: executing program 2 (id=1233): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 13m39.134632885s ago: executing program 2 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600"], 0x44}, 0x1, 0x0, 0x0, 0x400c0c0}, 0xc000) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 13m34.444601845s ago: executing program 2 (id=1247): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 13m30.093145588s ago: executing program 2 (id=1253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x2d9b, 0x100, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13m24.437514829s ago: executing program 2 (id=1261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 13m22.831390559s ago: executing program 2 (id=1266): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x80, 0x2, 0x2, "b217283a0fc3c617a9d13f0a85c44a76b52c6ab1558ec7550f98f4a37dfb854f", 0x50313134}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 13m4.615595236s ago: executing program 34 (id=1266): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x80, 0x2, 0x2, "b217283a0fc3c617a9d13f0a85c44a76b52c6ab1558ec7550f98f4a37dfb854f", 0x50313134}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 12m12.859061466s ago: executing program 5 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) 12m9.677901588s ago: executing program 5 (id=1359): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r0 = getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sched_setaffinity(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(0x0, 0x80800) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d59, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)}, {0x0}], 0x3}, 0x0) 12m6.329858556s ago: executing program 5 (id=1365): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x292}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 12m3.374063013s ago: executing program 5 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r2, &(0x7f0000000200)=""/168, 0xa8) 12m1.753141426s ago: executing program 5 (id=1372): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xf0, 0x0, 0xb47, 0x9, 0x0, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4000884) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000000c0)={0x10000, 0x2000, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, 0x0, 0x0) connect$rds(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 11m47.645335976s ago: executing program 5 (id=1389): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11m32.482399962s ago: executing program 35 (id=1389): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11m25.212411108s ago: executing program 4 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11m24.004866191s ago: executing program 4 (id=1425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = dup(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000010) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0, 0x0, 0x25cd7166}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x0, 0x0) 11m22.484877673s ago: executing program 4 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x78) close(r4) 11m20.732773366s ago: executing program 4 (id=1431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0xffff17f2, 0xc}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r2], &(0x7f00000001c0)=[0xfffffffffffffff7, 0x2], 0x1, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000025c0)='9', 0x1}, {&(0x7f0000000200)='_', 0x1}], 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0083020000000203"], 0x0, 0x0, 0x0}, 0x0) 11m16.674203403s ago: executing program 4 (id=1435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000006c0), 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 11m16.463746284s ago: executing program 4 (id=1436): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ptrace$setopts(0x4206, 0x0, 0x0, 0x30002e) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4811}, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="0356e5291398a5a9976d50abdcd9b650d6984f4a1450ddc4ec8d668607cfed397989a0e5e75d24b21094205cb377028bad194887900cebda90904ba1b5be3a12f9d8157860e018d93e91acc6fe77fdaafaa9938ff65b18a754e978c42c142ddd210ad14b52d16af83d6449ebeeb65e9913b8a95637", 0x75}], 0x1, &(0x7f0000001fc0)=[{0x60, 0x117, 0x12, "80578ba704b2d344707b1c0dd3c185ae1825fa19bb2616090830c8bb010a4b2de22d23bb0f30466797db493aeb194cfa54b4330da87a876150c45adf34256386fe3958b50450294c68fa3761c98454b4"}, {0x60, 0x29, 0x800, "95cfa88bcdfa2dddc26d9fb33ed11211e76e479d7fb7bbcf410a0d8c1d8a0e75f9c929191b7f7f3baf402885016310c65818a1901a7cd1869a3403b89e41211df982ed5d2f6afe12b380d7"}, {0x50, 0x101, 0x7ff, "e1d9b00a31b2ee30248e8a83cb261a879b2cfaf83934e607c8ea9ea1d3676d233d3246477f0c602e828ee16400adab665f9c0d18b9780bdc7a8ec277"}, {0x80, 0x1, 0x8, "062de4532d12b72f61138a4e13376a41bf37c2fbcf41b74273c4dba8b2c3f1b7cddc0e4a8904bd7a51e1e0df98ed86607ec09d051ca17ec22e3d5d4a38d3603a5408d754dc2f9da9140b90c8cc5ab6d55b3082e0614b1b37e0040c46de5fb22e98beaf40812688f310c2"}, {0x30, 0x103, 0x4, "435ad0f9055ebb871d27fb14e104ae44c41e39c817b3618ac5a71d"}, {0x98, 0x1, 0x7, "2f3c8b4e32f39eb51bfb3a379883a0323c64050a9300c0359eedee1baf5c65c2fa5d5b6bbbd769249ca64de1e2a16b56d51667003b0fc2b1ba3d74da4b3a749f0243645b6f4466525b0b1ed0c8b46b0c16bbaa82f22459c2b1041ade2b78518b6f52ec02941f88654555042ea85e6822b10fa22a4114736d91dafd9cb4a3c31b3ba31a9ab4ed"}, {0x68, 0x10f, 0x7, "4d026c5579c169b578d6b7dd19fa1892f835c9585c1a9b8e5be1a7d668f4502c277bc29323c21699ee1b8ffd326746033c3fc9cf9d0216cd0035cb85b2cc72c28709bf1923d02d4ba59170c5303faeed2a7deeae6f"}], 0x2c0}, 0x10) 11m1.313777144s ago: executing program 36 (id=1436): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ptrace$setopts(0x4206, 0x0, 0x0, 0x30002e) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4811}, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="0356e5291398a5a9976d50abdcd9b650d6984f4a1450ddc4ec8d668607cfed397989a0e5e75d24b21094205cb377028bad194887900cebda90904ba1b5be3a12f9d8157860e018d93e91acc6fe77fdaafaa9938ff65b18a754e978c42c142ddd210ad14b52d16af83d6449ebeeb65e9913b8a95637", 0x75}], 0x1, &(0x7f0000001fc0)=[{0x60, 0x117, 0x12, "80578ba704b2d344707b1c0dd3c185ae1825fa19bb2616090830c8bb010a4b2de22d23bb0f30466797db493aeb194cfa54b4330da87a876150c45adf34256386fe3958b50450294c68fa3761c98454b4"}, {0x60, 0x29, 0x800, "95cfa88bcdfa2dddc26d9fb33ed11211e76e479d7fb7bbcf410a0d8c1d8a0e75f9c929191b7f7f3baf402885016310c65818a1901a7cd1869a3403b89e41211df982ed5d2f6afe12b380d7"}, {0x50, 0x101, 0x7ff, "e1d9b00a31b2ee30248e8a83cb261a879b2cfaf83934e607c8ea9ea1d3676d233d3246477f0c602e828ee16400adab665f9c0d18b9780bdc7a8ec277"}, {0x80, 0x1, 0x8, "062de4532d12b72f61138a4e13376a41bf37c2fbcf41b74273c4dba8b2c3f1b7cddc0e4a8904bd7a51e1e0df98ed86607ec09d051ca17ec22e3d5d4a38d3603a5408d754dc2f9da9140b90c8cc5ab6d55b3082e0614b1b37e0040c46de5fb22e98beaf40812688f310c2"}, {0x30, 0x103, 0x4, "435ad0f9055ebb871d27fb14e104ae44c41e39c817b3618ac5a71d"}, {0x98, 0x1, 0x7, "2f3c8b4e32f39eb51bfb3a379883a0323c64050a9300c0359eedee1baf5c65c2fa5d5b6bbbd769249ca64de1e2a16b56d51667003b0fc2b1ba3d74da4b3a749f0243645b6f4466525b0b1ed0c8b46b0c16bbaa82f22459c2b1041ade2b78518b6f52ec02941f88654555042ea85e6822b10fa22a4114736d91dafd9cb4a3c31b3ba31a9ab4ed"}, {0x68, 0x10f, 0x7, "4d026c5579c169b578d6b7dd19fa1892f835c9585c1a9b8e5be1a7d668f4502c277bc29323c21699ee1b8ffd326746033c3fc9cf9d0216cd0035cb85b2cc72c28709bf1923d02d4ba59170c5303faeed2a7deeae6f"}], 0x2c0}, 0x10) 8m58.66590449s ago: executing program 7 (id=1566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x6, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r4, &(0x7f0000000180)=""/147, 0xfdef) 8m56.119574046s ago: executing program 7 (id=1568): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) open(0x0, 0x141080, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 8m54.635045145s ago: executing program 7 (id=1570): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) 8m50.804922911s ago: executing program 7 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x800001, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f00000000c0)=0xcb4, 0x4) 8m47.063841971s ago: executing program 7 (id=1582): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 8m42.842082664s ago: executing program 7 (id=1588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000001c0)={[0x7037da47]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8m26.665437939s ago: executing program 37 (id=1588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000001c0)={[0x7037da47]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8m1.190794736s ago: executing program 8 (id=1628): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 7m59.543498058s ago: executing program 8 (id=1630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000) 7m57.452185261s ago: executing program 8 (id=1633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) poll(&(0x7f0000000480)=[{r4, 0x280}], 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0xd931d3864d39dcca) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) 7m56.094103686s ago: executing program 8 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000420}, 0x2bad64e7c931e36) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x149a02, 0x31) sendfile(r1, r1, 0x0, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 7m54.848953777s ago: executing program 8 (id=1637): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(r1, 0x0, 0xfffffe59) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) 7m52.376858971s ago: executing program 8 (id=1643): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001900)={{}, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004300)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) mount(0x0, 0x0, 0x0, 0x208000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}}, 0x0) 7m35.44385863s ago: executing program 38 (id=1643): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001900)={{}, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004300)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) mount(0x0, 0x0, 0x0, 0x208000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}}, 0x0) 1m55.222810335s ago: executing program 6 (id=2023): openat$iommufd(0xffffffffffffff9c, 0x0, 0x101100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) socket(0x2, 0x80805, 0x0) 1m49.991958101s ago: executing program 6 (id=2027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private=0xa010100, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x1, 0xff}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x13c}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 1m47.602497166s ago: executing program 6 (id=2029): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x48000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000014006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040) 1m47.358637974s ago: executing program 6 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1m44.648362476s ago: executing program 6 (id=2039): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x2, 0xff, 0x21, @empty, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x1, 0xffffffff, 0x6}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101901, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2c0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3, 0x20}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000200000000", @ANYBLOB="01987d00"/19, @ANYRES32=r1, @ANYBLOB="000000000100"], 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) 1m35.322489849s ago: executing program 6 (id=2044): r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 1m19.56391737s ago: executing program 39 (id=2044): r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 30.738537168s ago: executing program 0 (id=2125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) listen(r2, 0x9) accept$unix(r2, 0x0, 0x0) shutdown(r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) socket(0x2, 0x80805, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 21.277151367s ago: executing program 1 (id=2140): openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r5, 0xc008aeba, 0x0) getuid() chdir(0x0) 19.566835507s ago: executing program 1 (id=2143): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000500)={r6}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 19.54744016s ago: executing program 0 (id=2144): syz_usbip_server_init(0x3) 17.936729383s ago: executing program 3 (id=2145): socket$inet6(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x5c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24183}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r4, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 17.934879066s ago: executing program 9 (id=2146): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000900)={0x18, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 16.370006668s ago: executing program 9 (id=2147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 16.30102313s ago: executing program 1 (id=2148): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b4884c350cb1c9a5209ad334d1c1ccc0f3676272febbe9e396bebb587b58a71faa13bd64ad802f1d49201cb55ab74c60f9b23640d8453ffb5e692eb022997c861fd283e9e1427abe81eebf4049a1b5a1df7b9c8b855753c84a6cc3534761a2f21574e7704e3b1e2b86a5b31fc21147aba99124f7a288cf9359ed623295"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.867566003s ago: executing program 0 (id=2149): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x26c0}}, 0x4010) getgroups(0x4, &(0x7f0000000100)=[0xee01, 0x0, 0xee00, 0x0]) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) write(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) tkill(r3, 0x3c) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 14.803653058s ago: executing program 3 (id=2150): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private=0xa010100, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x1, 0xff}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x13c}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 14.794887927s ago: executing program 9 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13.943179214s ago: executing program 3 (id=2152): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 12.154907623s ago: executing program 9 (id=2153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fgetxattr(r3, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_pidfd_open(0x0, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) 12.084206983s ago: executing program 1 (id=2154): dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.556020184s ago: executing program 3 (id=2155): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.555098063s ago: executing program 1 (id=2156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x0, &(0x7f0000001080)}) signalfd(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) 7.517635339s ago: executing program 0 (id=2157): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000500)={r6}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 7.148719975s ago: executing program 9 (id=2158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x50) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x20000000}, 0x18) setfsuid(0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 6.08980088s ago: executing program 1 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 4.004684041s ago: executing program 3 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2.743640135s ago: executing program 0 (id=2161): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) 2.419861747s ago: executing program 9 (id=2162): r0 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x8890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b04, 0x0) syz_usb_disconnect(r3) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.413068806s ago: executing program 3 (id=2163): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 0 (id=2164): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) kernel console output (not intermixed with test programs): 586914][ T5947] usb 3-1: config 0 descriptor?? [ 632.284907][ T5947] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 632.368334][ T5947] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 632.368366][ T5947] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 633.564341][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.932419][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.342698][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.603270][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.629397][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.925853][ T8731] hsr_slave_0: left promiscuous mode [ 635.392968][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.599628][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.656803][ T8731] hsr_slave_1: left promiscuous mode [ 635.659308][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.659405][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.963352][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.394920][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.989736][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.105313][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.398619][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 637.472582][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.472613][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.947745][ T8731] veth0_macvtap: left promiscuous mode [ 638.948113][ T8731] veth1_vlan: left promiscuous mode [ 638.948494][ T8731] veth0_vlan: left promiscuous mode [ 648.304423][ T9711] Invalid option length (511) for dns_resolver key [ 649.412820][ T9722] hfs: unable to load iocharset "io#harset" [ 651.588589][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 654.914633][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.938138][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.956789][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 654.974124][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 654.982911][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 657.904738][ T59] Bluetooth: hci5: command tx timeout [ 659.914767][ T59] Bluetooth: hci5: command tx timeout [ 662.734731][ T59] Bluetooth: hci5: command tx timeout [ 664.794800][ T59] Bluetooth: hci5: command tx timeout [ 675.002541][ T8731] team0 (unregistering): Port device team_slave_1 removed [ 676.380712][ T8731] team0 (unregistering): Port device team_slave_0 removed [ 676.764799][ T1234] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 677.018057][ T9884] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.997'. [ 677.585212][ T1234] usb 1-1: Using ep0 maxpacket: 32 [ 677.626105][ T1234] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 677.626149][ T1234] usb 1-1: config 0 has no interface number 0 [ 677.657575][ T1234] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 677.657604][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.657624][ T1234] usb 1-1: Product: syz [ 677.657637][ T1234] usb 1-1: Manufacturer: syz [ 677.657651][ T1234] usb 1-1: SerialNumber: syz [ 677.663525][ T1234] usb 1-1: config 0 descriptor?? [ 677.734355][ T1234] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 678.002477][ T1234] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 678.028713][ T1234] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 679.136035][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 146 [ 679.343918][ T9879] netlink: 76 bytes leftover after parsing attributes in process `syz.0.996'. [ 679.628098][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 679.647749][ T44] usb 1-1: USB disconnect, device number 6 [ 680.285000][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 680.295846][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 680.296858][ T44] quatech2 1-1:0.51: device disconnected [ 681.360457][ T8965] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 681.363824][ T8965] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 681.366259][ T8965] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 681.375723][ T8965] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 681.422559][ T8965] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 681.962092][ T9363] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 683.525382][ T8965] Bluetooth: hci6: command tx timeout [ 683.987146][ T8731] IPVS: stop unused estimator thread 0... [ 684.179166][ T9903] chnl_net:caif_netlink_parms(): no params data found [ 684.431745][ T8731] bridge_slave_1: left allmulticast mode [ 684.431780][ T8731] bridge_slave_1: left promiscuous mode [ 684.432086][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.502344][ T8731] bridge_slave_0: left allmulticast mode [ 684.502371][ T8731] bridge_slave_0: left promiscuous mode [ 684.502636][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.743342][ T8731] bond0 (unregistering): Released all slaves [ 684.977493][ T8731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.062136][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.119510][ T8731] bond0 (unregistering): Released all slaves [ 685.229468][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 685.595893][ T8965] Bluetooth: hci6: command tx timeout [ 685.697718][ T9903] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.697923][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.698127][ T9903] bridge_slave_0: entered allmulticast mode [ 685.700762][ T9903] bridge_slave_0: entered promiscuous mode [ 685.743721][ T9903] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.743873][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.744081][ T9903] bridge_slave_1: entered allmulticast mode [ 685.766863][ T9903] bridge_slave_1: entered promiscuous mode [ 685.836884][ T8731] hsr_slave_0: left promiscuous mode [ 685.854903][ T8731] hsr_slave_1: left promiscuous mode [ 685.855864][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.896182][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.680017][ T8731] team0 (unregistering): Port device team_slave_1 removed [ 686.785384][ T8731] team0 (unregistering): Port device team_slave_0 removed [ 687.675037][ T8965] Bluetooth: hci6: command tx timeout [ 687.759095][ T9903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.761937][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.762136][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.762311][ T9768] bridge_slave_0: entered allmulticast mode [ 687.764232][ T9768] bridge_slave_0: entered promiscuous mode [ 687.798785][ T9903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.833497][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.833670][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.834003][ T9768] bridge_slave_1: entered allmulticast mode [ 687.837449][ T9768] bridge_slave_1: entered promiscuous mode [ 688.269552][ T9903] team0: Port device team_slave_0 added [ 688.274552][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.287627][ T9903] team0: Port device team_slave_1 added [ 688.398990][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.666707][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.666724][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.666751][ T9903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.886604][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.886621][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.886647][ T9903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.107196][ T9768] team0: Port device team_slave_0 added [ 689.113021][ T9768] team0: Port device team_slave_1 added [ 689.517833][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.517851][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.517875][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.557198][ T9903] hsr_slave_0: entered promiscuous mode [ 689.558736][ T9903] hsr_slave_1: entered promiscuous mode [ 689.568175][ T9903] debugfs: 'hsr0' already exists in 'hsr' [ 689.568204][ T9903] Cannot create hsr debugfs directory [ 689.576949][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.576967][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.576998][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.755040][ T8965] Bluetooth: hci6: command tx timeout [ 690.127139][ T9768] hsr_slave_0: entered promiscuous mode [ 690.128426][ T9768] hsr_slave_1: entered promiscuous mode [ 690.129203][ T9768] debugfs: 'hsr0' already exists in 'hsr' [ 690.129224][ T9768] Cannot create hsr debugfs directory [ 690.932537][ T9903] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 690.979697][ T9903] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 691.022686][ T9903] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 691.046319][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.047673][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.117320][ T9903] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 691.275456][ T9768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 691.314102][ T9768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 691.363407][ T9768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 691.394413][ T9768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 691.649079][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.701794][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.723662][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.753768][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.753953][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.780202][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.794629][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.794841][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.823687][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.823855][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.861513][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.861794][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.469872][ T9903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.479904][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.939789][ T9903] veth0_vlan: entered promiscuous mode [ 692.978621][ T9903] veth1_vlan: entered promiscuous mode [ 693.058077][ T9903] veth0_macvtap: entered promiscuous mode [ 693.083251][ T9903] veth1_macvtap: entered promiscuous mode [ 693.158647][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.161603][ T9768] veth0_vlan: entered promiscuous mode [ 693.179765][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.199628][ T9768] veth1_vlan: entered promiscuous mode [ 693.215415][ T1179] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.220561][ T1179] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.243383][ T1179] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.260345][ T1179] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.642063][ T9768] veth0_macvtap: entered promiscuous mode [ 693.648621][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.648642][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.689937][ T9768] veth1_macvtap: entered promiscuous mode [ 693.758425][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.758446][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.791559][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.818219][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.858027][ T8742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.858326][ T8742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.858643][ T8742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.858902][ T8742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.560258][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.560282][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.591112][ T5947] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 696.591210][ T5947] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 697.559159][ T5947] usb 3-1: USB disconnect, device number 5 [ 697.717174][ T6219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.717194][ T6219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.064783][ T38] audit: type=1326 audit(2000000499.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.092892][ T38] audit: type=1326 audit(2000000499.130:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.092972][ T38] audit: type=1326 audit(2000000499.130:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093016][ T38] audit: type=1326 audit(2000000499.130:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093060][ T38] audit: type=1326 audit(2000000499.130:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093102][ T38] audit: type=1326 audit(2000000499.130:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093146][ T38] audit: type=1326 audit(2000000499.130:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093188][ T38] audit: type=1326 audit(2000000499.130:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093229][ T38] audit: type=1326 audit(2000000499.130:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.093267][ T38] audit: type=1326 audit(2000000499.130:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f20cbbcebe9 code=0x7ffc0000 [ 699.698537][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.861413][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.303695][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.592987][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.856860][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.014388][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.252152][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.731894][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'. [ 704.004401][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.544880][T10081] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 706.734712][ T1234] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 706.895141][ T1234] usb 6-1: Using ep0 maxpacket: 8 [ 706.900705][ T1234] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 706.900775][ T1234] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.900797][ T1234] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.900822][ T1234] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.900846][ T1234] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.900888][ T1234] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 706.900910][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.119855][ T1234] usb 6-1: usb_control_msg returned -32 [ 707.119888][ T1234] usbtmc 6-1:16.0: can't read capabilities [ 710.924841][ T5883] usb 6-1: USB disconnect, device number 2 [ 716.719179][T10166] block nbd0: Attempted send on invalid socket [ 716.719250][T10166] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 716.719314][T10166] gfs2: error -5 reading superblock [ 721.311410][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1050'. [ 725.431172][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 728.228577][T10258] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1060' sets config #0 [ 733.984841][ T6454] IPVS: starting estimator thread 0... [ 734.075458][T10312] IPVS: using max 6 ests per chain, 14400 per kthread [ 738.041804][T10341] tipc: Enabled bearer , priority 0 [ 738.053071][T10341] syzkaller0: entered promiscuous mode [ 738.053102][T10341] syzkaller0: entered allmulticast mode [ 739.192421][T10344] tipc: Resetting bearer [ 740.198223][T10338] tipc: Resetting bearer [ 741.350152][T10338] tipc: Disabling bearer [ 747.774891][T10416] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1094'. [ 753.283396][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.294811][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.953334][T10487] Cache volume key already in use (9p,(null),) [ 758.644950][T10502] binder: 10498:10502 unknown command 0 [ 758.644971][T10502] binder: 10498:10502 ioctl c0306201 200000000080 returned -22 [ 762.090763][T10502] syz.0.1117 (10502): drop_caches: 2 [ 763.055796][T10526] input: syz0 as /devices/virtual/input/input9 [ 765.986992][T10543] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 766.674228][T10550] GUP no longer grows the stack in syz.5.1128 (10550): 200000004000-20000000a000 (200000002000) [ 766.674280][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.5.1128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 766.674303][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.674320][T10550] Call Trace: [ 766.674328][T10550] [ 766.674337][T10550] dump_stack_lvl+0x189/0x250 [ 766.674379][T10550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.674410][T10550] ? __pfx__printk+0x10/0x10 [ 766.674430][T10550] ? find_vma+0xe7/0x160 [ 766.674471][T10550] __get_user_pages+0x237e/0x2b60 [ 766.674538][T10550] get_user_pages_remote+0x2f1/0xad0 [ 766.674586][T10550] ? __pfx_mtree_load+0x10/0x10 [ 766.674630][T10550] ? __pfx_get_user_pages_remote+0x10/0x10 [ 766.674663][T10550] ? __access_remote_vm+0x367/0x7d0 [ 766.674702][T10550] __access_remote_vm+0x211/0x7d0 [ 766.674746][T10550] ? __pfx___access_remote_vm+0x10/0x10 [ 766.674776][T10550] ? set_page_refcounted+0xa0/0x1e0 [ 766.674810][T10550] ? alloc_pages_noprof+0xe4/0x1e0 [ 766.674846][T10550] proc_pid_cmdline_read+0x433/0x810 [ 766.674878][T10550] ? __asan_memset+0x22/0x50 [ 766.674909][T10550] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 766.674947][T10550] ? rw_verify_area+0x2ac/0x4e0 [ 766.674979][T10550] vfs_readv+0x5b3/0x850 [ 766.675023][T10550] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 766.675061][T10550] ? __pfx_vfs_readv+0x10/0x10 [ 766.675112][T10550] ? __fget_files+0x2a/0x420 [ 766.675149][T10550] ? __fget_files+0x3a6/0x420 [ 766.675179][T10550] ? __fget_files+0x2a/0x420 [ 766.675220][T10550] __x64_sys_preadv+0x19a/0x2a0 [ 766.675252][T10550] ? __pfx___x64_sys_preadv+0x10/0x10 [ 766.675280][T10550] ? rcu_is_watching+0x15/0xb0 [ 766.675320][T10550] ? do_syscall_64+0xbe/0x3b0 [ 766.675354][T10550] do_syscall_64+0xfa/0x3b0 [ 766.675383][T10550] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.675410][T10550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.675432][T10550] ? clear_bhb_loop+0x60/0xb0 [ 766.675459][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.675487][T10550] RIP: 0033:0x7f995027ebe9 [ 766.675511][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.675529][T10550] RSP: 002b:00007f994e49c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 766.675561][T10550] RAX: ffffffffffffffda RBX: 00007f99504a6180 RCX: 00007f995027ebe9 [ 766.675578][T10550] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 766.675593][T10550] RBP: 00007f9950301e19 R08: 0000000000000000 R09: 0000000000000000 [ 766.675607][T10550] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 766.675620][T10550] R13: 00007f99504a6218 R14: 00007f99504a6180 R15: 00007fff16ed73f8 [ 766.675668][T10550] [ 769.956245][T10566] overlayfs: failed to clone upperpath [ 771.634373][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 771.634391][ T38] audit: type=1800 audit(2000000571.660:35): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1133" name="bus" dev="ramfs" ino=24399 res=0 errno=0 [ 775.799937][ T5883] IPVS: starting estimator thread 0... [ 775.884887][T10613] IPVS: using max 7 ests per chain, 16800 per kthread [ 778.138754][T10625] ptrace attach of "./syz-executor exec"[10626] was attempted by "./syz-executor exec"[10625] [ 780.710929][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 788.108785][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.150141][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.779645][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.729717][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.391012][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.700060][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.516845][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.104791][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.464565][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.320534][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.825941][T10732] netlink: 'syz.6.1174': attribute type 16 has an invalid length. [ 795.075383][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.084491][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.100182][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.240238][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.714694][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.209885][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.656954][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.963085][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.714970][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.009727][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.478656][ T8965] Bluetooth: hci6: command 0x0406 tx timeout [ 808.784362][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.916655][T10798] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[10798] [ 809.378720][ T59] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 809.447368][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.529499][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.449051][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.732964][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.447853][T10816] gfs2: path_lookup on c:::!(>ˆìy¢o™=O-ŽÄFm×SH_Y8yÿu [ 812.447853][T10816] FãzR× ¶#ŸxI™6BçÙYCg)ß'!µAØ{g¥ [ 812.447853][T10816] ¹}ÐmŒ]x®ïÏ%{qΗmÍ*©ºPNäȺ~%U5JëhBoGhÛN÷]î”.L›.`¾º$Ž returned error -2 [ 812.486467][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.628889][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.740611][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.556393][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.701557][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.782715][ T59] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 813.782924][ T59] Bluetooth: hci4: Injecting HCI hardware error event [ 813.795289][ T59] Bluetooth: hci4: hardware error 0x00 [ 813.938028][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.938097][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.976595][T10848] capability: warning: `syz.4.1206' uses deprecated v2 capabilities in a way that may be insecure [ 817.405886][T10855] openvswitch: netlink: IP tunnel dst address not specified [ 817.531406][ T59] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 828.273071][T10906] block nbd0: Attempted send on invalid socket [ 828.273238][T10906] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 833.888821][T10949] comedi comedi1: pcl812: I/O port conflict (0x2f00,16) [ 836.100835][ T5208] udevd[5208]: worker [10965] terminated by signal 33 (Unknown signal 33) [ 836.100874][ T5208] udevd[5208]: worker [10965] failed while handling '/devices/virtual/misc/kvm' [ 843.671953][T10996] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 843.814088][T10982] delete_channel: no stack [ 846.983178][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 849.200397][ T31] IPVS: starting estimator thread 0... [ 849.564889][T11022] IPVS: using max 7 ests per chain, 16800 per kthread [ 851.304084][ T38] audit: type=1800 audit(2000000651.340:36): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1254" name="/" dev="9p" ino=2 res=0 errno=0 [ 860.933088][T11102] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 11102 comm: syz.5.1274) [ 860.954742][ T38] audit: type=1800 audit(2000000660.990:37): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1274" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27136 res=0 errno=0 [ 875.051768][T11158] evm: overlay not supported [ 875.466183][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.466718][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.051660][ T8965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 878.064385][ T8965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 878.066768][ T8965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 878.067973][ T8965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 878.068757][ T8965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 879.354073][T11182] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 880.407990][ T8965] Bluetooth: hci1: command tx timeout [ 882.660061][ T8965] Bluetooth: hci1: command tx timeout [ 885.037020][ T59] Bluetooth: hci1: command tx timeout [ 885.368690][T11172] chnl_net:caif_netlink_parms(): no params data found [ 887.274652][ T59] Bluetooth: hci1: command tx timeout [ 889.069036][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 889.611708][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 889.624837][ T31] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 889.624936][ T31] usb 7-1: config 0 has no interface number 0 [ 889.624990][ T31] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.625036][ T31] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.625150][ T31] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 889.625172][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.699008][ T31] usb 7-1: config 0 descriptor?? [ 892.462863][ T31] usbhid 7-1:0.1: can't add hid device: -71 [ 892.463000][ T31] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 892.555250][ T31] usb 7-1: USB disconnect, device number 2 [ 900.668791][T11289] syz.5.1318 (11289) used greatest stack depth: 15704 bytes left [ 901.025831][T11297] futex_wake_op: syz.0.1321 tries to shift op by 144; fix this program [ 907.987088][ T6245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.471555][ T6245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.517271][ T6245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.866606][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.542800][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.852008][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.884937][T11172] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.885076][T11172] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.885342][T11172] bridge_slave_0: entered allmulticast mode [ 915.888094][T11172] bridge_slave_0: entered promiscuous mode [ 915.932823][T11172] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.933047][T11172] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.933310][T11172] bridge_slave_1: entered allmulticast mode [ 915.966406][T11172] bridge_slave_1: entered promiscuous mode [ 916.355770][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.393891][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.092526][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.195711][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.538286][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.310933][ T8965] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 924.339402][ T6245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.519689][T11172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.539221][T11172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.483539][T11443] trusted_key: syz.6.1358 sent an empty control message without MSG_MORE. [ 928.580215][ T8965] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 928.583620][ T8965] Bluetooth: hci5: Injecting HCI hardware error event [ 928.586102][ T59] Bluetooth: hci5: hardware error 0x00 [ 928.633514][T11444] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1356'. [ 931.511170][T11450] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 933.876134][ T59] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 933.973827][T11172] team0: Port device team_slave_0 added [ 933.984293][T11172] team0: Port device team_slave_1 added [ 936.890304][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.890377][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.000075][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 938.537485][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 938.537707][T11505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.876199][ T8965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 940.903999][ T8965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 940.913511][ T8965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 940.961202][ T8965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 940.985385][ T8965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.071878][ T6245] bridge_slave_1: left allmulticast mode [ 941.071913][ T6245] bridge_slave_1: left promiscuous mode [ 941.072196][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.809285][ T6245] bridge_slave_0: left allmulticast mode [ 942.809318][ T6245] bridge_slave_0: left promiscuous mode [ 942.809617][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.034974][ T8965] Bluetooth: hci0: command tx timeout [ 943.514591][T11532] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 945.024475][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1379'. [ 945.141555][ T8965] Bluetooth: hci0: command tx timeout [ 947.263197][ T8965] Bluetooth: hci0: command tx timeout [ 949.294917][ T8965] Bluetooth: hci0: command tx timeout [ 949.720987][T11570] vivid-007: ================= START STATUS ================= [ 949.723689][T11570] vivid-007: Generate PTS: true [ 949.723867][T11570] vivid-007: Generate SCR: true [ 949.724123][T11570] tpg source WxH: 320x240 (Y'CbCr) [ 949.724163][T11570] tpg field: 1 [ 949.724197][T11570] tpg crop: (0,0)/320x240 [ 949.724236][T11570] tpg compose: (0,0)/320x240 [ 949.724275][T11570] tpg colorspace: 8 [ 949.724325][T11570] tpg transfer function: 0/0 [ 949.724362][T11570] tpg Y'CbCr encoding: 0/0 [ 949.724398][T11570] tpg quantization: 0/0 [ 949.724434][T11570] tpg RGB range: 0/2 [ 949.724469][T11570] vivid-007: ================== END STATUS ================== [ 957.841672][T11617] kvm: kvm [11616]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcc [ 957.879859][T11617] kvm: kvm [11616]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000015 [ 957.879942][T11617] kvm: kvm [11616]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 959.539320][T11630] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 959.539338][T11630] PKCS7: Only support pkcs7_signedData type [ 965.780212][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.949156][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.999530][ T6245] bond0 (unregistering): Released all slaves [ 967.884064][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 967.907196][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 967.908562][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 967.909814][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 967.942610][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.034772][ T6245] tipc: Disabling bearer [ 969.035300][ T6245] tipc: Left network mode [ 970.108458][ T59] Bluetooth: hci1: command tx timeout [ 972.154636][ T59] Bluetooth: hci1: command tx timeout [ 974.244697][ T59] Bluetooth: hci1: command tx timeout [ 974.949495][ T1234] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 975.222174][ T1234] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 975.222205][ T1234] usb 7-1: config 54 has no interface number 0 [ 975.227669][ T1234] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 975.227697][ T1234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.227717][ T1234] usb 7-1: Product: syz [ 975.227731][ T1234] usb 7-1: Manufacturer: syz [ 975.227746][ T1234] usb 7-1: SerialNumber: syz [ 975.615945][ T9655] usb 7-1: Failed to submit usb control message: -71 [ 975.615982][ T9655] usb 7-1: unable to send the bmi data to the device: -71 [ 975.615999][ T9655] usb 7-1: unable to get target info from device [ 975.616026][ T9655] usb 7-1: could not get target info (-71) [ 975.616418][ T9655] usb 7-1: could not probe fw (-71) [ 975.624712][ T1234] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 975.645134][ T1234] usb 7-1: USB disconnect, device number 3 [ 977.063312][ T8965] Bluetooth: hci1: command tx timeout [ 982.587084][ T6245] hsr_slave_0: left promiscuous mode [ 982.635945][ T6245] hsr_slave_1: left promiscuous mode [ 982.637019][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.637049][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.696072][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.696101][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.911965][ T6245] veth1_macvtap: left promiscuous mode [ 983.582879][ T6245] veth0_macvtap: left promiscuous mode [ 983.583165][ T6245] veth1_vlan: left promiscuous mode [ 983.583347][ T6245] veth0_vlan: left promiscuous mode [ 993.379206][T11834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 993.386556][T11834] block device autoloading is deprecated and will be removed. [ 994.698933][T11844] Invalid source name [ 996.013695][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 996.380660][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 996.841200][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 996.858606][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 996.860324][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 997.579903][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 997.604109][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 997.620885][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 997.623797][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 997.647265][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.263189][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.263269][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.982969][ T8965] Bluetooth: hci2: command tx timeout [ 999.099020][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 999.388848][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 999.770486][ T8965] Bluetooth: hci5: command tx timeout [ 1001.035301][ T8965] Bluetooth: hci2: command tx timeout [ 1001.835310][ T8965] Bluetooth: hci5: command tx timeout [ 1002.289368][T11788] vlan2: entered allmulticast mode [ 1002.289398][T11788] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1003.127612][ T8965] Bluetooth: hci2: command tx timeout [ 1003.925116][ T8965] Bluetooth: hci5: command tx timeout [ 1005.779859][ T8965] Bluetooth: hci2: command tx timeout [ 1005.995131][ T8965] Bluetooth: hci5: command tx timeout [ 1006.315059][ T5947] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1007.289266][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.289326][ T5947] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1007.289350][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.358749][ T5947] usb 7-1: config 0 descriptor?? [ 1007.387213][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 1007.607632][T11680] chnl_net:caif_netlink_parms(): no params data found [ 1007.781302][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1007.808875][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 1007.809662][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1007.828103][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 1007.874810][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 1007.876958][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 1007.877709][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 1007.878651][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 1007.879492][ T5947] pwc: recv_control_msg error -32 req 04 val 1500 [ 1007.887487][ T5947] pwc: recv_control_msg error -32 req 02 val 2500 [ 1007.945131][ T5947] pwc: recv_control_msg error -32 req 02 val 2400 [ 1007.945863][ T5947] pwc: recv_control_msg error -32 req 02 val 2600 [ 1007.946616][ T5947] pwc: recv_control_msg error -32 req 02 val 2900 [ 1008.151159][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 1008.151687][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 1008.310533][ T5947] pwc: Registered as video103. [ 1008.457337][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 1008.682623][ T5947] usb 7-1: USB disconnect, device number 4 [ 1011.923147][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.923387][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.923684][T11680] bridge_slave_0: entered allmulticast mode [ 1011.940435][T11680] bridge_slave_0: entered promiscuous mode [ 1012.012729][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.012911][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.013166][T11680] bridge_slave_1: entered allmulticast mode [ 1012.039196][T11680] bridge_slave_1: entered promiscuous mode [ 1012.695450][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.697596][ T6245] bridge_slave_1: left allmulticast mode [ 1012.697617][ T6245] bridge_slave_1: left promiscuous mode [ 1012.701137][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.836440][ T6245] bridge_slave_0: left allmulticast mode [ 1012.836474][ T6245] bridge_slave_0: left promiscuous mode [ 1012.836766][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.398727][ T6245] bond0 (unregistering): Released all slaves [ 1014.842912][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.811708][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1471'. [ 1015.980434][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.090508][ T6245] bond0 (unregistering): Released all slaves [ 1016.354085][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.956984][T11680] team0: Port device team_slave_0 added [ 1021.962474][T11849] chnl_net:caif_netlink_parms(): no params data found [ 1022.012124][T11857] chnl_net:caif_netlink_parms(): no params data found [ 1022.710766][T11680] team0: Port device team_slave_1 added [ 1025.439972][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 1027.356444][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 1031.239898][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1031.259982][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1031.262034][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1031.263857][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1031.264890][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1032.544677][ T38] audit: type=1800 audit(2000000832.530:38): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1490" name="bus" dev="ramfs" ino=30783 res=0 errno=0 [ 1033.764720][ T59] Bluetooth: hci0: command tx timeout [ 1036.413785][ T59] Bluetooth: hci0: command tx timeout [ 1037.041550][T12053] kvm: MWAIT instruction emulated as NOP! [ 1038.832872][ T8965] Bluetooth: hci0: command tx timeout [ 1040.375135][T11849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.375300][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.375544][T11849] bridge_slave_0: entered allmulticast mode [ 1040.380836][T11849] bridge_slave_0: entered promiscuous mode [ 1040.409237][T11857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.409409][T11857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.409719][T11857] bridge_slave_0: entered allmulticast mode [ 1040.446016][T11857] bridge_slave_0: entered promiscuous mode [ 1040.548560][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.548726][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.548991][T11849] bridge_slave_1: entered allmulticast mode [ 1040.574119][T11849] bridge_slave_1: entered promiscuous mode [ 1040.583840][T11857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.584011][T11857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.584264][T11857] bridge_slave_1: entered allmulticast mode [ 1040.628563][T11857] bridge_slave_1: entered promiscuous mode [ 1040.874956][ T8965] Bluetooth: hci0: command tx timeout [ 1046.156311][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.161805][T11857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.179429][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.224053][T11857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.515792][T11849] team0: Port device team_slave_0 added [ 1048.649006][T11857] team0: Port device team_slave_0 added [ 1048.707595][T11849] team0: Port device team_slave_1 added [ 1048.722772][T11857] team0: Port device team_slave_1 added [ 1049.765446][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1051.082335][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.082978][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.083010][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1051.189382][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1051.189494][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.782399][ T31] usb 7-1: config 0 descriptor?? [ 1052.094909][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 1052.095058][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1052.157300][ T31] usb 7-1: USB disconnect, device number 5 [ 1052.317953][ T6245] bridge_slave_1: left allmulticast mode [ 1052.317994][ T6245] bridge_slave_1: left promiscuous mode [ 1052.318282][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.398217][ T6245] bridge_slave_0: left allmulticast mode [ 1052.398250][ T6245] bridge_slave_0: left promiscuous mode [ 1052.400017][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.727646][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.825840][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.899663][ T6245] bond0 (unregistering): Released all slaves [ 1052.977039][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.977056][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.977085][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.983128][T11857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.983144][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.983171][T11857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.989938][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.989956][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.989986][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.236560][T11857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.236576][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.236599][T11857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.388904][T11849] hsr_slave_0: entered promiscuous mode [ 1053.392565][T11849] hsr_slave_1: entered promiscuous mode [ 1053.671908][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 1053.856600][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 1054.693046][T11857] hsr_slave_0: entered promiscuous mode [ 1054.700647][T11857] hsr_slave_1: entered promiscuous mode [ 1054.701825][T11857] debugfs: 'hsr0' already exists in 'hsr' [ 1054.701850][T11857] Cannot create hsr debugfs directory [ 1055.221456][T12019] chnl_net:caif_netlink_parms(): no params data found [ 1056.058096][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1056.075066][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1056.079667][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1056.081525][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1056.083304][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1056.565269][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.565502][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.565719][T12019] bridge_slave_0: entered allmulticast mode [ 1056.569744][T12019] bridge_slave_0: entered promiscuous mode [ 1056.626565][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.626728][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.626994][T12019] bridge_slave_1: entered allmulticast mode [ 1056.634461][T12019] bridge_slave_1: entered promiscuous mode [ 1056.831180][ T6245] bridge_slave_1: left allmulticast mode [ 1056.831215][ T6245] bridge_slave_1: left promiscuous mode [ 1056.833511][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.926491][ T6245] bridge_slave_0: left allmulticast mode [ 1056.926526][ T6245] bridge_slave_0: left promiscuous mode [ 1056.926820][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.288335][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.436490][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.509058][ T6245] bond0 (unregistering): Released all slaves [ 1057.827162][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.911752][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.015973][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1058.020450][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1058.024126][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1058.050212][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1058.051460][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1058.073018][ T6245] hsr_slave_0: left promiscuous mode [ 1058.114853][ T6245] hsr_slave_1: left promiscuous mode [ 1058.115828][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.156001][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.236547][ T8965] Bluetooth: hci1: command tx timeout [ 1059.177295][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 1059.326581][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 1059.691286][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.691367][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.154897][ T8965] Bluetooth: hci2: command tx timeout [ 1060.302871][T12019] team0: Port device team_slave_0 added [ 1060.336717][ T8965] Bluetooth: hci1: command tx timeout [ 1060.382969][T12019] team0: Port device team_slave_1 added [ 1060.829661][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.829679][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.829717][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.876157][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.876174][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.876201][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.551909][T12019] hsr_slave_0: entered promiscuous mode [ 1061.553444][T12019] hsr_slave_1: entered promiscuous mode [ 1062.234642][ T8965] Bluetooth: hci2: command tx timeout [ 1062.394770][ T59] Bluetooth: hci1: command tx timeout [ 1062.592686][T12153] chnl_net:caif_netlink_parms(): no params data found [ 1063.587969][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.588119][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.588355][T12153] bridge_slave_0: entered allmulticast mode [ 1063.605890][T12153] bridge_slave_0: entered promiscuous mode [ 1063.613341][T12159] chnl_net:caif_netlink_parms(): no params data found [ 1063.684348][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.687295][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.687592][T12153] bridge_slave_1: entered allmulticast mode [ 1063.697608][T12153] bridge_slave_1: entered promiscuous mode [ 1064.116674][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.174452][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.315092][ T59] Bluetooth: hci2: command tx timeout [ 1064.474936][ T59] Bluetooth: hci1: command tx timeout [ 1064.826195][T12153] team0: Port device team_slave_0 added [ 1064.979984][T12019] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1065.007389][T12153] team0: Port device team_slave_1 added [ 1065.011011][T12159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.011228][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.011468][T12159] bridge_slave_0: entered allmulticast mode [ 1065.016275][T12159] bridge_slave_0: entered promiscuous mode [ 1065.058127][T12019] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1065.216782][T12159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.216939][T12159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.217190][T12159] bridge_slave_1: entered allmulticast mode [ 1065.220094][T12159] bridge_slave_1: entered promiscuous mode [ 1065.223429][T12019] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1065.525836][ T6245] bridge_slave_1: left allmulticast mode [ 1065.525870][ T6245] bridge_slave_1: left promiscuous mode [ 1065.526116][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.628495][ T6245] bridge_slave_0: left allmulticast mode [ 1065.628530][ T6245] bridge_slave_0: left promiscuous mode [ 1065.628821][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.160696][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.266955][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.328776][ T6245] bond0 (unregistering): Released all slaves [ 1066.375957][T12019] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1066.395471][ T59] Bluetooth: hci2: command tx timeout [ 1066.453927][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.453945][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.453971][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.597392][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.597411][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.597447][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.618404][T12159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.684217][T12159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.904808][ T6245] hsr_slave_0: left promiscuous mode [ 1066.926397][ T6245] hsr_slave_1: left promiscuous mode [ 1066.927987][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.965879][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.897070][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 1068.042782][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 1069.089072][T12159] team0: Port device team_slave_0 added [ 1069.113302][T12153] hsr_slave_0: entered promiscuous mode [ 1069.121442][T12153] hsr_slave_1: entered promiscuous mode [ 1069.122402][T12153] debugfs: 'hsr0' already exists in 'hsr' [ 1069.122424][T12153] Cannot create hsr debugfs directory [ 1069.171145][T12159] team0: Port device team_slave_1 added [ 1069.511042][T12159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.511061][T12159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.511092][T12159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.565633][T12159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.565651][T12159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.565680][T12159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.032844][T12159] hsr_slave_0: entered promiscuous mode [ 1070.034170][T12159] hsr_slave_1: entered promiscuous mode [ 1070.048085][T12159] debugfs: 'hsr0' already exists in 'hsr' [ 1070.048113][T12159] Cannot create hsr debugfs directory [ 1071.227059][T12153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1071.287080][T12153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1071.336376][T12153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1071.385829][T12153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1071.639188][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.832969][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.890058][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.890645][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.063098][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.063272][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.788936][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.028391][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.116774][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.116932][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.196300][T12159] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1073.231918][T12159] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1073.275294][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.275583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.283460][T12159] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1073.324727][T12159] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1073.465462][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.903675][T12159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.038304][T12159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.082596][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.084752][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.195737][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.195895][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.654881][T12019] veth0_vlan: entered promiscuous mode [ 1074.678639][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.760459][T12019] veth1_vlan: entered promiscuous mode [ 1074.955318][T12019] veth0_macvtap: entered promiscuous mode [ 1075.035755][T12019] veth1_macvtap: entered promiscuous mode [ 1075.148777][T12019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.213643][T12019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.336411][ T6245] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.339558][ T6245] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.340392][ T6245] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.341143][ T6245] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.871706][T12159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.037872][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.037895][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.233467][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.233486][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.455280][T12153] veth0_vlan: entered promiscuous mode [ 1076.517117][T12153] veth1_vlan: entered promiscuous mode [ 1078.265035][T12153] veth0_macvtap: entered promiscuous mode [ 1078.294670][T12153] veth1_macvtap: entered promiscuous mode [ 1079.000336][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.064814][T12159] veth0_vlan: entered promiscuous mode [ 1079.070616][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.110569][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.110620][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.110659][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.110696][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.127299][T12159] veth1_vlan: entered promiscuous mode [ 1079.584425][T12159] veth0_macvtap: entered promiscuous mode [ 1079.629174][ T9655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.629196][ T9655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.631773][T12159] veth1_macvtap: entered promiscuous mode [ 1079.855361][T12159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.881502][ T9656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.881524][ T9656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.889021][T12159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.024767][ T9655] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.027082][ T9655] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.039396][ T9655] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.387876][ C0] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1080.497889][T12356] random: crng reseeded on system resumption [ 1081.369762][ T9655] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.914287][ T6219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.914310][ T6219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.214701][T10769] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1088.325928][T10519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.325952][T10519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.376411][T10769] usb 7-1: Using ep0 maxpacket: 16 [ 1088.378172][T10769] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1088.378196][T10769] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1088.425894][T10769] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1088.425926][T10769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.425947][T10769] usb 7-1: Product: syz [ 1088.425962][T10769] usb 7-1: Manufacturer: syz [ 1088.425977][T10769] usb 7-1: SerialNumber: syz [ 1088.609088][T10769] usb 7-1: config 0 descriptor?? [ 1088.865070][T10769] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1088.865127][T10769] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1089.761602][T10769] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1089.775843][T10769] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1092.078505][T10769] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1092.079015][T10769] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1092.079394][T10769] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1092.079733][T10769] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1092.080095][T10769] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1092.080521][T10769] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1093.768819][T10769] usb 7-1: USB disconnect, device number 6 [ 1096.102173][T12427] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1098.521606][T12438] kvm: kvm [12437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 1100.044981][T12453] CIFS mount error: No usable UNC path provided in device string! [ 1100.044981][T12453] [ 1100.045065][T12453] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1113.576894][T12536] qnx6: unable to read the first superblock [ 1122.166574][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.166788][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.644684][ T1234] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1123.988571][ T1234] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.988660][ T1234] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1123.988687][ T1234] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.003593][ T1234] usb 10-1: config 0 descriptor?? [ 1125.936513][ T1234] usb 10-1: can't set config #0, error -71 [ 1125.977239][ T1234] usb 10-1: USB disconnect, device number 2 [ 1127.279974][T12622] Invalid logical block size (535) [ 1127.392219][T12633] Illegal XDP return value 4294967274 on prog (id 360) dev N/A, expect packet loss! [ 1131.790524][T12654] xt_policy: too many policy elements [ 1135.554311][T12675] use of bytesused == 0 is deprecated and will be removed in the future, [ 1135.554328][T12675] use the actual size instead. [ 1143.764516][T12733] CIFS mount error: No usable UNC path provided in device string! [ 1143.764516][T12733] [ 1143.764568][T12733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1156.107078][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1610'. [ 1156.130361][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 1161.753187][T12802] CIFS mount error: No usable UNC path provided in device string! [ 1161.753187][T12802] [ 1161.753213][T12802] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1162.265751][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1162.845930][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1163.074875][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1163.118620][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1163.119240][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1165.275741][ T8965] Bluetooth: hci3: command tx timeout [ 1167.370523][ T8965] Bluetooth: hci3: command tx timeout [ 1171.294660][ T8965] Bluetooth: hci3: command tx timeout [ 1173.358588][ T8965] Bluetooth: hci3: command tx timeout [ 1177.594030][T12847] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1177.594030][T12847] program syz.8.1628 not setting count and/or reply_len properly [ 1179.552501][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1629'. [ 1182.628016][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.629395][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.159127][T12797] chnl_net:caif_netlink_parms(): no params data found [ 1185.524955][T12880] Bluetooth: hci2: command 0x0406 tx timeout [ 1192.164336][T12938] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955161 [ 1194.797754][T10519] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.375038][ T8965] Bluetooth: min 0 < 6 [ 1202.394996][ T8965] Bluetooth: hci6: command 0x0406 tx timeout [ 1203.436816][T10519] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.596736][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.596962][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.597253][T12797] bridge_slave_0: entered allmulticast mode [ 1203.629761][T12797] bridge_slave_0: entered promiscuous mode [ 1203.675149][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.675337][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.678167][T12797] bridge_slave_1: entered allmulticast mode [ 1203.705011][T12797] bridge_slave_1: entered promiscuous mode [ 1205.468541][T12880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1206.258627][T12880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1206.263916][T12880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1206.663098][T12894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1206.663989][T12894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1208.921167][T12894] Bluetooth: hci1: command tx timeout [ 1210.954695][T12894] Bluetooth: hci1: command tx timeout [ 1210.991479][T10519] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.157813][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.209649][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.544501][T12894] Bluetooth: hci1: command tx timeout [ 1217.668926][T12894] Bluetooth: hci1: command tx timeout [ 1220.063989][T10519] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.764647][ T8965] Bluetooth: hci1: command 0x0405 tx timeout [ 1222.577259][ T8965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1222.629370][ T8965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1222.632856][ T8965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1222.651487][ T8965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1222.652397][ T8965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1226.312357][T12894] Bluetooth: hci0: command tx timeout [ 1228.394799][ T8965] Bluetooth: hci0: command tx timeout [ 1230.890849][ T8965] Bluetooth: hci0: command tx timeout [ 1232.683795][T13113] capability: warning: `syz.6.1689' uses 32-bit capabilities (legacy support in use) [ 1232.961722][T12894] Bluetooth: hci0: command tx timeout [ 1234.419758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.969976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.105343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.603408][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.862311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.984122][T12894] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1235.984151][T12894] CPU: 1 UID: 0 PID: 12894 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1235.984176][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1235.984190][T12894] Workqueue: hci6 hci_rx_work [ 1235.984216][T12894] Call Trace: [ 1235.984224][T12894] [ 1235.984234][T12894] dump_stack_lvl+0x189/0x250 [ 1235.984272][T12894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.984305][T12894] ? __pfx__printk+0x10/0x10 [ 1235.984335][T12894] ? kernfs_path_from_node+0x2c/0x280 [ 1235.984357][T12894] ? kernfs_path_from_node+0x243/0x280 [ 1235.984378][T12894] ? kernfs_path_from_node+0x2c/0x280 [ 1235.984407][T12894] sysfs_create_dir_ns+0x259/0x280 [ 1235.984441][T12894] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1235.984467][T12894] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1235.984503][T12894] ? rt_spin_unlock+0x65/0x80 [ 1235.984531][T12894] kobject_add_internal+0x5a5/0xb50 [ 1235.984575][T12894] kobject_add+0x155/0x220 [ 1235.984612][T12894] ? __pfx_kobject_add+0x10/0x10 [ 1235.984651][T12894] ? get_device_parent+0x370/0x3a0 [ 1235.984688][T12894] device_add+0x408/0xb50 [ 1235.984725][T12894] hci_conn_add_sysfs+0xd5/0x1e0 [ 1235.984768][T12894] le_conn_complete_evt+0xc3a/0x1220 [ 1235.984812][T12894] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1235.984840][T12894] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1235.984869][T12894] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.984902][T12894] ? skb_pull_data+0xfb/0x200 [ 1235.984931][T12894] hci_le_conn_complete_evt+0x187/0x450 [ 1235.984967][T12894] hci_event_packet+0x78f/0x1200 [ 1235.984992][T12894] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1235.985021][T12894] ? __pfx_hci_event_packet+0x10/0x10 [ 1235.985042][T12894] ? __pfx_migrate_enable+0x10/0x10 [ 1235.985078][T12894] ? hci_send_to_monitor+0xe2/0x570 [ 1235.985110][T12894] hci_rx_work+0x46a/0xe80 [ 1235.985142][T12894] ? process_scheduled_works+0x9ef/0x17b0 [ 1235.985172][T12894] process_scheduled_works+0xade/0x17b0 [ 1235.985235][T12894] ? __pfx_process_scheduled_works+0x10/0x10 [ 1235.985283][T12894] worker_thread+0x8a0/0xda0 [ 1235.985314][T12894] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1235.985353][T12894] ? __kthread_parkme+0x7b/0x200 [ 1235.985394][T12894] kthread+0x711/0x8a0 [ 1235.985431][T12894] ? __pfx_worker_thread+0x10/0x10 [ 1235.985458][T12894] ? __pfx_kthread+0x10/0x10 [ 1235.985498][T12894] ? __pfx_kthread+0x10/0x10 [ 1235.985532][T12894] ret_from_fork+0x3fc/0x770 [ 1235.985565][T12894] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.985600][T12894] ? __switch_to_asm+0x39/0x70 [ 1235.985620][T12894] ? __switch_to_asm+0x33/0x70 [ 1235.985638][T12894] ? __pfx_kthread+0x10/0x10 [ 1235.985671][T12894] ret_from_fork_asm+0x1a/0x30 [ 1235.985712][T12894] [ 1235.992524][T12894] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1235.992584][T12894] Bluetooth: hci6: failed to register connection device [ 1236.360268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.213641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.815218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.051404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.731788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.128470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.795033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.249544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.367059][ T8965] Bluetooth: hci6: command 0x0406 tx timeout [ 1243.500897][T10519] bridge_slave_1: left allmulticast mode [ 1243.500940][T10519] bridge_slave_1: left promiscuous mode [ 1243.501235][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.713963][T10519] bridge_slave_0: left allmulticast mode [ 1243.714000][T10519] bridge_slave_0: left promiscuous mode [ 1243.714281][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.010746][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.010829][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.761113][T13185] ALSA: mixer_oss: invalid OSS volume '' [ 1252.955286][T10769] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1253.124868][T10769] usb 10-1: Using ep0 maxpacket: 32 [ 1253.127683][T10769] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1253.130976][T10769] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1253.131007][T10769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.131029][T10769] usb 10-1: Product: syz [ 1253.131044][T10769] usb 10-1: Manufacturer: syz [ 1253.131059][T10769] usb 10-1: SerialNumber: syz [ 1253.233786][T10769] usb 10-1: config 0 descriptor?? [ 1253.320901][T10769] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1254.518821][ T57] usb 10-1: Failed to submit usb control message: -110 [ 1254.518863][ T57] usb 10-1: unable to send the bmi data to the device: -110 [ 1254.518882][ T57] usb 10-1: unable to get target info from device [ 1254.518898][ T57] usb 10-1: could not get target info (-110) [ 1254.518917][ T57] usb 10-1: could not probe fw (-110) [ 1255.238476][T13233] ALSA: mixer_oss: invalid OSS volume '' [ 1261.185380][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.228798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.480605][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.521261][T10519] bond0 (unregistering): Released all slaves [ 1262.942703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.983815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1263.722569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1263.969605][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.055244][T13234] usb 10-1: USB disconnect, device number 3 [ 1264.425341][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.017339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.448547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.399493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.286232][T12894] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1269.304055][T12894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1269.305623][T12894] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1269.306452][T12894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1269.307508][T12894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1273.073180][T12894] Bluetooth: hci3: command tx timeout [ 1275.825846][T12894] Bluetooth: hci3: command tx timeout [ 1277.851920][T12894] Bluetooth: hci3: command tx timeout [ 1278.789044][ T8965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1278.808407][ T8965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1278.827123][ T8965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1278.914722][ T8965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1278.918246][ T8965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1280.015665][T12894] Bluetooth: hci3: command tx timeout [ 1281.746441][T12894] Bluetooth: hci1: command tx timeout [ 1283.660387][T10519] hsr_slave_0: left promiscuous mode [ 1283.728033][T13378] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 1283.754626][ T8965] Bluetooth: hci1: command tx timeout [ 1283.754754][T10519] hsr_slave_1: left promiscuous mode [ 1283.755785][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.755817][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.845423][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.845461][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.404139][T10519] veth1_macvtap: left promiscuous mode [ 1285.404273][T10519] veth0_macvtap: left promiscuous mode [ 1285.422243][T10519] veth1_vlan: left promiscuous mode [ 1285.422474][T10519] veth0_vlan: left promiscuous mode [ 1286.049241][ T8965] Bluetooth: hci1: command tx timeout [ 1288.074631][ T8965] Bluetooth: hci1: command tx timeout [ 1294.136778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.249671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.546906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.884292][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.903006][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.943027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.193502][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.503684][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.702206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.734681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.090042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.332620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.674536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.763074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.875844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.001095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.157515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.414357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.787240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.193992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.710311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.055952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.168334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.874188][ T6454] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1300.484746][ T6454] usb 10-1: device not accepting address 4, error -71 [ 1301.102217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.059553][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.248913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.466818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.897055][T13469] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1302.897081][T13469] ref_ctr increment failed for inode: 0x143 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88803681da00 [ 1302.909399][ T38] audit: type=1804 audit(2000001102.920:39): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1765" name="/newroot/58/file0" dev="tmpfs" ino=323 res=1 errno=0 [ 1303.210162][T13474] binder_alloc: 13470: binder_alloc_buf, no vma [ 1303.908540][ T38] audit: type=1326 audit(2000001103.890:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13470 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd16fbebe9 code=0x7fc00000 [ 1304.281777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.937039][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.937117][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.096570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.319353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.538178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.648554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.821338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.157127][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.194790][T13493] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.195144][T13493] exFAT-fs (loop9): unable to read boot sector [ 1308.195156][T13493] exFAT-fs (loop9): failed to read boot sector [ 1308.195167][T13493] exFAT-fs (loop9): failed to recognize exfat type [ 1308.786998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.097660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.134725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.515631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.681181][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.713479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.033010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.087355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.325620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.422340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.507434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.912968][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.080597][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1313.081334][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1313.115934][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1313.116155][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1314.037140][T11000] libceph: connect (1)[c::]:6789 error -101 [ 1314.037369][T11000] libceph: mon0 (1)[c::]:6789 connect error [ 1314.845194][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1314.845411][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1314.881348][T13527] ceph: No mds server is up or the cluster is laggy [ 1320.544613][T13562] tty tty38: ldisc open failed (-12), clearing slot 37 [ 1324.362235][T10519] team0 (unregistering): Port device team_slave_1 removed [ 1324.601100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.675325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.733468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.788236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.922537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.002253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.147520][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1792'. [ 1325.147568][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1792'. [ 1325.219629][T13586] XFS (nullb0): Invalid superblock magic number [ 1325.452232][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.517335][T10519] team0 (unregistering): Port device team_slave_0 removed [ 1325.836413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.873603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.962129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.065236][T13605] Invalid ELF header magic: != ELF [ 1326.382164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.196770][T13611] netlink: 'syz.6.1797': attribute type 18 has an invalid length. [ 1327.356592][T12894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1327.378992][T12894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1327.383278][T12894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1327.384648][T12894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1327.399914][T12894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1327.467272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.554956][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.111963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.235386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.578679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.860311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.085213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.939949][T12894] Bluetooth: hci0: command tx timeout [ 1332.012198][T12894] Bluetooth: hci0: command tx timeout [ 1332.604058][ T44] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1332.794926][ T44] usb 10-1: Using ep0 maxpacket: 16 [ 1332.862580][ T44] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.862678][ T44] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1332.862972][ T44] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1332.863101][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.426817][ T44] usb 10-1: config 0 descriptor?? [ 1333.911179][ T44] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 1334.163295][T12894] Bluetooth: hci0: command tx timeout [ 1334.179412][T13633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.862142][T13633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.081877][T13633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.082506][T13633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.398439][T13089] usb 10-1: USB disconnect, device number 6 [ 1336.646496][T12894] Bluetooth: hci0: command tx timeout [ 1339.453420][ T8965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1339.596849][ T8965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1339.610442][ T8965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1339.646643][ T8965] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1339.655029][ T8965] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1340.233120][T13689] block nbd0: Attempted send on invalid socket [ 1340.233146][T13689] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1340.233297][T13689] SQUASHFS error: Failed to read block 0x0: -5 [ 1340.233351][T13689] unable to read squashfs_super_block [ 1341.681094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.780547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.990791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.141361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.735287][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.737619][T12894] Bluetooth: hci5: command tx timeout [ 1342.765301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.790948][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.120646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.341879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.471442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.083500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.291802][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.449446][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.635133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.056508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.073624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.150651][T12894] Bluetooth: hci5: command tx timeout [ 1345.651473][T13710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1345.651841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.135157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.153772][T13717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.205761][T12894] Bluetooth: hci5: command tx timeout [ 1349.274860][T12894] Bluetooth: hci5: command tx timeout [ 1355.192621][T13755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.525489][T13743] sched: DL replenish lagged too much [ 1367.508243][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.508325][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.714325][T13677] chnl_net:caif_netlink_parms(): no params data found [ 1370.639032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.705113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.897973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.295453][T13612] chnl_net:caif_netlink_parms(): no params data found [ 1377.524565][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.524752][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.525011][T13677] bridge_slave_0: entered allmulticast mode [ 1377.528059][T13677] bridge_slave_0: entered promiscuous mode [ 1377.566576][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.566720][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.566983][T13677] bridge_slave_1: entered allmulticast mode [ 1377.569970][T13677] bridge_slave_1: entered promiscuous mode [ 1377.991710][T13677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.309772][T13677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.310451][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.310595][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.310790][T13612] bridge_slave_0: entered allmulticast mode [ 1378.313623][T13612] bridge_slave_0: entered promiscuous mode [ 1378.436142][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.436375][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.436575][T13612] bridge_slave_1: entered allmulticast mode [ 1378.439300][T13612] bridge_slave_1: entered promiscuous mode [ 1378.663258][T10519] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.901287][T13677] team0: Port device team_slave_0 added [ 1379.148383][T10519] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.218240][T13677] team0: Port device team_slave_1 added [ 1379.232007][T13612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.349938][T13612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.549258][T10519] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.690143][T13677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.690178][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1379.690207][T13677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.896605][T13677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.896618][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1379.896636][T13677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.100525][T10519] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.171515][T13612] team0: Port device team_slave_0 added [ 1380.196868][T13612] team0: Port device team_slave_1 added [ 1380.609293][T13612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.609312][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.609339][T13612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.638996][T13677] hsr_slave_0: entered promiscuous mode [ 1380.640683][T13677] hsr_slave_1: entered promiscuous mode [ 1380.641854][T13677] debugfs: 'hsr0' already exists in 'hsr' [ 1380.641885][T13677] Cannot create hsr debugfs directory [ 1380.668369][T13612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.668386][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.668418][T13612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.431937][T13612] hsr_slave_0: entered promiscuous mode [ 1381.433484][T13612] hsr_slave_1: entered promiscuous mode [ 1381.450141][T13612] debugfs: 'hsr0' already exists in 'hsr' [ 1381.450168][T13612] Cannot create hsr debugfs directory [ 1382.136779][T10519] bridge_slave_1: left allmulticast mode [ 1382.136814][T10519] bridge_slave_1: left promiscuous mode [ 1382.137126][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.217245][T10519] bridge_slave_0: left allmulticast mode [ 1382.217281][T10519] bridge_slave_0: left promiscuous mode [ 1382.217567][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.272527][T10519] bridge_slave_1: left allmulticast mode [ 1382.272566][T10519] bridge_slave_1: left promiscuous mode [ 1382.272834][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.346138][T10519] bridge_slave_0: left allmulticast mode [ 1382.346173][T10519] bridge_slave_0: left promiscuous mode [ 1382.346486][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.918789][T10519] bond0 (unregistering): Released all slaves [ 1383.124216][T10519] bond0 (unregistering): Released all slaves [ 1383.346418][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.430185][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.507370][T10519] bond0 (unregistering): Released all slaves [ 1384.993284][ T8965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1385.011571][ T8965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1385.055196][ T8965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1385.077202][ T8965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1385.092004][ T8965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1385.815402][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.885202][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.913913][T10519] bond0 (unregistering): Released all slaves [ 1387.214461][T12894] Bluetooth: hci1: command tx timeout [ 1389.284910][T12894] Bluetooth: hci1: command tx timeout [ 1389.366312][T10519] hsr_slave_0: left promiscuous mode [ 1389.397827][T10519] hsr_slave_1: left promiscuous mode [ 1389.400594][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.400627][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.445784][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.445823][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.552230][T10519] veth1_macvtap: left promiscuous mode [ 1389.552364][T10519] veth0_macvtap: left promiscuous mode [ 1389.552672][T10519] veth1_vlan: left promiscuous mode [ 1389.552908][T10519] veth0_vlan: left promiscuous mode [ 1391.354868][T12894] Bluetooth: hci1: command tx timeout [ 1393.095013][T10519] team0 (unregistering): Port device team_slave_1 removed [ 1393.395436][T10519] team0 (unregistering): Port device team_slave_0 removed [ 1393.434557][T12894] Bluetooth: hci1: command tx timeout [ 1396.980150][T13877] chnl_net:caif_netlink_parms(): no params data found [ 1397.326231][ T8965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1397.356165][ T8965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.357980][ T8965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.364887][ T8965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.374609][ T8965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1398.247564][T13877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.247655][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.247864][T13877] bridge_slave_0: entered allmulticast mode [ 1398.249643][T13877] bridge_slave_0: entered promiscuous mode [ 1398.281942][T13877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.282090][T13877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.282383][T13877] bridge_slave_1: entered allmulticast mode [ 1398.305558][T13877] bridge_slave_1: entered promiscuous mode [ 1398.579799][T13877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.633967][T13877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.007136][T13877] team0: Port device team_slave_0 added [ 1399.021864][T13877] team0: Port device team_slave_1 added [ 1399.356004][T13877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.356024][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.356053][T13877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.358751][T13877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.358763][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.358784][T13877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.434672][T12894] Bluetooth: hci0: command tx timeout [ 1399.796605][T13877] hsr_slave_0: entered promiscuous mode [ 1399.798109][T13877] hsr_slave_1: entered promiscuous mode [ 1400.346844][T13904] chnl_net:caif_netlink_parms(): no params data found [ 1400.894908][T13904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.895146][T13904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.895380][T13904] bridge_slave_0: entered allmulticast mode [ 1400.899002][T13904] bridge_slave_0: entered promiscuous mode [ 1400.913533][T13904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.913693][T13904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.913967][T13904] bridge_slave_1: entered allmulticast mode [ 1400.917172][T13904] bridge_slave_1: entered promiscuous mode [ 1401.312040][T13904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.516114][T12894] Bluetooth: hci0: command tx timeout [ 1401.675940][T13877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.759555][T10519] bridge_slave_1: left allmulticast mode [ 1401.759590][T10519] bridge_slave_1: left promiscuous mode [ 1401.759879][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.850620][T10519] bridge_slave_0: left allmulticast mode [ 1401.850656][T10519] bridge_slave_0: left promiscuous mode [ 1401.850973][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.939113][T10519] bridge_slave_1: left allmulticast mode [ 1401.939148][T10519] bridge_slave_1: left promiscuous mode [ 1401.939399][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.036460][T10519] bridge_slave_0: left allmulticast mode [ 1402.036494][T10519] bridge_slave_0: left promiscuous mode [ 1402.040149][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.515906][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.605480][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.690956][T10519] bond0 (unregistering): Released all slaves [ 1402.969867][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.051802][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.108963][T10519] bond0 (unregistering): Released all slaves [ 1403.161993][T13904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.441637][T13877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.595770][T12894] Bluetooth: hci0: command tx timeout [ 1403.931665][T13877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.980078][T13904] team0: Port device team_slave_0 added [ 1404.104560][T10519] hsr_slave_0: left promiscuous mode [ 1404.124769][T10519] hsr_slave_1: left promiscuous mode [ 1404.125781][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.187681][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.275016][T10519] hsr_slave_0: left promiscuous mode [ 1404.324655][T10519] hsr_slave_1: left promiscuous mode [ 1404.325604][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.356891][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.238440][T10519] team0 (unregistering): Port device team_slave_1 removed [ 1405.425294][T10519] team0 (unregistering): Port device team_slave_0 removed [ 1405.675020][T12894] Bluetooth: hci0: command tx timeout [ 1406.695618][T10519] team0 (unregistering): Port device team_slave_1 removed [ 1406.858242][T10519] team0 (unregistering): Port device team_slave_0 removed [ 1407.700699][T13904] team0: Port device team_slave_1 added [ 1408.031018][T13877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.220653][T13904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.220673][T13904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.220700][T13904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.244987][T13904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.245010][T13904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.245041][T13904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.636898][T13904] hsr_slave_0: entered promiscuous mode [ 1408.651201][T13904] hsr_slave_1: entered promiscuous mode [ 1408.652218][T13904] debugfs: 'hsr0' already exists in 'hsr' [ 1408.652239][T13904] Cannot create hsr debugfs directory [ 1409.398966][T13877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1409.474949][T13877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1409.605619][T13877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1409.696444][T13877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1410.505498][T13904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1410.534480][T13904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1410.579977][T13904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1410.609787][T13904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1410.799179][T13877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.892177][T13877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.921614][T13489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.921806][T13489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.961771][T13489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.962061][T13489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.181461][T13904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.281881][T13904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.354204][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.354567][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.409687][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.410223][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.938074][T13877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.099379][T13877] veth0_vlan: entered promiscuous mode [ 1412.142577][T13877] veth1_vlan: entered promiscuous mode [ 1412.245361][T13904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.333249][T13877] veth0_macvtap: entered promiscuous mode [ 1412.370584][T13877] veth1_macvtap: entered promiscuous mode [ 1412.493235][T13877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.504787][T13904] veth0_vlan: entered promiscuous mode [ 1412.525810][T13877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.590023][T13904] veth1_vlan: entered promiscuous mode [ 1412.591627][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.592545][ T8724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.592902][ T8724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.593350][ T8724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.075148][T13904] veth0_macvtap: entered promiscuous mode [ 1413.092464][T13904] veth1_macvtap: entered promiscuous mode [ 1413.144182][ T9655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.144205][ T9655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.199825][T13904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.250289][T13904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.317232][ T9655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.317253][ T9655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.318367][T10519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.334463][T10519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.360186][ T9655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.362564][ T9655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.213615][ T8724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.213639][ T8724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.668695][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.668718][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.274035][T14116] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1428.341172][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.341955][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1440.738064][T14179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.758482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1445.784490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1445.909439][T14238] random: crng reseeded on system resumption [ 1446.757438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.923972][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.592253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.881978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.008184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.054087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.430054][T14295] input: syz0 as /devices/virtual/input/input13 [ 1467.371454][T14344] hpfs: Bad magic ... probably not HPFS [ 1470.116387][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 1473.653105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.767125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.236976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.767160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.922680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.072630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.262008][ T38] audit: type=1400 audit(2000001275.300:41): lsm=SMACK fn=smack_ipc_permission action=denied subject="w" object="_" requested=w pid=14402 comm="syz.1.1933" ipc_key=0 [ 1475.540458][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.728624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.879574][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.615589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.769526][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1477.589352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.947126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.475034][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.824845][ C0] vkms_vblank_simulate: vblank timer overrun [ 1479.051886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.371888][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1946'. [ 1489.762764][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.762860][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.944504][T14543] binder: 14536:14543 ioctl c0306201 200000000040 returned -14 [ 1495.439214][T14551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1959'. [ 1498.264038][T14563] nfs: Deprecated parameter 'nointr' [ 1500.066707][T14570] Bluetooth: MGMT ver 1.23 [ 1502.504594][ T38] audit: type=1326 audit(2000001302.540:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14574 comm="syz.1.1966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9e4c8ebe9 code=0x0 [ 1504.824529][T14608] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1507.392687][T14610] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1513.167640][ T8965] Bluetooth: hci1: command 0x0406 tx timeout [ 1529.577629][T14745] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1529.577854][T14745] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1530.996005][T14753] qnx6: unable to read the first superblock [ 1538.765777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.122342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.368380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.785781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.812172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1540.095972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1540.624577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1540.677515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1540.740152][ T8965] Bluetooth: hci3: command 0x1003 tx timeout [ 1540.851710][T12894] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1541.127553][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.629484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.725733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.778453][T14819] Invalid source name [ 1542.778472][T14819] UBIFS error (pid: 14819): cannot open "ubifs", error -22 [ 1542.835106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.393171][T13089] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1545.667071][T13089] usb 10-1: Using ep0 maxpacket: 8 [ 1545.668687][T13089] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1545.668731][T13089] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1545.668746][T13089] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1545.668764][T13089] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1545.668780][T13089] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1545.668810][T13089] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1545.668826][T13089] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.937468][T14840] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1545.937501][T14840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1545.937676][T14840] vhci_hcd vhci_hcd.0: Device attached [ 1546.341045][T13089] usb 10-1: usb_control_msg returned -32 [ 1546.341079][T13089] usbtmc 10-1:16.0: can't read capabilities [ 1547.385459][ T6454] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1547.643949][T14846] vhci_hcd: connection reset by peer [ 1547.655072][T12600] vhci_hcd: stop threads [ 1547.655087][T12600] vhci_hcd: release socket [ 1547.656187][T12600] vhci_hcd: disconnect device [ 1550.604529][T12347] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1550.634101][ T44] usb 10-1: USB disconnect, device number 7 [ 1550.774501][T12347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.774530][T12347] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1550.774570][T12347] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1550.774594][T12347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.812181][T12347] usb 4-1: config 0 descriptor?? [ 1551.843658][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.843738][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.987577][T12347] usb 4-1: USB disconnect, device number 9 [ 1552.947641][ T6454] vhci_hcd: vhci_device speed not set [ 1569.374628][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.841388][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.762090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.166375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.185485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.666971][T14968] libceph: resolve '400' (ret=-3): failed [ 1573.137319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.407429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.668038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.676714][T15007] binder: 14999:15007 ioctl c0306201 200000000040 returned -22 [ 1588.910404][ T8965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1588.936410][ T8965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1589.152928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.165207][ T8965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1589.199260][ T8965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1589.200114][ T8965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1589.273063][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.236606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.362404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.960601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.249335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.314086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.744751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.165443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.394458][T12894] Bluetooth: hci3: command tx timeout [ 1594.475094][T12894] Bluetooth: hci3: command tx timeout [ 1595.184607][T15081] hub 9-0:1.0: USB hub found [ 1595.186490][T15081] hub 9-0:1.0: 1 port detected [ 1596.584866][T12894] Bluetooth: hci3: command tx timeout [ 1598.559243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.862394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.875719][T12894] Bluetooth: hci3: command tx timeout [ 1600.753295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.527531][T15111] random: crng reseeded on system resumption [ 1602.656781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.820765][T15124] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1604.820834][T15124] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1604.821217][T15124] vhci_hcd vhci_hcd.0: Device attached [ 1605.243760][T12347] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 1605.555003][T15125] vhci_hcd: connection reset by peer [ 1605.591402][ T8724] vhci_hcd: stop threads [ 1605.591420][ T8724] vhci_hcd: release socket [ 1605.595445][ T8724] vhci_hcd: disconnect device [ 1607.488550][T15131] comedi comedi0: comedi_config --init_data is deprecated [ 1610.753786][T12347] vhci_hcd: vhci_device speed not set [ 1612.200154][ T1147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.357855][T15043] chnl_net:caif_netlink_parms(): no params data found [ 1612.719759][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.719836][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.138678][ T1147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.339621][ T10] IPVS: starting estimator thread 0... [ 1618.446292][T15197] IPVS: using max 7 ests per chain, 16800 per kthread [ 1622.128815][ T1147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.445369][T15238] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1625.445398][T15238] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1625.445490][T15238] vhci_hcd vhci_hcd.0: Device attached [ 1625.483376][T15239] vhci_hcd: connection closed [ 1625.519947][ T57] vhci_hcd: stop threads [ 1625.519975][ T57] vhci_hcd: release socket [ 1625.520009][ T57] vhci_hcd: disconnect device [ 1626.883056][ T1147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.034218][T15257] ptrace attach of "./syz-executor exec"[13904] was attempted by "./syz-executor exec"[15257] [ 1627.703306][T15043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.703459][T15043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.703787][T15043] bridge_slave_0: entered allmulticast mode [ 1627.706600][T15043] bridge_slave_0: entered promiscuous mode [ 1627.709762][T15043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.709892][T15043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.710098][T15043] bridge_slave_1: entered allmulticast mode [ 1627.721149][T15043] bridge_slave_1: entered promiscuous mode [ 1629.077853][T15043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.082288][T15043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.453388][T15285] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1631.453417][T15285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1631.453524][T15285] vhci_hcd vhci_hcd.0: Device attached [ 1631.481079][T15288] vhci_hcd: connection closed [ 1631.483515][ T67] vhci_hcd: stop threads [ 1631.483529][ T67] vhci_hcd: release socket [ 1631.483572][ T67] vhci_hcd: disconnect device [ 1631.871336][T15043] team0: Port device team_slave_0 added [ 1631.982921][T15043] team0: Port device team_slave_1 added [ 1635.097338][T15043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.097352][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.097371][T15043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.166793][T15043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.166812][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.166842][T15043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.016415][ T1147] bridge_slave_1: left allmulticast mode [ 1637.016451][ T1147] bridge_slave_1: left promiscuous mode [ 1637.016742][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.528766][ T1147] bridge_slave_0: left allmulticast mode [ 1638.528812][ T1147] bridge_slave_0: left promiscuous mode [ 1638.529088][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.424695][T15332] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1640.424725][T15332] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1640.424914][T15333] vhci_hcd: connection closed [ 1640.702092][T15332] vhci_hcd vhci_hcd.0: Device attached [ 1641.654289][T13488] vhci_hcd: stop threads [ 1641.654313][T13488] vhci_hcd: release socket [ 1641.654354][T13488] vhci_hcd: disconnect device [ 1643.752309][ T38] audit: type=1326 audit(2000001443.790:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15355 comm="syz.0.2149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd16fbebe9 code=0x0 [ 1655.376271][ T8965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1655.416574][ T8965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1655.436362][ T8965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1655.489393][ T8965] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1655.491787][ T8965] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1656.224396][ T8899] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1657.171330][ T8899] usb 10-1: Using ep0 maxpacket: 8 [ 1659.104803][ T8965] Bluetooth: hci5: command tx timeout [ 1659.119922][T15405] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1659.119944][T15405] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 15405, name: syz.9.2162 [ 1659.119962][T15405] preempt_count: 0, expected: 0 [ 1659.119972][T15405] RCU nest depth: 0, expected: 0 [ 1659.120005][T15405] 1 lock held by syz.9.2162/15405: [ 1659.120018][T15405] #0: ffff888027b70058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 1659.120082][T15405] irq event stamp: 5410 [ 1659.120090][T15405] hardirqs last enabled at (5409): [] _raw_spin_unlock_irq+0x23/0x50 [ 1659.120121][T15405] hardirqs last disabled at (5410): [] dummy_dequeue+0x151/0x480 [ 1659.120146][T15405] softirqs last enabled at (3050): [] __local_bh_enable_ip+0x1a4/0x270 [ 1659.120174][T15405] softirqs last disabled at (3044): [] __dev_queue_xmit+0x26f/0x3b70 [ 1659.120217][T15405] CPU: 1 UID: 0 PID: 15405 Comm: syz.9.2162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1659.120239][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1659.120251][T15405] Call Trace: [ 1659.120260][T15405] [ 1659.120269][T15405] dump_stack_lvl+0x189/0x250 [ 1659.120298][T15405] ? __dev_queue_xmit+0x26f/0x3b70 [ 1659.120326][T15405] ? __dev_queue_xmit+0x26f/0x3b70 [ 1659.120356][T15405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1659.120393][T15405] ? print_lock_name+0xde/0x100 [ 1659.120419][T15405] __might_resched+0x44b/0x5d0 [ 1659.120447][T15405] ? __pfx___might_resched+0x10/0x10 [ 1659.120469][T15405] ? dummy_dequeue+0x164/0x480 [ 1659.120509][T15405] rt_spin_lock+0xc7/0x2c0 [ 1659.120528][T15405] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.120554][T15405] ? __pfx_rt_spin_lock+0x10/0x10 [ 1659.120578][T15405] ? rcu_is_watching+0x15/0xb0 [ 1659.120609][T15405] dummy_dequeue+0x164/0x480 [ 1659.120637][T15405] ? __pfx_dummy_dequeue+0x10/0x10 [ 1659.120656][T15405] ? __pfx_schedule_timeout+0x10/0x10 [ 1659.120678][T15405] ? __pfx___wait_for_common+0x10/0x10 [ 1659.120715][T15405] usb_ep_dequeue+0x69/0x250 [ 1659.120738][T15405] raw_process_ep0_io+0x435/0x980 [ 1659.120771][T15405] raw_ioctl+0x22f6/0x3ba0 [ 1659.120796][T15405] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1659.120825][T15405] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1659.120850][T15405] ? do_vfs_ioctl+0xbeb/0x1440 [ 1659.120875][T15405] ? __pfx_raw_ioctl+0x10/0x10 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1659.120896][T15405] ? __pfx_smack_log+0x10/0x10 [ 1659.120924][T15405] ? smk_access+0x14c/0x4e0 [ 1659.120958][T15405] ? smk_tskacc+0x2fc/0x370 [ 1659.121000][T15405] ? smack_file_ioctl+0x24d/0x340 [ 1659.121023][T15405] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1659.121053][T15405] ? __fget_files+0x2a/0x420 [ 1659.121080][T15405] ? __fget_files+0x3a6/0x420 [ 1659.121105][T15405] ? __fget_files+0x2a/0x420 [ 1659.121134][T15405] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1659.121155][T15405] ? __pfx_raw_ioctl+0x10/0x10 [ 1659.121176][T15405] __se_sys_ioctl+0xfc/0x170 [ 1659.121201][T15405] do_syscall_64+0xfa/0x3b0 [ 1659.121227][T15405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.121246][T15405] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1659.121264][T15405] ? clear_bhb_loop+0x60/0xb0 [ 1659.121287][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.121306][T15405] RIP: 0033:0x7f7ee349e7eb [ 1659.121325][T15405] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1659.121343][T15405] RSP: 002b:00007f7ee16fbf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.121364][T15405] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7ee349e7eb [ 1659.121378][T15405] RDX: 00007f7ee16fbfd0 RSI: 0000000040085503 RDI: 0000000000000005 [ 1659.121391][T15405] RBP: 00007f7ee16fcfe0 R08: 0000000000000080 R09: 00007f7ee16fbfd8 [ 1659.121404][T15405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1659.121417][T15405] R13: 0000000800000000 R14: 0000000000000009 R15: 00007f7ee352d391 [ 1659.121448][T15405] [ 1659.174467][ T8899] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1659.174510][ T8899] usb 10-1: can't read configurations, error -71 [ 1661.154396][ T8965] Bluetooth: hci5: command tx timeout [ 1662.615335][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.685664][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.709761][ T1147] bond0 (unregistering): Released all slaves [ 1663.194455][ T8965] Bluetooth: hci5: command tx timeout [ 1664.148102][T15417] syz_tun (unregistering): left allmulticast mode [ 1665.865641][ T1147] hsr_slave_0: left promiscuous mode [ 1665.904683][ T1147] hsr_slave_1: left promiscuous mode [ 1665.905755][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.905786][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.949787][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.949820][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.064881][ T1147] veth1_macvtap: left promiscuous mode [ 1666.065012][ T1147] veth0_macvtap: left promiscuous mode [ 1666.065371][ T1147] veth1_vlan: left promiscuous mode [ 1666.065591][ T1147] veth0_vlan: left promiscuous mode