last executing test programs: 3m58.841845279s ago: executing program 32 (id=49): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)) 3m40.072058115s ago: executing program 33 (id=102): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x6, 0x3, 0x84, 0x1}) accept$alg(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x200480c4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}]]}, 0x34}}, 0x40) prlimit64(0x0, 0x9, &(0x7f0000000100)={0x8, 0x800000008b}, 0x0) 2m26.140367053s ago: executing program 34 (id=234): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000300)=@n={0x3, 0x4, @SEQ_NOTEON=@special, 0x6f}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m20.709365438s ago: executing program 35 (id=250): socket$netlink(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m12.057452525s ago: executing program 2 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x2280, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) 2m11.88429464s ago: executing program 2 (id=303): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m11.779399269s ago: executing program 2 (id=304): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setrlimit(0x5, &(0x7f0000000500)={0x6, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000600)=0x1, &(0x7f0000000640)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') syz_emit_ethernet(0x5e, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0x2}}, {@canfd={0xd, {{0x4}, 0x9, 0x2, 0x0, 0x0, "861dd62873ec03f02fc6b44164156e268eec2972fe6462d9a5d73343e1eb8e5a663dd255be500c0bca8b32c64050198dc4bc4a7b0bc564ed1d5aa8e782cc01c0"}}}}, &(0x7f00000005c0)={0x1, 0x1, [0x9f5, 0xad8, 0x488, 0x86b]}) read$FUSE(r3, &(0x7f0000006180)={0x2020}, 0x2020) 1m56.207527519s ago: executing program 36 (id=304): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setrlimit(0x5, &(0x7f0000000500)={0x6, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000600)=0x1, &(0x7f0000000640)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') syz_emit_ethernet(0x5e, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0x2}}, {@canfd={0xd, {{0x4}, 0x9, 0x2, 0x0, 0x0, "861dd62873ec03f02fc6b44164156e268eec2972fe6462d9a5d73343e1eb8e5a663dd255be500c0bca8b32c64050198dc4bc4a7b0bc564ed1d5aa8e782cc01c0"}}}}, &(0x7f00000005c0)={0x1, 0x1, [0x9f5, 0xad8, 0x488, 0x86b]}) read$FUSE(r3, &(0x7f0000006180)={0x2020}, 0x2020) 1m15.93731835s ago: executing program 9 (id=420): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="7591c0f0f05637045927b483094a0052", @ANYRES32, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x18031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) munmap(&(0x7f0000498000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa01535cab80c20000000800490000380000000000059078acf900010a010100890bc6ac1e0001ac1414aa830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000e0290780000"], 0x0) 1m14.966789947s ago: executing program 9 (id=425): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='gretap0\x00') r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r11, r10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x1}, 0x40) 1m12.048858948s ago: executing program 9 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040c08000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 1m11.912174069s ago: executing program 5 (id=433): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1m11.742923832s ago: executing program 9 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x100000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.653888659s ago: executing program 5 (id=438): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000008400000001"], 0x48, 0x2400e044}, 0x0) 1m10.531078587s ago: executing program 9 (id=440): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 1m10.267242908s ago: executing program 5 (id=441): r0 = syz_open_procfs(0x0, &(0x7f0000003180)='net/vlan/config\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000006800010003001000fdffff7f00000000000000000c000200010000001500000044000c800600010081000000080202000300000006000100ff7f0000080002001a00000006000100dc000000080002000e000000080003000400000008000200010000000600030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x70}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000003080)={0x0, @bt={0x6, 0x1ff, 0x1, 0x2, 0xa97, 0x7, 0xa4, 0x0, 0xb, 0x4, 0x9, 0x0, 0x1, 0x4, 0x4, 0x19, {0xa16, 0x6}, 0x1, 0xf8}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 1m9.687242046s ago: executing program 9 (id=442): read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x1, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000}) tkill(r1, 0xb) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) 1m8.936660015s ago: executing program 5 (id=444): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0x2}, {0x5}}}, 0x24}}, 0x44004) write$sndseq(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0xf000, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = io_uring_setup(0x115d, &(0x7f0000000440)={0x0, 0xdd3a, 0x80, 0x3, 0x117, 0x0, r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xd, 0x4) 1m7.269682465s ago: executing program 5 (id=452): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 1m7.003286641s ago: executing program 5 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r2, &(0x7f00000002c0), 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 1m6.901466896s ago: executing program 6 (id=455): r0 = syz_open_procfs(0x0, &(0x7f0000003180)='net/vlan/config\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000006800010003001000fdffff7f00000000000000000c000200010000001500000044000c800600010081000000080202000300000006000100ff7f0000080002001a00000006000100dc000000080002000e000000080003000400000008000200010000000600030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x70}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000003080)={0x0, @bt={0x6, 0x1ff, 0x1, 0x2, 0xa97, 0x7, 0xa4, 0x0, 0xb, 0x4, 0x9, 0x0, 0x1, 0x4, 0x4, 0x19, {0xa16, 0x6}, 0x1, 0xf8}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 1m5.737922607s ago: executing program 6 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858", 0x2e}, {&(0x7f0000000040)="f9ffffff130000000d8a", 0xa}], 0x2) 1m5.555753712s ago: executing program 6 (id=458): r0 = timerfd_create(0x9, 0x800) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x7, 0x218003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000005) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0xf, 0x8, 0x0, 0xb, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0x8da1, @mcast2}}]}, 0x58}}, 0x40) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}, {0x14, 0x2, @in={0x2, 0xfffc, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x54, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x77359400}}, 0x0) 1m4.598339038s ago: executing program 6 (id=460): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="7591c0f0f05637045927b483094a0052", @ANYRES32, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x18031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) munmap(&(0x7f0000498000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa01535cab80c20000000800490000380000000000059078acf900010a010100890bc6ac1e0001ac1414aa830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000e0290780000"], 0x0) 1m3.207868572s ago: executing program 6 (id=463): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 1m2.817496651s ago: executing program 6 (id=466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@getae={0x40, 0x1f, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2, 0x33}, @in6=@local, 0x4}}, 0x40}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4804) 1m0.842414649s ago: executing program 7 (id=470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) fstatfs(r1, &(0x7f0000000340)=""/124) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 1m0.785494064s ago: executing program 7 (id=471): openat$sysfs(0xffffffffffffff9c, 0x0, 0x4d0942, 0x102) socket$vsock_stream(0x28, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 59.657466749s ago: executing program 7 (id=473): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) 58.639910808s ago: executing program 7 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe8", 0x10}], 0x1) 57.130318216s ago: executing program 7 (id=476): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 57.050704681s ago: executing program 7 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d9910000000000", 0x21}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_pidfd_open(0x0, 0x0) open_by_handle_at(r6, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20) 54.880512861s ago: executing program 8 (id=482): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) 54.804210302s ago: executing program 8 (id=483): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 54.576205771s ago: executing program 37 (id=442): read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x1, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000}) tkill(r1, 0xb) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) 53.412685943s ago: executing program 8 (id=485): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) 52.444211511s ago: executing program 8 (id=486): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000f140100"], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) 52.257304107s ago: executing program 8 (id=487): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 52.139760549s ago: executing program 8 (id=488): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008000680fe0f0500080000003e"], 0x44}}, 0x0) 51.620964103s ago: executing program 38 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r2, &(0x7f00000002c0), 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 47.57817121s ago: executing program 39 (id=466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@getae={0x40, 0x1f, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2, 0x33}, @in6=@local, 0x4}}, 0x40}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4804) 41.692373675s ago: executing program 40 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d9910000000000", 0x21}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_pidfd_open(0x0, 0x0) open_by_handle_at(r6, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20) 39.854195677s ago: executing program 3 (id=493): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x990001, 0x8000}) 39.736365526s ago: executing program 3 (id=494): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={0x0, r2, r3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) 39.604880356s ago: executing program 3 (id=495): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) 38.581848914s ago: executing program 3 (id=496): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0x2}, {0x5}}}, 0x24}}, 0x44004) write$sndseq(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0xf000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r3 = io_uring_setup(0x115d, &(0x7f0000000440)={0x0, 0xdd3a, 0x80, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xd, 0x4) 37.977071066s ago: executing program 3 (id=497): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 37.884203704s ago: executing program 3 (id=498): r0 = socket(0x22, 0x2, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(r0) 36.394803783s ago: executing program 41 (id=488): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008000680fe0f0500080000003e"], 0x44}}, 0x0) 22.399025242s ago: executing program 42 (id=498): r0 = socket(0x22, 0x2, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(r0) 14.780329516s ago: executing program 4 (id=536): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x0, 0x0}) io_pgetevents(0x0, 0xb5, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) socket$kcm(0x29, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 13.783726671s ago: executing program 4 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x604e00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x64, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.860147631s ago: executing program 4 (id=539): r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(0x0, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r5, 0x0, r1}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x34010, 0x4) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) sendfile(r0, r0, 0x0, 0x1) 7.8120569s ago: executing program 1 (id=545): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0xfffffffe, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc, 0x100000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x4e, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200640b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048911}, 0x4) 6.770351114s ago: executing program 0 (id=549): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 6.671405587s ago: executing program 0 (id=550): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x1, 0x2, 0x5, 0x5, 0xaac6, 0x2, 0x1ff, 0x4, 0x856f, 0x1, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b14, 0x0) 6.204346988s ago: executing program 1 (id=551): syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44008011, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4004041) 5.816288577s ago: executing program 4 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@multicast]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffff80, 0x248000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d08, &(0x7f0000000040)=0x45) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x40000000000002b4, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) 4.781400442s ago: executing program 4 (id=553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 4.186473753s ago: executing program 1 (id=554): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0xff, 0x100) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000300)={0x1000000, 0x0, {0x2, 0x0, 0x80000000, 0xdbc9}}) 3.848034698s ago: executing program 1 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x64, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.21480079s ago: executing program 1 (id=556): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000840)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 3.158907983s ago: executing program 0 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000400)={0x2, @sdr={0x34363248, 0x4}}) r4 = syz_io_uring_setup(0x1eeb, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r4, 0x18f7, 0x93f2, 0x20, 0x0, 0x0) 1.881180636s ago: executing program 0 (id=558): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.644383159s ago: executing program 2 (id=499): socket$netlink(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 1.576271715s ago: executing program 0 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040c08000600", @ANYRES32], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 653.781888ms ago: executing program 4 (id=560): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 497.762483ms ago: executing program 2 (id=561): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'mpc624\x00', [0x2f00, 0x8, 0x3, 0x2, 0x2, 0xfffffffe, 0x1, 0x9, 0xffe, 0x1, 0x200c, 0x1, 0x4, 0x7, 0xffef, 0x7, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0xbc, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0xd5f8, 0x7, 0x70f]}) 419.757614ms ago: executing program 0 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x24008810) 360.211648ms ago: executing program 1 (id=563): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x3ff, 0x0, 0x4b, 0x0, &(0x7f0000000180)="539ff763e3e2a3434c627e76bc577f357a4a981a81412d20cb9bd41537eacf70788a60b716efd2860424f31453b6f43066df271edeeabfbc13e96d45a8eb52c95d51cd3961ea000707c9a4", &(0x7f0000000200), 0x0, 0x0, 0x100}, 0x50) unshare(0x22020600) timerfd_create(0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f0000007300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5f815d", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @private2, {[@dstopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xeb, 0xd3}}, @jumbo]}]}}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b52, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'pcl818\x00', [0x2f00, 0x7, 0x5, 0xa, 0x12, 0x400000, 0x1, 0x9, 0x1000, 0x1, 0xa, 0xfffffffa, 0x6, 0x4, 0x3, 0x8000, 0xfffffffd, 0x9, 0x200, 0x1, 0x3ff, 0x10000, 0x800, 0xe2df, 0x3, 0x5, 0x4, 0x4, 0x7, 0x2, 0x4]}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='Sok\xf7\x85\x01\xa2|\x82\x92}\x06\x00e{\x16g\x9d\xff I\xc1\x17\x8c\x16\xd1=3\xe5\xca\"\b9O0\xc9SD\xe6c\xc5\xd7\xac\x9d\xfc\x82m\xdd\'ys\x94jA\xb9ZH\x9c~\xe5_\xc1E\xbe;\xd5gv\x02y\n\xa9q\xea\x05 \x184\xdd\xf0\x90M\xcchS\xed\x90\x0f\xd7`\xea#\xcbt\x90f\x97t', &(0x7f00000002c0)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xb6\x8eb=7\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x8000, 0x40, 0x40, 0x397, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x66, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x1c, 0x0, [{0x7, 0x12, "e735d67156cf4af524b00f6b28bd777e"}, {0x7, 0x4, "358a"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xf}, {0x2, 0xfff2}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x0, 0xa, 0xc, 0x7fff}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe32}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x80000045}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x3, 0x1, 0x7, 0x80, 0x7, 0x8, 0xe0, 0x7, 0x6, [0x9, 0xffff99b4, 0x7, 0x6, 0xffffffff, 0x9, 0x2, 0x2], [0xfffffffd, 0x3]}}) 0s ago: executing program 2 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x64, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): device batadv0 [ 85.257812][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.280875][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.356246][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.414701][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.485240][ T5842] veth0_vlan: entered promiscuous mode [ 85.550544][ T5842] veth1_vlan: entered promiscuous mode [ 85.672733][ T5855] veth0_vlan: entered promiscuous mode [ 85.695059][ T5842] veth0_macvtap: entered promiscuous mode [ 85.739177][ T5855] veth1_vlan: entered promiscuous mode [ 85.746281][ T5842] veth1_macvtap: entered promiscuous mode [ 85.832101][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.861740][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.887320][ T5855] veth0_macvtap: entered promiscuous mode [ 85.894048][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.903275][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.934969][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945192][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.970396][ T5855] veth1_macvtap: entered promiscuous mode [ 86.039275][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.048331][ T5846] veth0_vlan: entered promiscuous mode [ 86.055040][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.067778][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.077919][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.092434][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.127273][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.142682][ T5846] veth1_vlan: entered promiscuous mode [ 86.160323][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.170308][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.179266][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.189241][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218188][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.227113][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.273770][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.352467][ T5852] veth0_vlan: entered promiscuous mode [ 86.384488][ T5849] veth0_vlan: entered promiscuous mode [ 86.409631][ T5846] veth0_macvtap: entered promiscuous mode [ 86.577819][ T5849] veth1_vlan: entered promiscuous mode [ 86.586478][ T5848] Bluetooth: hci0: command tx timeout [ 86.587896][ T5854] Bluetooth: hci4: command tx timeout [ 86.591892][ T5848] Bluetooth: hci1: command tx timeout [ 86.658289][ T5851] Bluetooth: hci3: command tx timeout [ 86.666840][ T5848] Bluetooth: hci2: command tx timeout [ 86.728731][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.763142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.836277][ T5846] veth1_macvtap: entered promiscuous mode [ 86.879368][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.960822][ T5852] veth1_vlan: entered promiscuous mode [ 87.064698][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.067309][ T5849] veth0_macvtap: entered promiscuous mode [ 87.089826][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.114586][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.122367][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.141386][ T5849] veth1_macvtap: entered promiscuous mode [ 87.190093][ T1326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.226649][ T1326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.249568][ T1326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.328838][ T5852] veth0_macvtap: entered promiscuous mode [ 87.357510][ T1326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.386300][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.408978][ T5972] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 87.484090][ T5852] veth1_macvtap: entered promiscuous mode [ 87.561738][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.622805][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.673655][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.690816][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.728076][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.776765][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.944672][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.991054][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.005938][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.055489][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.066889][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.376848][ T5986] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8'. [ 88.528814][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.656806][ T5848] Bluetooth: hci1: command tx timeout [ 88.666416][ T5848] Bluetooth: hci4: command tx timeout [ 88.671832][ T5848] Bluetooth: hci0: command tx timeout [ 88.737073][ T5851] Bluetooth: hci3: command tx timeout [ 88.742632][ T5848] Bluetooth: hci2: command tx timeout [ 88.857706][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.881812][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.935073][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.952847][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.986625][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.994457][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.391336][ T6005] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 89.513701][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.528322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.695494][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.275015][ T6006] orangefs_mount: mount request failed with -4 [ 90.286050][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.294003][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.470142][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.497441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.757845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.859568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.868975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.962133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.971241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.980446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.056810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.066213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.626926][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.760827][ T9] cfg80211: failed to load regulatory.db [ 93.655697][ T30] audit: type=1326 audit(1752561545.206:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 93.694233][ T6039] loop1: detected capacity change from 0 to 512 [ 93.702231][ T6039] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.708737][ T6039] EXT4-fs: Ignoring removed bh option [ 93.758185][ T6039] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.771357][ T6039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.825127][ T6039] EXT4-fs (loop1): 1 truncate cleaned up [ 93.833509][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.942164][ T5848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 93.956506][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: kworker/u9:3 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 93.956531][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.956543][ T5848] Workqueue: hci0 hci_rx_work [ 93.956581][ T5848] Call Trace: [ 93.956589][ T5848] [ 93.956597][ T5848] dump_stack_lvl+0x189/0x250 [ 93.956623][ T5848] ? kernfs_path_from_node+0x2c/0x260 [ 93.956642][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.956662][ T5848] ? __pfx__printk+0x10/0x10 [ 93.956688][ T5848] ? kernfs_path_from_node+0x2c/0x260 [ 93.956704][ T5848] ? kernfs_path_from_node+0x2c/0x260 [ 93.956723][ T5848] ? kernfs_path_from_node+0x22c/0x260 [ 93.956739][ T5848] ? kernfs_path_from_node+0x2c/0x260 [ 93.956759][ T5848] sysfs_create_dir_ns+0x259/0x280 [ 93.956790][ T5848] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 93.956819][ T5848] ? do_raw_spin_unlock+0x122/0x240 [ 93.956865][ T5848] kobject_add_internal+0x59f/0xb40 [ 93.956901][ T5848] kobject_add+0x155/0x220 [ 93.956931][ T5848] ? __pfx_kobject_add+0x10/0x10 [ 93.956956][ T5848] ? _raw_spin_unlock+0x28/0x50 [ 93.956980][ T5848] ? get_device_parent+0x366/0x3a0 [ 93.957001][ T5848] device_add+0x408/0xb50 [ 93.957022][ T5848] hci_conn_add_sysfs+0xd5/0x1e0 [ 93.957043][ T5848] le_conn_complete_evt+0xc3a/0x1220 [ 93.957081][ T5848] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.957106][ T5848] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 93.957128][ T5848] ? __asan_memcpy+0x40/0x70 [ 93.957148][ T5848] ? __pfx___mutex_lock+0x10/0x10 [ 93.957171][ T5848] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.957193][ T5848] ? skb_pull_data+0xfb/0x200 [ 93.957217][ T5848] hci_le_conn_complete_evt+0x187/0x450 [ 93.957248][ T5848] hci_event_packet+0x78f/0x1200 [ 93.957288][ T5848] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.957315][ T5848] ? __pfx_hci_event_packet+0x10/0x10 [ 93.957338][ T5848] ? kcov_remote_start+0x4d3/0x7f0 [ 93.957363][ T5848] ? lockdep_hardirqs_on+0x10/0x150 [ 93.957390][ T5848] ? hci_send_to_monitor+0xe2/0x570 [ 93.957420][ T5848] hci_rx_work+0x46a/0xe80 [ 93.957450][ T5848] ? process_scheduled_works+0x9ef/0x17b0 [ 93.957471][ T5848] process_scheduled_works+0xae1/0x17b0 [ 93.957520][ T5848] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.957557][ T5848] worker_thread+0x8a0/0xda0 [ 93.957604][ T5848] kthread+0x70e/0x8a0 [ 93.957631][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 93.957650][ T5848] ? __pfx_kthread+0x10/0x10 [ 93.957676][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.957697][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.957718][ T5848] ? __pfx_kthread+0x10/0x10 [ 93.957743][ T5848] ret_from_fork+0x3f9/0x770 [ 93.957764][ T5848] ? __pfx_ret_from_fork+0x10/0x10 [ 93.957789][ T5848] ? __switch_to_asm+0x39/0x70 [ 93.957812][ T5848] ? __switch_to_asm+0x33/0x70 [ 93.957834][ T5848] ? __pfx_kthread+0x10/0x10 [ 93.957866][ T5848] ret_from_fork_asm+0x1a/0x30 [ 93.957907][ T5848] [ 93.957936][ T5848] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.268171][ T5848] Bluetooth: hci0: failed to register connection device [ 94.346879][ T30] audit: type=1326 audit(1752561545.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 94.565014][ T30] audit: type=1326 audit(1752561545.206:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 94.720076][ T30] audit: type=1326 audit(1752561545.216:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 94.872199][ T30] audit: type=1326 audit(1752561545.216:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 94.905198][ T30] audit: type=1326 audit(1752561545.216:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 94.932306][ T30] audit: type=1326 audit(1752561545.216:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 95.554993][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.581346][ T30] audit: type=1326 audit(1752561545.216:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 96.324393][ T30] audit: type=1326 audit(1752561545.216:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 96.346406][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.359494][ T30] audit: type=1326 audit(1752561545.216:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 96.381523][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.546987][ T6071] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.128050][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.47'. [ 101.991328][ T6117] tty tty4: ldisc open failed (-12), clearing slot 3 [ 103.936527][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 104.038976][ T6157] syz.4.58 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.106836][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 105.106854][ T30] audit: type=1326 audit(1752561555.976:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.217425][ T6164] loop2: detected capacity change from 0 to 512 [ 105.224952][ T6164] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.231520][ T6164] EXT4-fs: Ignoring removed bh option [ 105.418534][ T6164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.462399][ T30] audit: type=1326 audit(1752561555.976:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.526461][ T30] audit: type=1326 audit(1752561555.976:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.548896][ T6164] EXT4-fs (loop2): 1 truncate cleaned up [ 105.557458][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.571633][ T30] audit: type=1326 audit(1752561556.736:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.595968][ T30] audit: type=1326 audit(1752561556.736:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.621732][ T30] audit: type=1326 audit(1752561556.736:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.645078][ T30] audit: type=1326 audit(1752561556.736:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.717567][ C1] Unknown status report in ack skb [ 105.743492][ T30] audit: type=1326 audit(1752561556.736:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 105.807828][ T30] audit: type=1326 audit(1752561556.736:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 106.410473][ T30] audit: type=1326 audit(1752561556.736:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 106.775897][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.477246][ T6229] bad cache= option: no%e [ 111.477246][ T6229] [ 111.483887][ T6229] CIFS: VFS: bad cache= option: no%e [ 112.057512][ T6234] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.267394][ T6250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.79'. [ 114.430084][ T6256] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 114.637095][ T6263] netlink: 68 bytes leftover after parsing attributes in process `syz.4.86'. [ 116.113620][ T6279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.362938][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 117.467909][ T6289] loop4: detected capacity change from 0 to 512 [ 117.469039][ T30] audit: type=1326 audit(1752561568.936:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 117.475903][ T6289] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.503193][ T6289] EXT4-fs: Ignoring removed bh option [ 117.524444][ T6289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.536798][ T30] audit: type=1326 audit(1752561568.936:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 117.563340][ T30] audit: type=1326 audit(1752561568.936:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 117.592145][ T30] audit: type=1326 audit(1752561568.936:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 117.614146][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.625634][ T6289] EXT4-fs (loop4): 1 truncate cleaned up [ 117.632498][ T6289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.670379][ T30] audit: type=1326 audit(1752561568.936:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 117.788830][ T6295] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 118.515483][ T6295] orangefs_mount: mount request failed with -4 [ 118.521948][ T30] audit: type=1326 audit(1752561568.936:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 118.544101][ T30] audit: type=1326 audit(1752561568.936:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 118.568039][ T30] audit: type=1326 audit(1752561568.936:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 118.592885][ T30] audit: type=1326 audit(1752561568.936:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 118.615981][ T30] audit: type=1326 audit(1752561568.936:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad9f8e929 code=0x7ffc0000 [ 118.716136][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.764140][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.774377][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.788932][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.799428][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.808834][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.880680][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.272064][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 121.612378][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.811834][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.938654][ T5851] Bluetooth: hci5: command tx timeout [ 121.942839][ T6325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.538592][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.800369][ T6309] chnl_net:caif_netlink_parms(): no params data found [ 122.834379][ T49] bridge_slave_1: left allmulticast mode [ 122.862101][ T49] bridge_slave_1: left promiscuous mode [ 122.887612][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.927787][ T49] bridge_slave_0: left allmulticast mode [ 122.949862][ T49] bridge_slave_0: left promiscuous mode [ 122.997669][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.259809][ T6340] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 124.017303][ T5851] Bluetooth: hci5: command tx timeout [ 124.198282][ T6340] orangefs_mount: mount request failed with -4 [ 126.096763][ T5851] Bluetooth: hci5: command tx timeout [ 126.716654][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.804876][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.827920][ T49] bond0 (unregistering): Released all slaves [ 127.726528][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.733797][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.776959][ T6309] bridge_slave_0: entered allmulticast mode [ 127.789135][ T6309] bridge_slave_0: entered promiscuous mode [ 127.890994][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.918295][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.926602][ T6309] bridge_slave_1: entered allmulticast mode [ 127.938406][ T6309] bridge_slave_1: entered promiscuous mode [ 128.183525][ T5851] Bluetooth: hci5: command tx timeout [ 128.753635][ T49] hsr_slave_0: left promiscuous mode [ 128.865440][ T49] hsr_slave_1: left promiscuous mode [ 128.887143][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.915030][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.940986][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.956476][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.999124][ T49] veth1_macvtap: left promiscuous mode [ 129.012055][ T49] veth0_macvtap: left promiscuous mode [ 129.039637][ T49] veth1_vlan: left promiscuous mode [ 129.050295][ T49] veth0_vlan: left promiscuous mode [ 130.640422][ T5948] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.899412][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 130.908072][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.929717][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.960805][ T49] team0 (unregistering): Port device team_slave_1 removed [ 130.968068][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.015011][ T5948] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 131.042225][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.063019][ T49] team0 (unregistering): Port device team_slave_0 removed [ 131.082894][ T5948] usb 1-1: config 0 descriptor?? [ 131.572241][ T5948] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input5 [ 131.636935][ T5948] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input6 [ 131.710317][ T6309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.763949][ T6309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.826173][ T5948] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 132.319339][ T6309] team0: Port device team_slave_0 added [ 132.662095][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668825][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.867214][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 132.900228][ T6309] team0: Port device team_slave_1 added [ 132.997979][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.004961][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.084258][ T6309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.312257][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.319973][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.656956][ T6309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.674188][ T9] usb 1-1: USB disconnect, device number 2 [ 134.397804][ T6309] hsr_slave_0: entered promiscuous mode [ 134.435679][ T6309] hsr_slave_1: entered promiscuous mode [ 139.030006][ T6309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.262557][ T6309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.594567][ T6309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.660725][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.703756][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.722412][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.745356][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.748715][ T6309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.802319][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.491917][ T6087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.856488][ T5848] Bluetooth: hci0: command tx timeout [ 142.353192][ T6525] orangefs_mount: mount request failed with -4 [ 142.387289][ T6087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.646566][ T6087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.856922][ T6546] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 143.936499][ T5848] Bluetooth: hci0: command tx timeout [ 146.017865][ T5848] Bluetooth: hci0: command tx timeout [ 146.385806][ T6087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.587364][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 147.587382][ T30] audit: type=1326 audit(1752561599.156:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 147.639451][ T6562] loop1: detected capacity change from 0 to 512 [ 147.647473][ T6562] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.653932][ T6562] EXT4-fs: Ignoring removed bh option [ 147.664783][ T6562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.856665][ T30] audit: type=1326 audit(1752561599.156:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 147.879542][ T30] audit: type=1326 audit(1752561599.166:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 147.969743][ T6562] EXT4-fs (loop1): 1 truncate cleaned up [ 147.985623][ T6562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.999568][ T30] audit: type=1326 audit(1752561599.166:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 148.503762][ T5848] Bluetooth: hci0: command tx timeout [ 148.519295][ T30] audit: type=1326 audit(1752561599.166:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 148.564824][ T30] audit: type=1326 audit(1752561599.166:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 148.642263][ T30] audit: type=1326 audit(1752561599.166:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 148.643324][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 148.876373][ T30] audit: type=1326 audit(1752561599.166:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 148.953433][ T30] audit: type=1326 audit(1752561599.166:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 149.044956][ T30] audit: type=1326 audit(1752561599.166:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209498e929 code=0x7ffc0000 [ 149.089180][ T6574] evm: overlay not supported [ 149.318219][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.674935][ T6309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.917528][ T6087] bridge_slave_1: left allmulticast mode [ 149.923202][ T6087] bridge_slave_1: left promiscuous mode [ 149.973389][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.434428][ T6087] bridge_slave_0: left allmulticast mode [ 150.499446][ T6087] bridge_slave_0: left promiscuous mode [ 150.522583][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.592075][ T6087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.686666][ T6087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.698602][ T6087] bond0 (unregistering): Released all slaves [ 151.850443][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.997923][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.005183][ T6498] bridge_slave_0: entered allmulticast mode [ 152.012401][ T6498] bridge_slave_0: entered promiscuous mode [ 155.843513][ T6309] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.981257][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.299248][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.313968][ T6498] bridge_slave_1: entered allmulticast mode [ 156.322568][ T6498] bridge_slave_1: entered promiscuous mode [ 156.517447][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.524588][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.536197][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.543324][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.578456][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.607630][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.762253][ T6087] hsr_slave_0: left promiscuous mode [ 156.785859][ T6087] hsr_slave_1: left promiscuous mode [ 156.811151][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.830526][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.843878][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.854205][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.878803][ T6087] veth1_macvtap: left promiscuous mode [ 156.884693][ T6087] veth0_macvtap: left promiscuous mode [ 156.891102][ T6087] veth1_vlan: left promiscuous mode [ 156.897312][ T6087] veth0_vlan: left promiscuous mode [ 158.032952][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 158.083075][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 158.457817][ T6498] team0: Port device team_slave_0 added [ 158.470763][ T6498] team0: Port device team_slave_1 added [ 158.607878][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.641374][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.673767][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.687956][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.698056][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.732894][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.328194][ T6498] hsr_slave_0: entered promiscuous mode [ 160.334865][ T6498] hsr_slave_1: entered promiscuous mode [ 160.355265][ T6498] debugfs: 'hsr0' already exists in 'hsr' [ 160.366387][ T6498] Cannot create hsr debugfs directory [ 162.068748][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 162.068786][ T30] audit: type=1326 audit(1752561613.646:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 162.129217][ T6683] loop2: detected capacity change from 0 to 512 [ 162.136518][ T6683] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.142967][ T6683] EXT4-fs: Ignoring removed bh option [ 162.277166][ T30] audit: type=1326 audit(1752561613.646:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 162.277871][ T6683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.299457][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.430789][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.526688][ T30] audit: type=1326 audit(1752561613.646:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 162.548943][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.628040][ T6683] EXT4-fs (loop2): 1 truncate cleaned up [ 162.641609][ T6683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.734143][ T30] audit: type=1326 audit(1752561613.646:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 162.768527][ T30] audit: type=1326 audit(1752561613.646:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 162.916555][ T30] audit: type=1326 audit(1752561613.646:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 162.983923][ T6498] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.015652][ T30] audit: type=1326 audit(1752561613.646:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 163.074000][ T30] audit: type=1326 audit(1752561613.646:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 163.096220][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.153130][ T6498] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.176409][ T30] audit: type=1326 audit(1752561613.646:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 163.198501][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.239219][ T6498] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.412552][ T6498] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.434164][ T30] audit: type=1326 audit(1752561613.646:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337858e929 code=0x7ffc0000 [ 163.528891][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.783385][ T6717] sctp: [Deprecated]: syz.1.177 (pid 6717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.783385][ T6717] Use struct sctp_sack_info instead [ 164.921375][ T6309] veth0_vlan: entered promiscuous mode [ 165.045639][ T6309] veth1_vlan: entered promiscuous mode [ 165.270907][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.300764][ T6309] veth0_macvtap: entered promiscuous mode [ 165.747466][ T6309] veth1_macvtap: entered promiscuous mode [ 166.323793][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.430668][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.437802][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.582113][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.589353][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.928178][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.099330][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.173711][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.209030][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.244924][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.259560][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.370983][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.643382][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.722253][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.173057][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.224464][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.311094][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.776422][ T5948] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 171.827777][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.841317][ T5948] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.851935][ T5948] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 171.863075][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.905478][ T5948] usb 6-1: config 0 descriptor?? [ 171.993940][ T5948] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 172.024683][ T5948] dvb-usb: bulk message failed: -22 (3/0) [ 172.094957][ T5948] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 172.293824][ T5948] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 172.784374][ T5948] usb 6-1: media controller created [ 172.822842][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.955613][ T5948] dvb-usb: bulk message failed: -22 (6/0) [ 172.986531][ T5948] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 173.046847][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 173.102280][ T6498] veth0_vlan: entered promiscuous mode [ 173.153873][ T5948] dvb-usb: schedule remote query interval to 150 msecs. [ 173.161084][ T6498] veth1_vlan: entered promiscuous mode [ 173.601762][ T5948] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 173.757414][ T1210] dvb-usb: bulk message failed: -22 (1/0) [ 173.763341][ T1210] dvb-usb: error while querying for an remote control event. [ 173.949268][ T6498] veth0_macvtap: entered promiscuous mode [ 173.974597][ T6498] veth1_macvtap: entered promiscuous mode [ 174.048107][ T1210] dvb-usb: bulk message failed: -22 (1/0) [ 174.093729][ T1210] dvb-usb: error while querying for an remote control event. [ 174.402331][ T1210] dvb-usb: bulk message failed: -22 (1/0) [ 174.439204][ T1210] dvb-usb: error while querying for an remote control event. [ 174.546109][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.611283][ T9] usb 6-1: USB disconnect, device number 2 [ 174.734389][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.762251][ T3484] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.319962][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 175.483182][ T3484] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.758396][ T3484] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.874515][ T3484] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.457936][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.465910][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.791525][ T6859] sctp: [Deprecated]: syz.1.203 (pid 6859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.791525][ T6859] Use struct sctp_sack_info instead [ 179.533105][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.553790][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.404291][ T6971] sctp: [Deprecated]: syz.0.227 (pid 6971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.404291][ T6971] Use struct sctp_sack_info instead [ 194.226675][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.232972][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.712546][ T7001] netlink: 56 bytes leftover after parsing attributes in process `syz.6.237'. [ 195.749173][ T7010] overlayfs: failed to resolve './file1': -2 [ 196.373829][ T7007] sctp: [Deprecated]: syz.6.239 (pid 7007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.373829][ T7007] Use struct sctp_sack_info instead [ 196.929807][ T1210] IPVS: starting estimator thread 0... [ 197.976484][ T7015] IPVS: using max 28 ests per chain, 67200 per kthread [ 199.937521][ T7061] netlink: 56 bytes leftover after parsing attributes in process `syz.5.249'. [ 201.130112][ T7068] overlayfs: failed to resolve './file1': -2 [ 202.071533][ T7075] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 202.813536][ T7077] orangefs_mount: mount request failed with -4 [ 203.374657][ T5948] IPVS: starting estimator thread 0... [ 203.593902][ T7084] IPVS: using max 28 ests per chain, 67200 per kthread [ 205.870159][ T7114] syz_tun: entered allmulticast mode [ 205.908135][ T7113] syz_tun: left allmulticast mode [ 206.746870][ T7127] overlayfs: failed to resolve './file1': -2 [ 206.750820][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 206.759054][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.759187][ T5166] Bluetooth: hci4: command 0x0406 tx timeout [ 210.006616][ T7175] syz_tun: entered allmulticast mode [ 210.007517][ T7173] syz_tun: left allmulticast mode [ 211.285328][ T7185] sctp: [Deprecated]: syz.6.277 (pid 7185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.285328][ T7185] Use struct sctp_sack_info instead [ 211.583110][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.592607][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.601938][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.611379][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.619795][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.792808][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.899749][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.153305][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.338810][ T7195] overlayfs: failed to resolve './file0': -2 [ 212.944675][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.696610][ T5854] Bluetooth: hci1: command tx timeout [ 214.177732][ T7186] chnl_net:caif_netlink_parms(): no params data found [ 216.336922][ T5854] Bluetooth: hci1: command tx timeout [ 216.545103][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.553823][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.564632][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.574498][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.582518][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.608928][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.616164][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.636476][ T7186] bridge_slave_0: entered allmulticast mode [ 216.644011][ T7186] bridge_slave_0: entered promiscuous mode [ 216.660167][ T7234] syz_tun: entered allmulticast mode [ 216.677726][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.684872][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.718419][ T7186] bridge_slave_1: entered allmulticast mode [ 216.730166][ T7186] bridge_slave_1: entered promiscuous mode [ 216.741065][ T36] bridge_slave_1: left allmulticast mode [ 216.784885][ T36] bridge_slave_1: left promiscuous mode [ 216.800562][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.848832][ T36] bridge_slave_0: left allmulticast mode [ 216.862799][ T36] bridge_slave_0: left promiscuous mode [ 216.869599][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.871252][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.900177][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.914712][ T36] bond0 (unregistering): Released all slaves [ 218.353819][ T7227] syz_tun: left allmulticast mode [ 218.417853][ T5854] Bluetooth: hci1: command tx timeout [ 218.553726][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.666490][ T5854] Bluetooth: hci3: command tx timeout [ 218.800056][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.888586][ T7263] netlink: 56 bytes leftover after parsing attributes in process `syz.2.289'. [ 220.497175][ T5854] Bluetooth: hci1: command tx timeout [ 220.746411][ T5854] Bluetooth: hci3: command tx timeout [ 221.393978][ T7186] team0: Port device team_slave_0 added [ 222.192834][ T7186] team0: Port device team_slave_1 added [ 222.395480][ T7291] syz_tun: entered allmulticast mode [ 222.641764][ T36] hsr_slave_0: left promiscuous mode [ 222.654439][ T36] hsr_slave_1: left promiscuous mode [ 222.666180][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.755006][ T7301] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 223.252509][ T5854] Bluetooth: hci3: command tx timeout [ 223.268206][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.286513][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.294046][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.432809][ T36] veth1_macvtap: left promiscuous mode [ 223.454845][ T36] veth0_macvtap: left promiscuous mode [ 223.475499][ T36] veth1_vlan: left promiscuous mode [ 223.484050][ T36] veth0_vlan: left promiscuous mode [ 224.246113][ T36] team0 (unregistering): Port device team_slave_1 removed [ 224.298666][ T36] team0 (unregistering): Port device team_slave_0 removed [ 224.644576][ T7287] syz_tun: left allmulticast mode [ 224.674891][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.711538][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.757873][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.797042][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.826390][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.864852][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.307097][ T5854] Bluetooth: hci3: command tx timeout [ 225.898037][ T7186] hsr_slave_0: entered promiscuous mode [ 225.904695][ T7186] hsr_slave_1: entered promiscuous mode [ 225.944654][ T7186] debugfs: 'hsr0' already exists in 'hsr' [ 225.968294][ T7186] Cannot create hsr debugfs directory [ 226.021335][ T7232] chnl_net:caif_netlink_parms(): no params data found [ 226.806575][ T7342] netlink: 56 bytes leftover after parsing attributes in process `syz.6.310'. [ 228.990439][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.018652][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.025841][ T7232] bridge_slave_0: entered allmulticast mode [ 229.069971][ T7232] bridge_slave_0: entered promiscuous mode [ 229.119964][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.147985][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.166091][ T7232] bridge_slave_1: entered allmulticast mode [ 229.192087][ T7232] bridge_slave_1: entered promiscuous mode [ 229.342479][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.446985][ T7365] syz_tun: entered allmulticast mode [ 229.471230][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.698780][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.722775][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.743892][ T7363] syz_tun: left allmulticast mode [ 229.905544][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.014357][ T7232] team0: Port device team_slave_0 added [ 230.073246][ T7232] team0: Port device team_slave_1 added [ 230.108249][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.167709][ T7186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 230.357359][ T7186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 230.404259][ T7186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 230.454405][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.471596][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.504148][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.526878][ T7186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 230.697803][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.704788][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.463882][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.793846][ T7232] hsr_slave_0: entered promiscuous mode [ 231.822069][ T7232] hsr_slave_1: entered promiscuous mode [ 231.857070][ T7232] debugfs: 'hsr0' already exists in 'hsr' [ 231.862824][ T7232] Cannot create hsr debugfs directory [ 232.225132][ T36] bridge_slave_1: left allmulticast mode [ 232.246225][ T36] bridge_slave_1: left promiscuous mode [ 232.261621][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.294875][ T36] bridge_slave_0: left allmulticast mode [ 232.306332][ T36] bridge_slave_0: left promiscuous mode [ 232.323849][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.757882][ T7416] netlink: 56 bytes leftover after parsing attributes in process `syz.5.319'. [ 235.237178][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.257063][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.270499][ T36] bond0 (unregistering): Released all slaves [ 235.367680][ T7447] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 236.137865][ T7447] orangefs_mount: mount request failed with -4 [ 237.413536][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.596083][ T36] hsr_slave_0: left promiscuous mode [ 237.609844][ T36] hsr_slave_1: left promiscuous mode [ 237.635517][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.664069][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.856874][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.876370][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.927477][ T36] veth1_macvtap: left promiscuous mode [ 237.936992][ T36] veth0_macvtap: left promiscuous mode [ 237.953574][ T36] veth1_vlan: left promiscuous mode [ 237.961899][ T36] veth0_vlan: left promiscuous mode [ 238.994877][ T36] team0 (unregistering): Port device team_slave_1 removed [ 239.044832][ T36] team0 (unregistering): Port device team_slave_0 removed [ 239.263226][ T7475] netlink: 56 bytes leftover after parsing attributes in process `syz.6.329'. [ 240.106045][ T7479] netlink: 'syz.6.331': attribute type 10 has an invalid length. [ 240.530342][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.540432][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.549365][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.558694][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.569292][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.776717][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.807214][ T7479] team0: Port device bond0 added [ 240.970679][ T7232] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 241.017610][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.048925][ T7232] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 241.113529][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.120701][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.474619][ T7232] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 241.564340][ T7495] netlink: 68 bytes leftover after parsing attributes in process `syz.5.334'. [ 242.324619][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 242.712458][ T5848] Bluetooth: hci4: command tx timeout [ 242.843529][ T7232] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.260084][ T7502] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 244.004011][ T7503] orangefs_mount: mount request failed with -4 [ 244.037004][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.044164][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.155674][ T36] IPVS: stop unused estimator thread 0... [ 244.737376][ T5854] Bluetooth: hci4: command tx timeout [ 245.078470][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.272009][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.463438][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.583472][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.629564][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.764311][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.796173][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.803350][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.443937][ T7232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.454462][ T7232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.622832][ T7480] chnl_net:caif_netlink_parms(): no params data found [ 246.656030][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.663230][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.721000][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.816553][ T5854] Bluetooth: hci4: command tx timeout [ 247.737433][ T7564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.265380][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.472107][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.347'. [ 248.705736][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.738442][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.745645][ T7480] bridge_slave_0: entered allmulticast mode [ 248.777947][ T7480] bridge_slave_0: entered promiscuous mode [ 248.800054][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.813176][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.823147][ T7480] bridge_slave_1: entered allmulticast mode [ 248.855934][ T7480] bridge_slave_1: entered promiscuous mode [ 248.898340][ T5854] Bluetooth: hci4: command tx timeout [ 248.972753][ T36] bridge_slave_1: left allmulticast mode [ 248.978573][ T36] bridge_slave_1: left promiscuous mode [ 248.984307][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.030430][ T36] bridge_slave_0: left allmulticast mode [ 249.108245][ T36] bridge_slave_0: left promiscuous mode [ 249.113992][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.919700][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.930908][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.947286][ T36] bond0 (unregistering): Released all slaves [ 251.018281][ T7480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.097974][ T7480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.215945][ T7665] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.642950][ T7232] veth0_vlan: entered promiscuous mode [ 253.667912][ T7232] veth1_vlan: entered promiscuous mode [ 253.723030][ T7232] veth0_macvtap: entered promiscuous mode [ 253.734673][ T7232] veth1_macvtap: entered promiscuous mode [ 253.971550][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.989041][ T7668] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 254.230624][ T7480] team0: Port device team_slave_0 added [ 254.351025][ T7480] team0: Port device team_slave_1 added [ 254.676910][ T7669] orangefs_mount: mount request failed with -4 [ 254.902311][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.988009][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.988028][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.988051][ T7480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.990911][ T155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.990967][ T155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.990990][ T155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.991012][ T155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.018155][ T36] hsr_slave_0: left promiscuous mode [ 255.018589][ T36] hsr_slave_1: left promiscuous mode [ 255.019013][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.019026][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.019496][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.019508][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.050843][ T36] veth1_macvtap: left promiscuous mode [ 255.051007][ T36] veth0_macvtap: left promiscuous mode [ 255.051386][ T36] veth1_vlan: left promiscuous mode [ 255.051526][ T36] veth0_vlan: left promiscuous mode [ 255.580382][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.586985][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.420054][ T36] team0 (unregistering): Port device team_slave_1 removed [ 256.488560][ T36] team0 (unregistering): Port device team_slave_0 removed [ 256.928910][ T7186] veth0_vlan: entered promiscuous mode [ 256.935708][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.944711][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.982494][ T7480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.234398][ T7186] veth1_vlan: entered promiscuous mode [ 257.458541][ T7480] hsr_slave_0: entered promiscuous mode [ 257.473162][ T7480] hsr_slave_1: entered promiscuous mode [ 257.501715][ T7480] debugfs: 'hsr0' already exists in 'hsr' [ 257.535477][ T7480] Cannot create hsr debugfs directory [ 257.703698][ T7327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.720592][ T7327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.574002][ T7186] veth0_macvtap: entered promiscuous mode [ 258.668241][ T7716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.258353][ T6088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.277867][ T6088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.357646][ T7186] veth1_macvtap: entered promiscuous mode [ 259.518598][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.569961][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.671005][ T7721] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 259.950532][ T155] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.427839][ T7726] orangefs_mount: mount request failed with -4 [ 260.463873][ T155] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.564365][ T155] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.643373][ T155] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.007395][ T7480] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 262.079142][ T7480] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 262.120284][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.155803][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.362116][ T7480] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 262.736789][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 262.833675][ T7480] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 262.986488][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.995219][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.472098][ T7774] netlink: 'syz.6.371': attribute type 1 has an invalid length. [ 263.921866][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.619764][ T7480] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.952901][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.960040][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.007951][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.015141][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.107381][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 265.308241][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 265.328010][ T9] usb 9-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 265.356333][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 265.370440][ T9] usb 9-1: Product: syz [ 265.374618][ T9] usb 9-1: Manufacturer: syz [ 265.400455][ T9] usb 9-1: SerialNumber: syz [ 265.434484][ T9] usb 9-1: config 0 descriptor?? [ 265.578045][ T9] usbtest 9-1:0.0: FX2 device [ 265.600004][ T9] usbtest 9-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 266.982660][ T980] usb 9-1: USB disconnect, device number 2 [ 267.097872][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.954952][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.380'. [ 270.383313][ T7480] veth0_vlan: entered promiscuous mode [ 270.640093][ T7480] veth1_vlan: entered promiscuous mode [ 271.502688][ T7480] veth0_macvtap: entered promiscuous mode [ 271.692701][ T7480] veth1_macvtap: entered promiscuous mode [ 271.921448][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.950658][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.831092][ T6087] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.925517][ T6087] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.001856][ T6087] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.054377][ T6087] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.288258][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.349200][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.458286][ T6088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.599685][ T6088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.311207][ T7944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.230049][ T8005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.501295][ T1210] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 280.836362][ T1210] usb 8-1: Using ep0 maxpacket: 16 [ 280.848283][ T1210] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 280.866323][ T1210] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 280.875488][ T1210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.964521][ T1210] usb 8-1: config 0 descriptor?? [ 281.172839][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input8 [ 282.137218][ T5201] bcm5974 8-1:0.0: could not read from device [ 282.162138][ T8027] Zero length message leads to an empty skb [ 282.192542][ T1210] bcm5974 8-1:0.0: could not read from device [ 282.660590][ T5201] bcm5974 8-1:0.0: could not read from device [ 282.780959][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 282.798560][ T1210] input: failed to attach handler mousedev to device input8, error: -5 [ 282.820411][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 282.833191][ T5201] bcm5974 8-1:0.0: could not read from device [ 282.846634][ T1210] usb 8-1: USB disconnect, device number 2 [ 282.990009][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 283.326944][ T5201] bcm5974 8-1:0.0: could not read from device [ 283.345494][ T8037] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.953989][ T8037] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.132416][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 284.218513][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 284.225817][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 284.308620][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 284.467714][ T8037] dummy0 speed is unknown, defaulting to 1000 [ 286.339031][ T8097] netlink: 56 bytes leftover after parsing attributes in process `syz.5.441'. [ 289.266507][ T5890] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 289.434989][ T8142] netlink: 56 bytes leftover after parsing attributes in process `syz.6.455'. [ 290.040381][ T5890] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.060889][ T5890] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.131741][ T5890] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.153098][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.179735][ T5890] usb 9-1: SerialNumber: syz [ 290.432454][ T5890] usb 9-1: 0:2 : does not exist [ 290.450565][ T5890] usb 9-1: unit 255 not found! [ 290.760874][ T5890] usb 9-1: USB disconnect, device number 3 [ 290.930130][ T8156] tipc: Started in network mode [ 290.943981][ T8156] tipc: Node identity ac141425, cluster identity 4711 [ 290.966426][ T8156] tipc: New replicast peer: 0.0.0.0 [ 290.990551][ T8156] tipc: Enabled bearer , priority 10 [ 291.002432][ T8157] tipc: New replicast peer: 172.20.20.170 [ 291.107502][ T6428] udevd[6428]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.825072][ T8176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.118733][ T9] tipc: Node number set to 2886997029 [ 293.376677][ T1210] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 293.558295][ T1210] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.578531][ T1210] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.622755][ T1210] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 293.653335][ T1210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.676807][ T1210] usb 8-1: config 0 descriptor?? [ 294.111264][ T1210] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0 [ 294.491988][ T1210] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 294.509791][ T1210] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 294.531391][ T1210] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 294.558339][ T1210] usb 8-1: USB disconnect, device number 3 [ 295.095969][ T8224] Bluetooth: MGMT ver 1.23 [ 295.358704][ T8233] lo: entered promiscuous mode [ 295.381783][ T8233] tunl0: entered promiscuous mode [ 295.417242][ T8233] gre0: entered promiscuous mode [ 295.422948][ T8233] gretap0: entered promiscuous mode [ 295.686410][ T8233] erspan0: entered promiscuous mode [ 295.692206][ T8233] ip_vti0: entered promiscuous mode [ 295.715919][ T8233] ip6_vti0: entered promiscuous mode [ 295.721802][ T8233] sit0: entered promiscuous mode [ 295.728004][ T8233] ip6tnl0: entered promiscuous mode [ 295.743971][ T8233] ip6gre0: entered promiscuous mode [ 295.750107][ T8233] syz_tun: entered promiscuous mode [ 295.759299][ T8233] ip6gretap0: entered promiscuous mode [ 295.769019][ T8233] bridge0: entered promiscuous mode [ 295.775099][ T8233] vcan0: entered promiscuous mode [ 295.781202][ T8233] bond0: entered promiscuous mode [ 295.787076][ T8233] bond_slave_0: entered promiscuous mode [ 295.793037][ T8233] bond_slave_1: entered promiscuous mode [ 295.799917][ T8233] team0: entered promiscuous mode [ 295.806029][ T8233] team_slave_0: entered promiscuous mode [ 295.811884][ T8233] team_slave_1: entered promiscuous mode [ 295.818919][ T8233] dummy0: entered promiscuous mode [ 295.825335][ T8233] nlmon0: entered promiscuous mode [ 295.871751][ T8233] caif0: entered promiscuous mode [ 295.881925][ T8233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.746789][ T43] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 296.986685][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 297.049847][ T43] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 297.089039][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.113518][ T43] usb 9-1: config 0 descriptor?? [ 297.129694][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 297.357766][ T8259] tipc: Started in network mode [ 297.362755][ T8259] tipc: Node identity 6606e36cb753, cluster identity 4711 [ 297.370381][ T8259] tipc: Enabled bearer , priority 0 [ 297.379393][ T8258] tipc: Resetting bearer [ 298.360358][ T43] gspca_vc032x: reg_w err -71 [ 298.365446][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.371299][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.376855][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.382163][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.388128][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.393441][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.399078][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.404385][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.411048][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.417675][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.422981][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.431098][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.436653][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.441953][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.447558][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.452872][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.458230][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.463532][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 298.469504][ T43] gspca_vc032x: Unknown sensor... [ 298.474616][ T43] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 298.490867][ T43] usb 9-1: USB disconnect, device number 4 [ 298.504737][ T5948] tipc: Node number set to 3512066924 [ 298.701875][ T8258] tipc: Disabling bearer [ 301.512376][ T8321] mmap: syz.8.483 (8321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 302.360870][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.370464][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.381022][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.390371][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.398214][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.454505][ T8329] dummy0 speed is unknown, defaulting to 1000 [ 302.577991][ T6088] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.753438][ T6088] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.322438][ T6088] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.584182][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.8.486'. [ 303.597164][ T6088] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.632828][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 303.896025][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.903337][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.910757][ T8329] bridge_slave_0: entered allmulticast mode [ 303.927226][ T8329] bridge_slave_0: entered promiscuous mode [ 303.944292][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.953033][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.971049][ T8329] bridge_slave_1: entered allmulticast mode [ 303.980699][ T8329] bridge_slave_1: entered promiscuous mode [ 303.991273][ T6088] bridge_slave_1: left allmulticast mode [ 303.997476][ T6088] bridge_slave_1: left promiscuous mode [ 304.003198][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.031260][ T6088] bridge_slave_0: left allmulticast mode [ 304.037560][ T6088] bridge_slave_0: left promiscuous mode [ 304.043281][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.497578][ T6088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.497676][ T5854] Bluetooth: hci2: command tx timeout [ 304.546823][ T6088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.558358][ T6088] bond0 (unregistering): Released all slaves [ 304.727345][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.779374][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.793597][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.801548][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.810225][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.820992][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.859092][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.023709][ T8329] team0: Port device team_slave_0 added [ 305.049591][ T8329] team0: Port device team_slave_1 added [ 305.113106][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.133399][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.169413][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.185111][ T8365] dummy0 speed is unknown, defaulting to 1000 [ 305.195461][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.206535][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.233695][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.262864][ T6088] hsr_slave_0: left promiscuous mode [ 305.269128][ T6088] hsr_slave_1: left promiscuous mode [ 305.275121][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.288395][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.297968][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.305435][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.327189][ T6088] veth1_macvtap: left promiscuous mode [ 305.332775][ T6088] veth0_macvtap: left promiscuous mode [ 305.339111][ T6088] veth1_vlan: left promiscuous mode [ 305.344452][ T6088] veth0_vlan: left promiscuous mode [ 305.709482][ T6088] team0 (unregistering): Port device team_slave_1 removed [ 305.739281][ T6088] team0 (unregistering): Port device team_slave_0 removed [ 306.209613][ T8329] hsr_slave_0: entered promiscuous mode [ 306.216211][ T8329] hsr_slave_1: entered promiscuous mode [ 306.244655][ T8329] debugfs: 'hsr0' already exists in 'hsr' [ 306.252661][ T8329] Cannot create hsr debugfs directory [ 306.577899][ T5854] Bluetooth: hci2: command tx timeout [ 306.592277][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 306.873893][ T6088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.896725][ T5854] Bluetooth: hci4: command tx timeout [ 307.021619][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.034086][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.041667][ T8365] bridge_slave_0: entered allmulticast mode [ 307.054735][ T8365] bridge_slave_0: entered promiscuous mode [ 307.077782][ T6088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.092845][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.101547][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.109020][ T8365] bridge_slave_1: entered allmulticast mode [ 307.117604][ T8365] bridge_slave_1: entered promiscuous mode [ 307.252085][ T6088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.291451][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.313642][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.373971][ T6088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.431981][ T8365] team0: Port device team_slave_0 added [ 307.464456][ T8365] team0: Port device team_slave_1 added [ 307.485735][ T8329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.535845][ T8329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.574278][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.584474][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.615210][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.627869][ T8329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.659200][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.666157][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.692550][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.704672][ T8329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.763633][ T6088] bridge_slave_1: left allmulticast mode [ 307.769991][ T6088] bridge_slave_1: left promiscuous mode [ 307.775754][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.785902][ T6088] bridge_slave_0: left allmulticast mode [ 307.794559][ T6088] bridge_slave_0: left promiscuous mode [ 307.801020][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.170987][ T6088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.188034][ T6088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.199738][ T6088] bond0 (unregistering): Released all slaves [ 308.287103][ T8365] hsr_slave_0: entered promiscuous mode [ 308.293720][ T8365] hsr_slave_1: entered promiscuous mode [ 308.305376][ T8365] debugfs: 'hsr0' already exists in 'hsr' [ 308.312139][ T8365] Cannot create hsr debugfs directory [ 308.657332][ T5848] Bluetooth: hci2: command tx timeout [ 308.957359][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.980852][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.988357][ T5854] Bluetooth: hci4: command tx timeout [ 308.988750][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.003706][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.011790][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.072743][ T6088] hsr_slave_0: left promiscuous mode [ 309.086888][ T6088] hsr_slave_1: left promiscuous mode [ 309.092836][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.103479][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.111816][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.119509][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.141298][ T6088] veth1_macvtap: left promiscuous mode [ 309.147138][ T6088] veth0_macvtap: left promiscuous mode [ 309.152767][ T6088] veth1_vlan: left promiscuous mode [ 309.158565][ T6088] veth0_vlan: left promiscuous mode [ 309.502624][ T6088] team0 (unregistering): Port device team_slave_1 removed [ 309.534091][ T6088] team0 (unregistering): Port device team_slave_0 removed [ 310.043989][ T8447] dummy0 speed is unknown, defaulting to 1000 [ 310.049297][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.096017][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.183481][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.190619][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.348059][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.355218][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.520201][ T8329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.733671][ T6088] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.737657][ T5851] Bluetooth: hci2: command tx timeout [ 310.811164][ T8447] chnl_net:caif_netlink_parms(): no params data found [ 310.878483][ T6088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.975012][ T6088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.040880][ T8365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.061307][ T5851] Bluetooth: hci4: command tx timeout [ 311.068954][ T5848] Bluetooth: hci0: command tx timeout [ 311.081014][ T8365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.135349][ T6088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.154168][ T8365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.170546][ T8365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.234592][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.243288][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.261826][ T8447] bridge_slave_0: entered allmulticast mode [ 311.272136][ T8447] bridge_slave_0: entered promiscuous mode [ 311.281087][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.291915][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.299579][ T8447] bridge_slave_1: entered allmulticast mode [ 311.310771][ T8447] bridge_slave_1: entered promiscuous mode [ 311.389986][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.443926][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.483569][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.588006][ T8447] team0: Port device team_slave_0 added [ 311.594127][ T6088] bridge_slave_1: left allmulticast mode [ 311.601524][ T6088] bridge_slave_1: left promiscuous mode [ 311.611691][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.652748][ T6088] bridge_slave_0: left allmulticast mode [ 311.660384][ T6088] bridge_slave_0: left promiscuous mode [ 311.684633][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.001723][ T6088] team0: Port device bond0 removed [ 312.009235][ T6088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.020521][ T6088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.030391][ T6088] bond0 (unregistering): Released all slaves [ 312.050308][ T8447] team0: Port device team_slave_1 added [ 312.119482][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.126929][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.154065][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.170453][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.179337][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.205552][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.225983][ T6088] tipc: Disabling bearer [ 312.231644][ T6088] tipc: Left network mode [ 312.308159][ T8447] hsr_slave_0: entered promiscuous mode [ 312.316608][ T8447] hsr_slave_1: entered promiscuous mode [ 312.357110][ T8329] veth0_vlan: entered promiscuous mode [ 312.440788][ T8329] veth1_vlan: entered promiscuous mode [ 312.461786][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.482830][ T6088] hsr_slave_0: left promiscuous mode [ 312.489070][ T6088] hsr_slave_1: left promiscuous mode [ 312.494842][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.503402][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.511816][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.519825][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.538343][ T6088] veth1_macvtap: left promiscuous mode [ 312.543841][ T6088] veth0_macvtap: left promiscuous mode [ 312.549651][ T6088] veth1_vlan: left promiscuous mode [ 312.555581][ T6088] veth0_vlan: left promiscuous mode [ 312.883137][ T6088] team0 (unregistering): Port device team_slave_1 removed [ 312.914674][ T6088] team0 (unregistering): Port device team_slave_0 removed [ 313.138047][ T5851] Bluetooth: hci4: command tx timeout [ 313.143603][ T5851] Bluetooth: hci0: command tx timeout [ 313.249877][ T5994] dummy0 speed is unknown, defaulting to 1000 [ 313.259469][ T5994] infiniband syz2: ib_query_port failed (-19) [ 313.320519][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.341957][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.349088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.384092][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.391281][ T7327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.405134][ T8329] veth0_macvtap: entered promiscuous mode [ 313.475007][ T8329] veth1_macvtap: entered promiscuous mode [ 313.570731][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.602078][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.675578][ T6087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.686223][ T6087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.709105][ T6087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.727970][ T6087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.807232][ T6088] IPVS: stop unused estimator thread 0... [ 313.960773][ T6088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.983556][ T6088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.043485][ T8447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.061312][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.067404][ T8447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.079549][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.092066][ T8447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.104206][ T8447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.188868][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.439420][ T8522] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 314.477753][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.736828][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.137904][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.145069][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.178359][ T8522] orangefs_mount: mount request failed with -4 [ 315.248051][ T5851] Bluetooth: hci0: command tx timeout [ 315.269831][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.277054][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.079131][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.095686][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.105021][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.113816][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.122150][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.394006][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.456160][ T8447] veth0_vlan: entered promiscuous mode [ 316.484977][ T8447] veth1_vlan: entered promiscuous mode [ 316.522172][ T8447] veth0_macvtap: entered promiscuous mode [ 316.538570][ T8447] veth1_macvtap: entered promiscuous mode [ 316.593835][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.615912][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.982895][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.994720][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.158718][ T6088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.168208][ T6088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.208800][ T6087] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.284702][ T6088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.300762][ T5851] Bluetooth: hci0: command tx timeout [ 317.301498][ T6088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.563156][ T6087] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.000262][ T6087] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.033524][ T8365] veth0_vlan: entered promiscuous mode [ 318.041107][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 318.107227][ T6087] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.140743][ T8365] veth1_vlan: entered promiscuous mode [ 318.176734][ T5851] Bluetooth: hci5: command tx timeout [ 318.240391][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.250288][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.262040][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.269715][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.277988][ T8534] bridge_slave_0: entered allmulticast mode [ 318.285029][ T8534] bridge_slave_0: entered promiscuous mode [ 318.303199][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.310698][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.319445][ T8534] bridge_slave_1: entered allmulticast mode [ 318.327549][ T8534] bridge_slave_1: entered promiscuous mode [ 318.410761][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.424950][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.471001][ T8365] veth0_macvtap: entered promiscuous mode [ 318.478277][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.492648][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.511228][ T8534] team0: Port device team_slave_0 added [ 318.522816][ T8365] veth1_macvtap: entered promiscuous mode [ 318.541191][ T8534] team0: Port device team_slave_1 added [ 318.578166][ T6087] bridge_slave_1: left allmulticast mode [ 318.583812][ T6087] bridge_slave_1: left promiscuous mode [ 318.617142][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.628084][ T6087] bridge_slave_0: left allmulticast mode [ 318.633749][ T6087] bridge_slave_0: left promiscuous mode [ 318.640126][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.133729][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.167138][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.181833][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.216945][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.240045][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.258606][ T5851] Bluetooth: hci5: command tx timeout [ 320.318341][ T6087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.335172][ T6087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.346897][ T6087] bond0 (unregistering): Released all slaves [ 320.538560][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.552653][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.646152][ T8534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.694869][ T6087] tipc: Left network mode [ 320.695732][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.717670][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.904542][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.040275][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.156061][ T8534] hsr_slave_0: entered promiscuous mode [ 321.297390][ T8534] hsr_slave_1: entered promiscuous mode [ 321.306588][ T8534] debugfs: 'hsr0' already exists in 'hsr' [ 321.313194][ T8534] Cannot create hsr debugfs directory [ 321.321432][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.569010][ T7327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.657372][ T7327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.667618][ T7327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.680520][ T6087] hsr_slave_0: left promiscuous mode [ 321.686510][ T6087] hsr_slave_1: left promiscuous mode [ 321.692272][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.700209][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.708874][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.718139][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.735602][ T6087] veth1_macvtap: left promiscuous mode [ 321.742448][ T6087] veth0_macvtap: left promiscuous mode [ 321.751158][ T6087] veth1_vlan: left promiscuous mode [ 321.756617][ T6087] veth0_vlan: left promiscuous mode [ 321.868943][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 322.031044][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 322.042269][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 322.055478][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.065160][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.094371][ T9] usb 1-1: config 0 descriptor?? [ 322.111229][ T8570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.152083][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 322.199364][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 322.337051][ T5848] Bluetooth: hci5: command tx timeout [ 322.341251][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 322.351986][ T5848] Bluetooth: hci1: command tx timeout [ 322.544421][ T9] usb 1-1: USB disconnect, device number 3 [ 322.576020][ T1326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.931911][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 323.017714][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.028297][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.310088][ T6087] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.290088][ T6087] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.338482][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.353251][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.363336][ T8564] bridge_slave_0: entered allmulticast mode [ 324.372890][ T8564] bridge_slave_0: entered promiscuous mode [ 324.392163][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.401288][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.408663][ T8564] bridge_slave_1: entered allmulticast mode [ 324.415817][ T8564] bridge_slave_1: entered promiscuous mode [ 324.421869][ T5848] Bluetooth: hci1: command tx timeout [ 324.421878][ T5851] Bluetooth: hci5: command tx timeout [ 324.471612][ T6087] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.500686][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.525412][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.885079][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.940872][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.992779][ T6087] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.157055][ T8564] team0: Port device team_slave_0 added [ 325.261266][ T8564] team0: Port device team_slave_1 added [ 325.298785][ T8534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.204458][ T8594] delete_channel: no stack [ 326.229058][ T8534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.251110][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.346471][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.391150][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.411440][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.418892][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.496731][ T5851] Bluetooth: hci1: command tx timeout [ 327.257328][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.306373][ T8534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.449891][ T8534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.256152][ T8564] hsr_slave_0: entered promiscuous mode [ 328.267771][ T8564] hsr_slave_1: entered promiscuous mode [ 328.273981][ T8564] debugfs: 'hsr0' already exists in 'hsr' [ 328.279852][ T8564] Cannot create hsr debugfs directory [ 328.490934][ T6087] bridge_slave_1: left allmulticast mode [ 328.514273][ T6087] bridge_slave_1: left promiscuous mode [ 328.530886][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.563972][ T6087] bridge_slave_0: left allmulticast mode [ 328.569880][ T6087] bridge_slave_0: left promiscuous mode [ 328.575662][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.586821][ T5851] Bluetooth: hci1: command tx timeout [ 328.828213][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 328.851564][ T6087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.860642][ T6087] bond_slave_0: left promiscuous mode [ 328.869381][ T6087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.879553][ T6087] bond_slave_1: left promiscuous mode [ 328.886085][ T6087] bond0 (unregistering): Released all slaves [ 328.991603][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 329.010075][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 329.033259][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.044651][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.055291][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.065943][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.080377][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.093226][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.327997][ T24] usb 1-1: usb_control_msg returned -32 [ 329.333586][ T24] usbtmc 1-1:16.0: can't read capabilities [ 329.432407][ T6087] hsr_slave_0: left promiscuous mode [ 329.441354][ T6087] hsr_slave_1: left promiscuous mode [ 329.453233][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.462708][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.476682][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.484491][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.511598][ T6087] veth1_macvtap: left promiscuous mode [ 329.517869][ T6087] veth0_macvtap: left promiscuous mode [ 329.524116][ T6087] veth1_vlan: left promiscuous mode [ 329.531423][ T6087] veth0_vlan: left promiscuous mode [ 330.259959][ T6087] team_slave_1 (unregistering): left promiscuous mode [ 330.269576][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 330.313798][ T6087] team_slave_0 (unregistering): left promiscuous mode [ 330.322113][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 330.951591][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.091055][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.135564][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.142822][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.263897][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.271061][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.563587][ T8642] comedi comedi3: comedi_config --init_data is deprecated [ 331.724520][ T24] usb 1-1: USB disconnect, device number 4 [ 332.531299][ T8564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.757930][ T8564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.783203][ T8564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.810303][ T8564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.040867][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 333.493000][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.941175][ T8675] Bluetooth: MGMT ver 1.23 [ 334.277929][ T8534] veth0_vlan: entered promiscuous mode [ 334.330716][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.479135][ T8534] veth1_vlan: entered promiscuous mode [ 334.570128][ T8680] pim6reg: entered allmulticast mode [ 334.611899][ T8680] 9pnet_fd: Insufficient options for proto=fd [ 334.720652][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.855852][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.863084][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.961506][ T8534] veth0_macvtap: entered promiscuous mode [ 335.018211][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.025427][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.142532][ T8534] veth1_macvtap: entered promiscuous mode [ 336.157601][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.183926][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.189367][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.192445][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.251753][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.264937][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.365619][ T1326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.554326][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.622616][ T1326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.718431][ T6417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.739463][ T6417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.776047][ T1326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.824029][ T6417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.841841][ T6417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.919942][ T1326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.341002][ T5848] Bluetooth: hci2: command tx timeout [ 339.041437][ T1326] bridge_slave_1: left allmulticast mode [ 339.061938][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.070396][ T1326] bridge_slave_1: left promiscuous mode [ 339.076175][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.087909][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.096416][ T5948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 339.121216][ T1326] bridge_slave_0: left allmulticast mode [ 339.140319][ T1326] bridge_slave_0: left promiscuous mode [ 339.146155][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.273715][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 339.503413][ T5948] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 339.515090][ T5948] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 339.542624][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 340.060659][ T5948] usb 5-1: config 1 has no interface number 0 [ 340.066894][ T5948] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58568, setting to 1024 [ 340.078045][ T5948] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 340.090960][ T5948] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 340.100321][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.224314][ T8736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 340.263266][ T5948] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 340.419457][ T5848] Bluetooth: hci2: command tx timeout [ 340.725706][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.760329][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.790799][ T1326] bond0 (unregistering): Released all slaves [ 340.852921][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.903521][ T5948] snd_usb_pod 5-1:1.1: set_interface failed [ 341.066736][ T8699] chnl_net:caif_netlink_parms(): no params data found [ 341.154092][ T5948] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 341.161515][ T5948] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 341.172736][ T5948] usb 5-1: USB disconnect, device number 2 [ 341.386852][ T7646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.394776][ T7646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.496450][ T5848] Bluetooth: hci2: command tx timeout [ 342.905262][ T8783] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 344.595005][ T5848] Bluetooth: hci2: command tx timeout [ 345.206320][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 345.356313][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 345.375413][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 345.394430][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 345.415755][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.425761][ T10] usb 2-1: Product: syz [ 345.435466][ T10] usb 2-1: Manufacturer: syz [ 345.441579][ T10] usb 2-1: SerialNumber: syz [ 345.461420][ T10] usb 2-1: config 0 descriptor?? [ 345.909597][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 346.117478][ T10] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 346.151717][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 346.191655][ T1326] hsr_slave_0: left promiscuous mode [ 346.210256][ T1326] hsr_slave_1: left promiscuous mode [ 346.229180][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.269310][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.294902][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.317037][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.364997][ T1326] veth1_macvtap: left promiscuous mode [ 346.375169][ T1326] veth0_macvtap: left promiscuous mode [ 346.384806][ T1326] veth1_vlan: left promiscuous mode [ 346.397326][ T1326] veth0_vlan: left promiscuous mode [ 348.023127][ T5948] usb 2-1: USB disconnect, device number 2 [ 348.261124][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 348.358237][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 349.517180][ T5994] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 349.551198][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 349.574764][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.590748][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.598095][ T8699] bridge_slave_0: entered allmulticast mode [ 349.605395][ T8699] bridge_slave_0: entered promiscuous mode [ 349.620540][ T8804] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 349.653701][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.682157][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.717302][ T5994] usb 1-1: Using ep0 maxpacket: 8 [ 349.717992][ T8699] bridge_slave_1: entered allmulticast mode [ 349.733643][ T8699] bridge_slave_1: entered promiscuous mode [ 349.737328][ T5994] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 349.769802][ T8899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 349.776450][ T8899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.805279][ T8899] vhci_hcd vhci_hcd.0: Device attached [ 349.811418][ T5994] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.825777][ T5994] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.849098][ T5994] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.867469][ T5994] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.881248][ T5994] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.891122][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.971014][ T8699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.020813][ T8564] veth0_vlan: entered promiscuous mode [ 350.056483][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 350.056662][ T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 350.089413][ T8699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.110371][ T5994] usb 1-1: usb_control_msg returned -32 [ 350.130206][ T5994] usbtmc 1-1:16.0: can't read capabilities [ 350.202762][ T8699] team0: Port device team_slave_0 added [ 350.214032][ T8564] veth1_vlan: entered promiscuous mode [ 350.231471][ T8699] team0: Port device team_slave_1 added [ 350.237641][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 350.274157][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.322282][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 350.363259][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 350.408074][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 350.427287][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.533453][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 350.622153][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.717142][ T43] usb 2-1: Product: syz [ 350.771463][ T43] usb 2-1: Manufacturer: syz [ 350.805863][ T43] usb 2-1: SerialNumber: syz [ 350.838661][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.848691][ T43] usb 2-1: config 0 descriptor?? [ 350.859356][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.908555][ T8699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.926514][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.933697][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.962610][ T8699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.074070][ T8564] veth0_macvtap: entered promiscuous mode [ 351.100484][ T43] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 351.109017][ T8900] vhci_hcd: connection reset by peer [ 351.125668][ T1326] vhci_hcd: stop threads [ 351.130663][ T1326] vhci_hcd: release socket [ 351.156806][ T43] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 351.174019][ T1326] vhci_hcd: disconnect device [ 351.195326][ T43] usb 2-1: USB disconnect, device number 3 [ 351.211123][ T8699] hsr_slave_0: entered promiscuous mode [ 351.229786][ T8699] hsr_slave_1: entered promiscuous mode [ 351.236166][ T8699] debugfs: 'hsr0' already exists in 'hsr' [ 351.255728][ T8699] Cannot create hsr debugfs directory [ 351.302922][ T8564] veth1_macvtap: entered promiscuous mode [ 351.368636][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.423043][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.560205][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.579833][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.598578][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.665419][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.674733][ T5994] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 351.866412][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 351.880934][ T5994] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 351.917991][ T5994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.956366][ T5994] usb 5-1: config 0 has no interfaces? [ 351.968130][ T5994] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 352.024021][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.587764][ T5994] usb 5-1: config 0 descriptor?? [ 352.668458][ T980] usb 1-1: USB disconnect, device number 5 [ 353.085055][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.101302][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.063378][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.093904][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.315628][ T8699] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 354.409614][ T8956] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 355.179872][ T8956] orangefs_mount: mount request failed with -4 [ 355.198664][ T5907] usb 5-1: USB disconnect, device number 3 [ 355.237694][ T8699] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 355.299885][ T8699] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 355.353483][ T10] vhci_hcd: vhci_device speed not set [ 355.360007][ T8699] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 355.709016][ T5907] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 355.903158][ T8979] comedi comedi3: pcl818: I/O port conflict (0x2f00,16) [ 355.913755][ T8979] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 355.925665][ T8979] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 355.934100][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.1.563 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 355.945483][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.955566][ T8979] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 355.961148][ T8979] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 99 88 39 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 78 88 39 f9 4d 8b 24 24 48 83 c3 [ 355.980777][ T8979] RSP: 0018:ffffc90003e6f9f0 EFLAGS: 00010206 [ 355.986857][ T8979] RAX: 0000000000000005 RBX: ffff888030152200 RCX: 0000000000080000 [ 355.994820][ T8979] RDX: ffffc9000cded000 RSI: 000000000000259a RDI: 000000000000259b [ 356.002784][ T8979] RBP: 0000000000000001 R08: ffff88802f00192f R09: 1ffff11005e00325 [ 356.010746][ T8979] R10: dffffc0000000000 R11: ffffffff88eacf40 R12: 0000000000000028 [ 356.018710][ T8979] R13: dffffc0000000000 R14: ffff88802f001800 R15: dffffc0000000000 [ 356.026680][ T8979] FS: 00007fd10d7c56c0(0000) GS:ffff888125bed000(0000) knlGS:0000000000000000 [ 356.035603][ T8979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.042183][ T8979] CR2: 00007ffeb1157da8 CR3: 0000000028594000 CR4: 00000000003526f0 [ 356.050150][ T8979] Call Trace: [ 356.053421][ T8979] [ 356.056349][ T8979] pcl818_detach+0x66/0xd0 [ 356.060771][ T8979] comedi_device_detach+0x137/0x720 [ 356.065970][ T8979] comedi_device_attach+0x568/0x670 [ 356.071170][ T8979] comedi_unlocked_ioctl+0x686/0xf40 [ 356.076459][ T8979] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 356.082288][ T8979] ? __lock_acquire+0xab9/0xd20 [ 356.087141][ T8979] ? __fget_files+0x2a/0x420 [ 356.091731][ T8979] ? __fget_files+0x2a/0x420 [ 356.096324][ T8979] ? __fget_files+0x3a0/0x420 [ 356.101001][ T8979] ? __fget_files+0x2a/0x420 [ 356.105595][ T8979] ? bpf_lsm_file_ioctl+0x9/0x20 [ 356.110532][ T8979] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 356.116337][ T8979] __se_sys_ioctl+0xf9/0x170 [ 356.120924][ T8979] do_syscall_64+0xfa/0x3b0 [ 356.125425][ T8979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.131491][ T8979] ? asm_sysvec_call_function_single+0x1a/0x20 [ 356.137636][ T8979] ? clear_bhb_loop+0x60/0xb0 [ 356.142305][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.148188][ T8979] RIP: 0033:0x7fd10c98e929 [ 356.152611][ T8979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.172233][ T8979] RSP: 002b:00007fd10d7c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.180697][ T8979] RAX: ffffffffffffffda RBX: 00007fd10cbb6080 RCX: 00007fd10c98e929 [ 356.188678][ T8979] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000009 [ 356.196651][ T8979] RBP: 00007fd10ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 356.204619][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.212583][ T8979] R13: 0000000000000000 R14: 00007fd10cbb6080 R15: 00007ffc7b6ca638 [ 356.220557][ T8979] [ 356.223571][ T8979] Modules linked in: [ 356.231483][ T8979] ---[ end trace 0000000000000000 ]--- [ 356.234242][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.243929][ T8979] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 356.249735][ T8979] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 99 88 39 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 78 88 39 f9 4d 8b 24 24 48 83 c3 [ 356.253612][ T8699] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.276170][ T8979] RSP: 0018:ffffc90003e6f9f0 EFLAGS: 00010206 [ 356.284393][ T8979] RAX: 0000000000000005 RBX: ffff888030152200 RCX: 0000000000080000 [ 356.292792][ T8979] RDX: ffffc9000cded000 RSI: 000000000000259a RDI: 000000000000259b [ 356.301059][ T8979] RBP: 0000000000000001 R08: ffff88802f00192f R09: 1ffff11005e00325 [ 356.309009][ T8699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.319652][ T8979] R10: dffffc0000000000 R11: ffffffff88eacf40 R12: 0000000000000028 [ 356.323424][ T8699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.338191][ T8979] R13: dffffc0000000000 R14: ffff88802f001800 R15: dffffc0000000000 [ 356.346349][ T8979] FS: 00007fd10d7c56c0(0000) GS:ffff888125bed000(0000) knlGS:0000000000000000 [ 356.355328][ T8979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.362077][ T8979] CR2: 00007f0b558e7d60 CR3: 0000000028594000 CR4: 00000000003526f0 [ 356.370392][ T8979] Kernel panic - not syncing: Fatal exception [ 356.376795][ T8979] Kernel Offset: disabled [ 356.381114][ T8979] Rebooting in 86400 seconds..