last executing test programs: 35m54.553874172s ago: executing program 3 (id=94): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x20000801) 35m53.214812564s ago: executing program 3 (id=103): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 35m52.422078776s ago: executing program 32 (id=103): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 34m56.041327594s ago: executing program 33 (id=352): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 32m26.503007504s ago: executing program 34 (id=1150): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 31m19.409109713s ago: executing program 35 (id=1534): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4d, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 28m38.659928764s ago: executing program 36 (id=2283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$UHID_INPUT(r2, 0x0, 0x0) 20m21.611279474s ago: executing program 9 (id=3839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x2, 0x1, 0x5, 0x0, 0x3}, 0x20) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 20m20.277186287s ago: executing program 9 (id=3842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) 20m19.857403499s ago: executing program 9 (id=3844): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 20m19.262005287s ago: executing program 9 (id=3847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(r0, 0x0, 0x4, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 20m16.944287068s ago: executing program 9 (id=3849): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8000040400000000}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20m13.284767029s ago: executing program 9 (id=3857): socket$alg(0x26, 0x5, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000300)=""/205, &(0x7f0000000080)=0xcd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 19m56.346949012s ago: executing program 37 (id=3857): socket$alg(0x26, 0x5, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000300)=""/205, &(0x7f0000000080)=0xcd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 17m39.289471939s ago: executing program 8 (id=4141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x6bd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) userfaultfd(0x80800) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f0000001380)=""/229, 0xe5) tee(r3, r0, 0x0, 0x0) io_uring_enter(r0, 0x47f9, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 17m34.608701172s ago: executing program 8 (id=4148): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 17m31.759643991s ago: executing program 8 (id=4151): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)='1', 0x1, 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000400)={r2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 17m31.530082198s ago: executing program 8 (id=4153): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close_range(r4, 0xffffffffffffffff, 0x0) 17m25.23153589s ago: executing program 8 (id=4158): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0x0, r4, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x1ff, {0x0, 0x7fffffff, 0x8, 0xa, 0x3, 0x8000000000000001, 0x921, 0x7, 0x101, 0x1000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0xffffffffffffffff}}, 0x18) 17m23.282999586s ago: executing program 8 (id=4161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 17m7.05931427s ago: executing program 38 (id=4161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 16m52.927394742s ago: executing program 2 (id=4205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 16m51.346203197s ago: executing program 2 (id=4208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 16m28.916273192s ago: executing program 2 (id=4218): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\''], 0xb8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 16m24.793027503s ago: executing program 2 (id=4213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 16m22.836249711s ago: executing program 2 (id=4215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05d169d90158f81890e3db00"}, 0xd8) 16m21.629431274s ago: executing program 2 (id=4220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpgrp(0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16m19.9779772s ago: executing program 5 (id=4222): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16m18.849377432s ago: executing program 5 (id=4224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 16m17.451970803s ago: executing program 5 (id=4227): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100)=0x1, 0x4) 16m13.85102463s ago: executing program 5 (id=4229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 16m13.66488661s ago: executing program 3 (id=3881): setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 16m12.276463526s ago: executing program 5 (id=4233): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x627, 0x10102, 0x0) 16m10.062831971s ago: executing program 5 (id=4235): socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x7855, 0x0, 0x0, 0x0, 0x0) 16m8.002852189s ago: executing program 3 (id=4238): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 16m5.758867639s ago: executing program 39 (id=4220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpgrp(0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16m5.440396955s ago: executing program 3 (id=4242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x1, 0x30}, 0xc) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 16m2.746401623s ago: executing program 3 (id=4245): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 15m54.330525886s ago: executing program 40 (id=4235): socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x7855, 0x0, 0x0, 0x0, 0x0) 15m47.403026166s ago: executing program 41 (id=4245): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 3m45.812824847s ago: executing program 1 (id=5087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = msgget$private(0x0, 0x1c0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008780)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x64}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f0000000640)='./bus\x00', 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x8, 0x0) 3m45.145236417s ago: executing program 1 (id=5088): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 3m43.22988197s ago: executing program 1 (id=5090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) 3m18.151914364s ago: executing program 1 (id=5101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24004815, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) 3m14.736609393s ago: executing program 1 (id=5092): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 3m13.947062642s ago: executing program 1 (id=5095): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 2m58.770874876s ago: executing program 42 (id=5095): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 2m32.313221914s ago: executing program 7 (id=5142): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 2m29.823166803s ago: executing program 7 (id=5143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000340)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000540)=""/145) 2m26.994577326s ago: executing program 7 (id=5146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x2, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x1, 0x0}) io_uring_enter(r4, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m25.290732111s ago: executing program 7 (id=5151): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000200)=@sg0, 0x0, &(0x7f00000002c0)='./file0\x00') fcntl$setlease(r0, 0x400, 0x0) 2m20.402877172s ago: executing program 7 (id=5154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) syz_open_procfs(0x0, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 2m16.988940847s ago: executing program 7 (id=5157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 1m57.233741018s ago: executing program 43 (id=5157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 1m1.926784236s ago: executing program 4 (id=5235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket(0xa, 0x3, 0x87) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 59.477357757s ago: executing program 4 (id=5239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40c1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 57.718851619s ago: executing program 4 (id=5242): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 57.663314133s ago: executing program 4 (id=5243): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x741600, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x3) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000003c0)={0x1d, r5, 0xfffffffffffffffd, {0x2, 0xf0, 0x1}, 0x2}, 0x18) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x1, {0x2, 0xf0, 0x1}, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(0x0, r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) 53.93823773s ago: executing program 4 (id=5248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) 51.208425575s ago: executing program 4 (id=5252): openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) 36.106169467s ago: executing program 44 (id=5252): openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) 12.160454169s ago: executing program 0 (id=5301): fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x4, 0x5}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x1de, 0xfffffffffffffffb) keyctl$revoke(0x3, r2) socket$inet6_sctp(0xa, 0x5, 0x84) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.088097145s ago: executing program 6 (id=5304): r0 = socket(0xa, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 7.859838066s ago: executing program 6 (id=5305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) fcntl$setstatus(r4, 0x4, 0x40800) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0x0, {}, 0x1}, 0x18) sendfile(r4, r3, 0x0, 0x1000000000000a) 6.458775767s ago: executing program 0 (id=5306): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 5.139372284s ago: executing program 0 (id=5307): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x800, 0x4, 0x7, 0x6, 0xf97}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) 4.131003376s ago: executing program 6 (id=5308): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000900)=0x4) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB, @ANYRES32], 0xd8}, 0x20000080) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000040)={0x2, 0x200, '@\x00V', 0x1, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x6e23, 0x20006, @empty, 0x6}}, 0x4, 0x2, 0x0, 0x5, 0x392, 0x97}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) 3.870264114s ago: executing program 0 (id=5309): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getpid() r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0x18000c, 0x3, 0x59c, 0xffffffffffffffff}) r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) dup3(0xffffffffffffffff, r2, 0x0) 2.590757326s ago: executing program 6 (id=5310): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x136) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 2.564466145s ago: executing program 0 (id=5311): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.394437229s ago: executing program 6 (id=5312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x51) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000080)) 83.764043ms ago: executing program 6 (id=5313): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) 0s ago: executing program 0 (id=5314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, 0x0, 0x40040) syz_open_procfs(0x0, 0x0) kernel console output (not intermixed with test programs): 32][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.297264][T18837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.576475][T18837] hsr_slave_0: entered promiscuous mode [ 1292.577972][T18837] hsr_slave_1: entered promiscuous mode [ 1292.578923][T18837] debugfs: 'hsr0' already exists in 'hsr' [ 1292.578957][T18837] Cannot create hsr debugfs directory [ 1293.389963][T18753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1293.472223][T18753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1293.570956][T18753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1293.621129][T18753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1294.142176][T18753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.203213][T18753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.223851][T18182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.224581][T18182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.243444][T18182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.243605][T18182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.772662][T18753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.217679][T18753] veth0_vlan: entered promiscuous mode [ 1295.273163][T18837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1295.303024][T18753] veth1_vlan: entered promiscuous mode [ 1295.305278][T18837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1295.345090][T18837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1295.413686][T18837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1295.556237][T18753] veth0_macvtap: entered promiscuous mode [ 1295.574529][T18753] veth1_macvtap: entered promiscuous mode [ 1295.624512][T18753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.653213][T18753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.689183][T18182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.691009][T18182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.692250][T18182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.693958][T18182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.740407][T18837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.953414][T18837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.017677][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.017827][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.059305][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.059556][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.139551][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.139576][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.245067][T18182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.245091][T18182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.159706][T18837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.661938][T18837] veth0_vlan: entered promiscuous mode [ 1302.207334][T18837] veth1_vlan: entered promiscuous mode [ 1302.341502][T18837] veth0_macvtap: entered promiscuous mode [ 1302.770871][T18837] veth1_macvtap: entered promiscuous mode [ 1303.771346][T18837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.823502][T18837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.534894][ T3562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.540851][T11921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.563467][ T1177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.596610][ T1177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.799900][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.977572][T10361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.977598][T10361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.338919][T11921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.338943][T11921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.639917][T18949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.896761][T18958] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1313.954681][T18958] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1316.944522][T18981] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1316.944555][T18981] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1318.856221][T18992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.857412][T18992] IPv6: NLM_F_CREATE should be set when creating new route [ 1318.859119][T18992] IPv6: NLM_F_CREATE should be set when creating new route [ 1318.859388][T18992] IPv6: NLM_F_CREATE should be set when creating new route [ 1322.827016][T19010] netlink: 'syz.0.4244': attribute type 1 has an invalid length. [ 1322.827045][T19010] netlink: 'syz.0.4244': attribute type 1 has an invalid length. [ 1323.714159][T19010] netlink: 'syz.0.4244': attribute type 1 has an invalid length. [ 1328.023490][T19033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1328.053361][T19033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1328.060236][T19033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1328.071951][T19033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1328.077525][T19033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1329.040537][T19033] Bluetooth: hci1: command 0x0406 tx timeout [ 1330.349478][T19033] Bluetooth: hci5: command tx timeout [ 1331.121554][T19032] chnl_net:caif_netlink_parms(): no params data found [ 1332.465614][T16104] Bluetooth: hci5: command tx timeout [ 1333.791720][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4255'. [ 1334.545520][T16104] Bluetooth: hci5: command tx timeout [ 1336.447223][T19032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.447377][T19032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.447655][T19032] bridge_slave_0: entered allmulticast mode [ 1336.485645][T19032] bridge_slave_0: entered promiscuous mode [ 1336.503743][T19032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.332425][T16104] Bluetooth: hci5: command tx timeout [ 1337.365528][T19032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.365815][T19032] bridge_slave_1: entered allmulticast mode [ 1337.397835][T19032] bridge_slave_1: entered promiscuous mode [ 1339.158067][T19033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1339.253204][T19033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1339.255153][T19033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1339.270319][T19033] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1339.271336][T19033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1341.149404][T19032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.303664][T19032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.376340][T16104] Bluetooth: hci6: command tx timeout [ 1341.509707][T19033] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1341.551334][T19033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1341.566312][T19033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1341.571737][T19033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1341.574762][T19033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1342.009491][T19032] team0: Port device team_slave_0 added [ 1342.013369][T19032] team0: Port device team_slave_1 added [ 1343.526961][T19033] Bluetooth: hci6: command tx timeout [ 1344.231031][T19033] Bluetooth: hci3: command tx timeout [ 1345.618146][T19033] Bluetooth: hci6: command tx timeout [ 1346.371072][T19033] Bluetooth: hci3: command tx timeout [ 1347.669996][T19033] Bluetooth: hci6: command tx timeout [ 1349.451959][T19033] Bluetooth: hci3: command tx timeout [ 1349.960389][T19032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.960418][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.960448][T19032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.996120][T19032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.996143][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.996178][T19032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.144875][T11921] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.530798][T16104] Bluetooth: hci3: command tx timeout [ 1356.111560][T11921] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.453060][T19032] hsr_slave_0: entered promiscuous mode [ 1356.454684][T19032] hsr_slave_1: entered promiscuous mode [ 1356.456001][T19032] debugfs: 'hsr0' already exists in 'hsr' [ 1356.456031][T19032] Cannot create hsr debugfs directory [ 1361.209254][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.576302][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.294852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.428964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.432929][T11921] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.633657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.761301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.252631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.590882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.677651][T11921] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.531689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.486307][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.620807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.556555][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.866952][T19232] overlayfs: failed to clone lowerpath [ 1369.122729][T19083] chnl_net:caif_netlink_parms(): no params data found [ 1369.742184][T11921] bridge_slave_1: left allmulticast mode [ 1369.742223][T11921] bridge_slave_1: left promiscuous mode [ 1369.742524][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.078616][T19241] hub 9-0:1.0: USB hub found [ 1370.088429][T19241] hub 9-0:1.0: 1 port detected [ 1370.754279][T11921] bridge_slave_0: left allmulticast mode [ 1370.754317][T11921] bridge_slave_0: left promiscuous mode [ 1370.754618][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.405548][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 1378.203927][T19276] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4307'. [ 1382.182668][T16104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1382.212542][T16104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1382.224622][T16104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1382.240247][T16104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1382.244432][T16104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1384.400630][T16104] Bluetooth: hci0: command tx timeout [ 1385.187667][T16104] Bluetooth: hci4: command 0x0406 tx timeout [ 1386.478168][ T59] Bluetooth: hci0: command tx timeout [ 1388.545552][ T59] Bluetooth: hci0: command tx timeout [ 1390.693298][ T59] Bluetooth: hci0: command tx timeout [ 1391.318332][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.410362][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.470018][T11921] bond0 (unregistering): Released all slaves [ 1391.882177][T19344] overlayfs: failed to clone upperpath [ 1391.933735][T19344] overlayfs: failed to clone upperpath [ 1391.993427][T19098] chnl_net:caif_netlink_parms(): no params data found [ 1393.450388][T16104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1393.490130][T16104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1393.510409][T16104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1393.514764][T16104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1393.520008][T16104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1396.191703][T16104] Bluetooth: hci2: command tx timeout [ 1398.333184][ T59] Bluetooth: hci2: command tx timeout [ 1400.406206][ T59] Bluetooth: hci2: command tx timeout [ 1401.015235][T19098] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1402.475608][ T59] Bluetooth: hci2: command tx timeout [ 1404.728865][T16104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1404.787686][T16104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1404.792587][T16104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1404.793888][T16104] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1404.794723][T16104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1406.893926][T19033] Bluetooth: hci6: command tx timeout [ 1407.408664][T11921] hsr_slave_0: left promiscuous mode [ 1407.435619][T11921] hsr_slave_1: left promiscuous mode [ 1407.437188][T11921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.437220][T11921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.443592][T19409] overlayfs: failed to clone upperpath [ 1407.484398][T11921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.484439][T11921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.762147][T11921] veth1_macvtap: left promiscuous mode [ 1407.762283][T11921] veth0_macvtap: left promiscuous mode [ 1407.762610][T11921] veth1_vlan: left promiscuous mode [ 1407.762826][T11921] veth0_vlan: left promiscuous mode [ 1408.971970][T19033] Bluetooth: hci6: command tx timeout [ 1411.325627][T19033] Bluetooth: hci6: command tx timeout [ 1413.649528][T19033] Bluetooth: hci6: command tx timeout [ 1428.516840][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.366226][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1430.616356][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1433.471721][T19033] Bluetooth: hci1: command 0x0406 tx timeout [ 1438.669081][T18939] infiniband syz1: ib_query_port failed (-19) [ 1444.769019][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1444.792877][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1444.806944][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1444.811533][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1444.813205][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1445.655924][T19349] chnl_net:caif_netlink_parms(): no params data found [ 1446.191462][T19391] chnl_net:caif_netlink_parms(): no params data found [ 1447.088919][ T59] Bluetooth: hci3: command tx timeout [ 1449.105643][ T59] Bluetooth: hci3: command tx timeout [ 1451.195581][ T59] Bluetooth: hci3: command tx timeout [ 1453.439160][ T59] Bluetooth: hci3: command tx timeout [ 1454.042701][T19033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1454.072708][T19033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1454.082709][T19033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1454.130104][T19033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1454.142529][T19033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1458.016942][T19033] Bluetooth: hci0: command tx timeout [ 1460.412743][T19033] Bluetooth: hci0: command tx timeout [ 1460.425878][T19391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.426053][T19391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.426311][T19391] bridge_slave_0: entered allmulticast mode [ 1460.428958][T19391] bridge_slave_0: entered promiscuous mode [ 1460.467513][T19391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.467677][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.467908][T19391] bridge_slave_1: entered allmulticast mode [ 1460.471309][T19391] bridge_slave_1: entered promiscuous mode [ 1461.117582][T17573] libceph: connect (1)[c::]:6789 error -101 [ 1461.117823][T17573] libceph: mon0 (1)[c::]:6789 connect error [ 1461.960490][T19644] ceph: No mds server is up or the cluster is laggy [ 1461.970430][T17573] libceph: connect (1)[c::]:6789 error -101 [ 1461.970686][T17573] libceph: mon0 (1)[c::]:6789 connect error [ 1462.478395][T19033] Bluetooth: hci0: command tx timeout [ 1462.505215][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1462.515020][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1462.516968][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1462.520335][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1462.521401][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1462.731782][T11921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.139594][T11921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.184258][T19554] chnl_net:caif_netlink_parms(): no params data found [ 1463.463051][T11921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.903157][T11921] team0: Port device netdevsim0 removed [ 1463.911523][T11921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.073249][T19554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.075588][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.075873][T19554] bridge_slave_0: entered allmulticast mode [ 1464.079820][T19554] bridge_slave_0: entered promiscuous mode [ 1464.101226][T19554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.101417][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.101732][T19554] bridge_slave_1: entered allmulticast mode [ 1464.105899][T19554] bridge_slave_1: entered promiscuous mode [ 1464.352784][T19554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.373394][T19554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.545534][ T59] Bluetooth: hci0: command tx timeout [ 1464.622145][T19554] team0: Port device team_slave_0 added [ 1464.629479][ T59] Bluetooth: hci2: command tx timeout [ 1464.736140][T19554] team0: Port device team_slave_1 added [ 1464.983622][T19606] chnl_net:caif_netlink_parms(): no params data found [ 1464.998593][T19554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.998611][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.998641][T19554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1465.072949][T19554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.072967][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.072998][T19554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.388494][T19650] chnl_net:caif_netlink_parms(): no params data found [ 1465.521410][T19554] hsr_slave_0: entered promiscuous mode [ 1465.523328][T19554] hsr_slave_1: entered promiscuous mode [ 1465.524595][T19554] debugfs: 'hsr0' already exists in 'hsr' [ 1465.524623][T19554] Cannot create hsr debugfs directory [ 1465.962046][T19606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.962235][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.962465][T19606] bridge_slave_0: entered allmulticast mode [ 1465.986346][T19606] bridge_slave_0: entered promiscuous mode [ 1466.039129][T19606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.039366][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.039597][T19606] bridge_slave_1: entered allmulticast mode [ 1466.042537][T19606] bridge_slave_1: entered promiscuous mode [ 1466.632142][T19606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.659314][T19650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.660050][T19650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.660300][T19650] bridge_slave_0: entered allmulticast mode [ 1466.663276][T19650] bridge_slave_0: entered promiscuous mode [ 1466.705494][ T59] Bluetooth: hci2: command tx timeout [ 1466.724156][T19606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.746927][T19650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.747079][T19650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.747306][T19650] bridge_slave_1: entered allmulticast mode [ 1466.750295][T19650] bridge_slave_1: entered promiscuous mode [ 1467.213257][T19606] team0: Port device team_slave_0 added [ 1467.291570][T19650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.327992][T19606] team0: Port device team_slave_1 added [ 1467.347433][T19650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.921859][T19606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.921878][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.921910][T19606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.948509][T19650] team0: Port device team_slave_0 added [ 1467.951933][T19606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.951951][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.951987][T19606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.970856][T19650] team0: Port device team_slave_1 added [ 1468.293826][T19650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.293844][T19650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.293875][T19650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.634896][T19650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.634914][T19650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.634946][T19650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.808778][ T59] Bluetooth: hci2: command tx timeout [ 1468.899746][T19606] hsr_slave_0: entered promiscuous mode [ 1468.901285][T19606] hsr_slave_1: entered promiscuous mode [ 1468.902300][T19606] debugfs: 'hsr0' already exists in 'hsr' [ 1468.902326][T19606] Cannot create hsr debugfs directory [ 1469.473990][T19650] hsr_slave_0: entered promiscuous mode [ 1469.476135][T19650] hsr_slave_1: entered promiscuous mode [ 1469.477324][T19650] debugfs: 'hsr0' already exists in 'hsr' [ 1469.477355][T19650] Cannot create hsr debugfs directory [ 1469.667727][T19554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1469.745098][T19554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1469.926974][T19554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1469.982815][T19554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1470.434159][T11921] bridge_slave_1: left allmulticast mode [ 1470.434198][T11921] bridge_slave_1: left promiscuous mode [ 1470.434513][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.512823][T11921] bridge_slave_0: left allmulticast mode [ 1470.512860][T11921] bridge_slave_0: left promiscuous mode [ 1470.513190][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.870754][ T59] Bluetooth: hci2: command tx timeout [ 1471.247663][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.356559][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.440229][T11921] bond0 (unregistering): Released all slaves [ 1471.638230][T11921] bond0 (unregistering): Released all slaves [ 1471.836775][T11921] bond0 (unregistering): Released all slaves [ 1472.128368][T11921] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1473.396169][T11921] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1474.891262][T11921] bond0 (unregistering): Released all slaves [ 1474.917181][T11921] bond1 (unregistering): Released all slaves [ 1477.183868][T11921] bond0 (unregistering): Released all slaves [ 1478.147498][T19554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.200303][T19554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.217726][T10376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.217908][T10376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.253476][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.253681][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.440101][T11921] tipc: Left network mode [ 1479.495224][T19554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.253422][T19554] veth0_vlan: entered promiscuous mode [ 1481.455615][T11921] hsr_slave_0: left promiscuous mode [ 1481.475585][T11921] hsr_slave_1: left promiscuous mode [ 1481.476656][T11921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.536760][T11921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.695602][T11921] hsr_slave_0: left promiscuous mode [ 1481.735601][T11921] hsr_slave_1: left promiscuous mode [ 1481.845541][T11921] hsr_slave_0: left promiscuous mode [ 1481.885580][T11921] hsr_slave_1: left promiscuous mode [ 1482.747359][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1482.926422][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1489.913797][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.562508][T19606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1495.611926][T19554] veth1_vlan: entered promiscuous mode [ 1495.622752][T19606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1495.672533][T19606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1495.703508][T19606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1496.106871][T19650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1496.165008][T19650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1496.241840][T19650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1496.335694][T19554] veth0_macvtap: entered promiscuous mode [ 1496.339434][T19650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1496.450429][T19554] veth1_macvtap: entered promiscuous mode [ 1496.581218][T19554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.624133][T19554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.662191][ T1168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.674450][ T1168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.686870][ T1168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.697360][ T1168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.208040][T19606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.338125][T11918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.338147][T11918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.408998][T19606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.538004][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.538026][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.540138][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.540371][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.586534][T19650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.632583][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.632916][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.759091][T19650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.820294][T11918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.820492][T11918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.880215][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.882533][T10379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.877959][T19606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.962630][T19650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.228734][T11921] IPVS: stop unused estimator thread 0... [ 1508.248177][T11921] IPVS: stop unused estimator thread 0... [ 1511.021132][ C1] vkms_vblank_simulate: vblank timer overrun [ 1511.235337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1511.274083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1511.424145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1512.325516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1512.460482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1512.871043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1513.132498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1513.385836][T11921] bridge_slave_1: left allmulticast mode [ 1513.385884][T11921] bridge_slave_1: left promiscuous mode [ 1513.388765][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.663567][ C1] vkms_vblank_simulate: vblank timer overrun [ 1513.702728][T11921] bridge_slave_0: left allmulticast mode [ 1513.702764][T11921] bridge_slave_0: left promiscuous mode [ 1513.706288][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.013776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.328589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.234347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.344582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.948416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.138010][T19033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1519.243682][T19033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1519.263788][T19033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1519.301826][T19033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1519.319221][T19033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1520.500218][T11921] bond0 (unregistering): Released all slaves [ 1522.300824][T19033] Bluetooth: hci5: command tx timeout [ 1523.464758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.689132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.315252][T19033] Bluetooth: hci5: command tx timeout [ 1524.572484][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1524.603550][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1524.604338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.610329][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1524.613697][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1524.615088][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1524.800512][T11921] bond0 (unregistering): Released all slaves [ 1525.023708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.421259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.416632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.559945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.758537][T19033] Bluetooth: hci5: command tx timeout [ 1526.758607][T19033] Bluetooth: hci0: command tx timeout [ 1527.248969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.426397][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4428'. [ 1527.468511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1529.255283][ T59] Bluetooth: hci0: command tx timeout [ 1529.255322][ T59] Bluetooth: hci5: command tx timeout [ 1531.363097][T19033] Bluetooth: hci0: command tx timeout [ 1534.342191][T19033] Bluetooth: hci0: command tx timeout [ 1542.418688][T18866] IPVS: starting estimator thread 0... [ 1542.515599][T19936] IPVS: using max 7 ests per chain, 16800 per kthread [ 1546.577321][T19855] chnl_net:caif_netlink_parms(): no params data found [ 1551.791190][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.876065][T19822] chnl_net:caif_netlink_parms(): no params data found [ 1554.271228][ T38] audit: type=1800 audit(1758449822.699:1198): pid=19976 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.4453" name="bus" dev="ramfs" ino=73910 res=0 errno=0 [ 1556.978264][T20010] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 20010 comm: syz.6.4459) [ 1557.321459][ T38] audit: type=1800 audit(1758449825.409:1199): pid=20010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4459" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=73358 res=0 errno=0 [ 1557.323389][T19855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.323552][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.323822][T19855] bridge_slave_0: entered allmulticast mode [ 1557.446839][T19855] bridge_slave_0: entered promiscuous mode [ 1557.535584][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.535743][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.536014][T19855] bridge_slave_1: entered allmulticast mode [ 1557.547186][T19855] bridge_slave_1: entered promiscuous mode [ 1558.480522][T19855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.630974][T19855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.244283][T19822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.245079][T19822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.247084][T19822] bridge_slave_0: entered allmulticast mode [ 1566.635537][T19822] bridge_slave_0: entered promiscuous mode [ 1567.206326][T19822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.206788][T19822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.208021][T19822] bridge_slave_1: entered allmulticast mode [ 1567.261324][T19822] bridge_slave_1: entered promiscuous mode [ 1567.660357][T19855] team0: Port device team_slave_0 added [ 1569.099828][T19033] Bluetooth: hci3: command 0x0406 tx timeout [ 1569.760501][T19855] team0: Port device team_slave_1 added [ 1573.329413][T19822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.589982][T19033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.619876][T19822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.626706][T19855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.626728][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.626763][T19855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.653907][T19855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.653929][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.653964][T19855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.655162][T19033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.657350][T19033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.662301][T19033] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.681765][T19033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1576.481344][T19855] hsr_slave_0: entered promiscuous mode [ 1576.491532][T19855] hsr_slave_1: entered promiscuous mode [ 1576.502900][T19855] debugfs: 'hsr0' already exists in 'hsr' [ 1576.502928][T19855] Cannot create hsr debugfs directory [ 1577.853464][ T59] Bluetooth: hci2: command tx timeout [ 1579.905360][ T59] Bluetooth: hci2: command tx timeout [ 1582.875279][ T59] Bluetooth: hci2: command tx timeout [ 1584.235782][T20147] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1584.235814][T20147] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1584.462485][T20147] vhci_hcd vhci_hcd.0: Device attached [ 1584.509958][T20151] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 1584.509988][T20151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1584.510147][T20151] vhci_hcd vhci_hcd.0: Device attached [ 1584.572100][T20159] vhci_hcd: connection closed [ 1584.587244][T20150] vhci_hcd: connection closed [ 1584.639207][T19874] vhci_hcd: stop threads [ 1584.640660][T19874] vhci_hcd: release socket [ 1584.649781][T19874] vhci_hcd: disconnect device [ 1584.675767][ T6019] vhci_hcd: vhci_device speed not set [ 1584.735489][ T6019] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1584.788084][T19874] vhci_hcd: stop threads [ 1584.788106][T19874] vhci_hcd: release socket [ 1584.788354][T19874] vhci_hcd: disconnect device [ 1584.950720][ T59] Bluetooth: hci2: command tx timeout [ 1585.530332][T19033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1585.550729][T19033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1585.553572][T19033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1585.556324][T19033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1585.558543][T19033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1587.114943][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4498'. [ 1587.114971][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4498'. [ 1587.665352][T19033] Bluetooth: hci5: command tx timeout [ 1589.769142][ T59] Bluetooth: hci5: command tx timeout [ 1589.835461][ T6019] vhci_hcd: vhci_device speed not set [ 1592.062905][ T59] Bluetooth: hci5: command tx timeout [ 1593.820576][T20104] chnl_net:caif_netlink_parms(): no params data found [ 1594.792708][ T59] Bluetooth: hci5: command tx timeout [ 1595.859203][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4513'. [ 1600.401880][T20266] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1601.532500][T20164] chnl_net:caif_netlink_parms(): no params data found [ 1607.815396][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1609.582727][T20104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.582866][T20104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.583163][T20104] bridge_slave_0: entered allmulticast mode [ 1609.598032][T20104] bridge_slave_0: entered promiscuous mode [ 1609.620593][T20104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.620814][T20104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.621130][T20104] bridge_slave_1: entered allmulticast mode [ 1609.625035][T20104] bridge_slave_1: entered promiscuous mode [ 1610.023718][ T9] usb 2-1: device descriptor read/all, error -71 [ 1610.709901][T20320] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1610.710175][T20320] overlayfs: missing 'lowerdir' [ 1612.126542][T20318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.020347][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.785443][T20164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.785595][T20164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.785881][T20164] bridge_slave_0: entered allmulticast mode [ 1614.788953][T20164] bridge_slave_0: entered promiscuous mode [ 1614.794561][T20104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.794763][T20164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.794904][T20164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.795114][T20164] bridge_slave_1: entered allmulticast mode [ 1615.168884][T20164] bridge_slave_1: entered promiscuous mode [ 1615.289342][T20104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.809470][T20342] delete_channel: no stack [ 1620.154232][T20164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.251255][T20104] team0: Port device team_slave_0 added [ 1620.276729][T20164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.281730][T20104] team0: Port device team_slave_1 added [ 1620.960030][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4546'. [ 1620.961727][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4546'. [ 1624.539712][T20378] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4547'. [ 1628.243712][T20164] team0: Port device team_slave_0 added [ 1628.273467][T20104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.273485][T20104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1628.273514][T20104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.414775][T20164] team0: Port device team_slave_1 added [ 1628.442583][T20104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.442602][T20104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1628.442634][T20104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.134798][T11921] bridge_slave_1: left allmulticast mode [ 1631.134838][T11921] bridge_slave_1: left promiscuous mode [ 1631.135105][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.981884][T11921] bridge_slave_0: left allmulticast mode [ 1632.981919][T11921] bridge_slave_0: left promiscuous mode [ 1632.982216][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.293027][T11921] bridge_slave_1: left allmulticast mode [ 1634.293063][T11921] bridge_slave_1: left promiscuous mode [ 1634.293375][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.617405][T11921] bridge_slave_0: left allmulticast mode [ 1634.617443][T11921] bridge_slave_0: left promiscuous mode [ 1634.617721][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.056695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.556889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.068524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.564734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.574930][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1637.608999][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1637.610953][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1637.614654][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1637.809858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1638.255548][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1638.390408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1638.541057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.360782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.534096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.841712][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.389546][ T59] Bluetooth: hci0: command tx timeout [ 1640.665506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.833424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1641.628353][T20478] /dev/nullb0: Can't lookup blockdev [ 1642.664011][ C1] vkms_vblank_simulate: vblank timer overrun [ 1642.685687][ T59] Bluetooth: hci0: command tx timeout [ 1642.764140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1643.063925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1643.167900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.747968][ T59] Bluetooth: hci0: command tx timeout [ 1645.315599][T20503] o2cb: This node has not been configured. [ 1645.315615][T20503] o2cb: Cluster check failed. Fix errors before retrying. [ 1645.315642][T20503] (syz.1.4580,20503,1):user_dlm_register:674 ERROR: status = -22 [ 1645.315668][T20503] (syz.1.4580,20503,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1647.203088][ T59] Bluetooth: hci0: command tx timeout [ 1647.556698][T19033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1648.414134][T19033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1648.423766][T19033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1648.428062][T19033] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1648.429548][T19033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1650.685267][ T59] Bluetooth: hci6: command tx timeout [ 1653.175283][ T59] Bluetooth: hci6: command tx timeout [ 1653.369161][T20549] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4592'. [ 1654.797081][T20558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1655.290006][ T59] Bluetooth: hci6: command tx timeout [ 1657.828460][ T59] Bluetooth: hci6: command tx timeout [ 1661.050154][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.416581][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.791486][T11921] bond0 (unregistering): Released all slaves [ 1667.357537][T20635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1667.358236][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1668.283516][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1670.116421][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.177194][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.218166][T11921] bond0 (unregistering): Released all slaves [ 1670.596623][T20639] nlmon0: Master is either lo or non-ether device [ 1675.064611][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.025311][T11921] hsr_slave_0: left promiscuous mode [ 1677.288267][T11921] hsr_slave_1: left promiscuous mode [ 1677.289326][T11921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.685376][T11921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.415848][T20717] Invalid source name [ 1686.868267][T11921] hsr_slave_0: left promiscuous mode [ 1687.237932][T11921] hsr_slave_1: left promiscuous mode [ 1687.239168][T11921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.182309][T11921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.180958][T20750] netlink: 'syz.6.4642': attribute type 1 has an invalid length. [ 1692.181009][T20750] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.4642'. [ 1697.568807][T20770] syz.6.4649 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1699.673275][T19033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1699.722917][T19033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1700.438585][T19033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1700.539535][T19033] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1700.540428][T19033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1701.651246][T20797] tipc: Failed to remove unknown binding: 66,1,1/0:1112011434/1112011436 [ 1701.651277][T20797] tipc: Failed to remove unknown binding: 66,1,1/0:1112011434/1112011436 [ 1702.747326][T19033] Bluetooth: hci2: command tx timeout [ 1703.232521][T20808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1703.898011][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1705.574173][T19033] Bluetooth: hci2: command tx timeout [ 1707.636949][T19033] Bluetooth: hci2: command tx timeout [ 1707.846291][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1709.675386][T19033] Bluetooth: hci2: command tx timeout [ 1710.761220][T20833] syz.1.4667 (20833) used greatest stack depth: 15512 bytes left [ 1711.471152][T20848] loop5: detected capacity change from 0 to 524255232 [ 1711.993159][T16104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1712.023913][T16104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1712.033434][T16104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1712.059584][T16104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1712.073045][T16104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1712.218064][T20848] Dev loop5: unable to read RDB block 8 [ 1712.218348][T20848] loop5: unable to read partition table [ 1712.218607][T20848] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1716.329586][T19033] Bluetooth: hci5: command tx timeout [ 1719.560083][T19033] Bluetooth: hci5: command tx timeout [ 1721.642191][T19033] Bluetooth: hci5: command tx timeout [ 1724.853685][T19033] Bluetooth: hci5: command tx timeout [ 1727.257405][T20921] overlayfs: missing 'lowerdir' [ 1736.495401][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1758.007141][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1758.452787][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1764.641532][T20851] Bluetooth: hci0: command 0x0406 tx timeout [ 1764.654790][T16104] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1764.678576][T16104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1764.680426][T16104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1764.681702][T16104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1764.682565][T16104] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1766.893288][T19308] libceph: connect (1)[c::]:6789 error -101 [ 1766.893547][T19308] libceph: mon0 (1)[c::]:6789 connect error [ 1766.906985][T19308] libceph: connect (1)[c::]:6789 error -101 [ 1766.911297][T19308] libceph: mon0 (1)[c::]:6789 connect error [ 1766.940864][T19033] Bluetooth: hci7: command tx timeout [ 1767.114557][T21128] ceph: No mds server is up or the cluster is laggy [ 1767.201590][T17573] libceph: connect (1)[c::]:6789 error -101 [ 1767.201827][T17573] libceph: mon0 (1)[c::]:6789 connect error [ 1770.084886][T19033] Bluetooth: hci7: command tx timeout [ 1772.223029][T16104] Bluetooth: hci7: command tx timeout [ 1773.670040][T16104] Bluetooth: hci6: command 0x0406 tx timeout [ 1773.808709][T20851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1773.846259][T20851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1773.848267][T20851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1773.849552][T20851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1773.850712][T20851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1774.351073][T20851] Bluetooth: hci7: command tx timeout [ 1775.877119][ T9] IPVS: starting estimator thread 0... [ 1776.255784][T21172] IPVS: using max 6 ests per chain, 14400 per kthread [ 1777.827430][T19033] Bluetooth: hci8: command tx timeout [ 1779.905290][T19033] Bluetooth: hci8: command tx timeout [ 1783.051108][T19033] Bluetooth: hci8: command tx timeout [ 1785.815348][T19033] Bluetooth: hci8: command tx timeout [ 1797.225838][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1803.886141][T21334] netlink: 'syz.0.4788': attribute type 3 has an invalid length. [ 1803.886196][T21334] netlink: 'syz.0.4788': attribute type 1 has an invalid length. [ 1803.886212][T21334] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1807.898053][T21361] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1812.420306][T21386] netlink: 'syz.6.4798': attribute type 3 has an invalid length. [ 1812.420468][T21386] netlink: 'syz.6.4798': attribute type 1 has an invalid length. [ 1812.420649][T21386] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4798'. [ 1817.854799][T21163] chnl_net:caif_netlink_parms(): no params data found [ 1817.886238][T21111] chnl_net:caif_netlink_parms(): no params data found [ 1820.029192][T21163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.029850][T21163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.030157][T21163] bridge_slave_0: entered allmulticast mode [ 1820.037907][T21163] bridge_slave_0: entered promiscuous mode [ 1820.135467][T21163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.135621][T21163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.135927][T21163] bridge_slave_1: entered allmulticast mode [ 1820.139033][T21163] bridge_slave_1: entered promiscuous mode [ 1823.393924][T19033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1823.536622][T19033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1823.604681][T19033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1823.730810][T19033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1823.757109][T19033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1825.140138][T21163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.160730][T21163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1825.979686][T20851] Bluetooth: hci0: command tx timeout [ 1828.625367][T20851] Bluetooth: hci0: command tx timeout [ 1829.356758][T21163] team0: Port device team_slave_0 added [ 1829.604830][T21163] team0: Port device team_slave_1 added [ 1830.705442][T20851] Bluetooth: hci0: command tx timeout [ 1833.063296][T20851] Bluetooth: hci0: command tx timeout [ 1833.678866][T19033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1833.715493][T19033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1833.754745][T19033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1833.815675][T19033] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1833.835876][T19033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1834.369777][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4824'. [ 1836.067919][T20851] Bluetooth: hci2: command tx timeout [ 1837.735535][T11921] bridge_slave_1: left allmulticast mode [ 1837.735578][T11921] bridge_slave_1: left promiscuous mode [ 1837.735891][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.145283][T20851] Bluetooth: hci2: command tx timeout [ 1838.158228][T11921] bridge_slave_0: left allmulticast mode [ 1838.158274][T11921] bridge_slave_0: left promiscuous mode [ 1838.158642][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.612606][T11921] bridge_slave_1: left allmulticast mode [ 1838.612650][T11921] bridge_slave_1: left promiscuous mode [ 1838.612969][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.467761][T11921] bridge_slave_0: left allmulticast mode [ 1839.467801][T11921] bridge_slave_0: left promiscuous mode [ 1839.468092][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.691501][T20851] Bluetooth: hci2: command tx timeout [ 1841.156807][T11921] bridge_slave_1: left allmulticast mode [ 1841.158140][T11921] bridge_slave_1: left promiscuous mode [ 1841.158470][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.938547][T20851] Bluetooth: hci2: command tx timeout [ 1844.677192][T11921] bridge_slave_0: left allmulticast mode [ 1844.677237][T11921] bridge_slave_0: left promiscuous mode [ 1844.696241][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.014990][T11921] bridge_slave_1: left allmulticast mode [ 1847.015028][T11921] bridge_slave_1: left promiscuous mode [ 1847.033343][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.398131][T11921] bridge_slave_0: left allmulticast mode [ 1849.398169][T11921] bridge_slave_0: left promiscuous mode [ 1849.398468][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.724966][T11921] bond0 (unregistering): Released all slaves [ 1857.499264][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1857.596406][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1857.902616][T11921] bond0 (unregistering): Released all slaves [ 1857.940914][T21614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1858.220419][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.306219][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.521592][T11921] bond0 (unregistering): Released all slaves [ 1858.634466][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.867066][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.006194][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.101379][T11921] bond0 (unregistering): Released all slaves [ 1859.396105][T11921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.486091][T11921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.628931][T11921] bond0 (unregistering): Released all slaves [ 1860.495899][T21608] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1860.495956][T21608] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1860.495995][T21608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1860.785259][ T38] audit: type=1800 audit(1758450128.929:1200): pid=21608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.4860" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1864.860825][T21438] chnl_net:caif_netlink_parms(): no params data found [ 1866.493993][ T38] audit: type=1326 audit(1758450134.869:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21650 comm="syz.6.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1866.494305][ T38] audit: type=1326 audit(1758450134.869:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21650 comm="syz.6.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1866.494572][ T38] audit: type=1326 audit(1758450134.879:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21650 comm="syz.6.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1866.508061][ T38] audit: type=1326 audit(1758450134.889:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21650 comm="syz.6.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1866.508442][ T38] audit: type=1326 audit(1758450134.889:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21650 comm="syz.6.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1866.508738][ T38] audit: type=1326 audit(1758450134.899:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21650 comm="syz.6.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86a272d590 code=0x7ffc0000 [ 1867.141522][T21657] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1870.197281][T21438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.197483][T21438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.198087][T21438] bridge_slave_0: entered allmulticast mode [ 1870.233153][T21438] bridge_slave_0: entered promiscuous mode [ 1870.575539][T21438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.575703][T21438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.576087][T21438] bridge_slave_1: entered allmulticast mode [ 1870.635326][T21438] bridge_slave_1: entered promiscuous mode [ 1873.773036][T21438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.773580][T11921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.573508][T11921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.865604][T11921] hsr_slave_0: left promiscuous mode [ 1875.970878][T11921] hsr_slave_1: left promiscuous mode [ 1875.971960][T11921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.452303][T11921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1886.433553][T19033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1886.491722][T19033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1886.509881][T19033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1886.521465][T19033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1886.523339][T19033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1886.569163][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1886.632986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1887.262409][T21748] loop5: detected capacity change from 0 to 524255232 [ 1887.365501][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1887.435894][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.133993][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.245945][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1888.303944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.384241][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.444675][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1888.496643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.565969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.642959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.727793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.727898][T20851] Bluetooth: hci5: command tx timeout [ 1889.006911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1889.516498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1889.838587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1889.912678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1889.961623][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1890.145866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.228028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.631456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.707822][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1891.522853][T20851] Bluetooth: hci5: command tx timeout [ 1893.256013][T21767] overlayfs: failed to clone lowerpath [ 1894.035117][T20851] Bluetooth: hci5: command tx timeout [ 1894.068624][T21438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.125892][T20851] Bluetooth: hci5: command tx timeout [ 1896.518992][T21771] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1896.519326][T21771] Error validating options; rc = [-22] [ 1896.781291][T20851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1896.823780][T20851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1896.833338][T20851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1896.840546][T20851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1896.865272][T20851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1899.508254][T19033] Bluetooth: hci6: command tx timeout [ 1901.625408][T19033] Bluetooth: hci6: command tx timeout [ 1901.972520][T21743] chnl_net:caif_netlink_parms(): no params data found [ 1902.055254][ T38] audit: type=1326 audit(1758450170.459:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.055319][ T38] audit: type=1326 audit(1758450170.459:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.055369][ T38] audit: type=1326 audit(1758450170.459:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065388][ T38] audit: type=1326 audit(1758450170.459:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065444][ T38] audit: type=1326 audit(1758450170.459:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065492][ T38] audit: type=1326 audit(1758450170.459:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065536][ T38] audit: type=1326 audit(1758450170.459:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065580][ T38] audit: type=1326 audit(1758450170.459:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065627][ T38] audit: type=1326 audit(1758450170.459:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1902.065669][ T38] audit: type=1326 audit(1758450170.459:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21807 comm="syz.6.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7fc00000 [ 1903.864818][T19033] Bluetooth: hci6: command tx timeout [ 1906.070699][T19033] Bluetooth: hci6: command tx timeout [ 1911.166147][T21743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.166307][T21743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.166587][T21743] bridge_slave_0: entered allmulticast mode [ 1911.206592][T21743] bridge_slave_0: entered promiscuous mode [ 1911.405610][T21743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.415564][T21743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.415877][T21743] bridge_slave_1: entered allmulticast mode [ 1911.419526][T21743] bridge_slave_1: entered promiscuous mode [ 1913.460495][T21743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.488656][T21781] chnl_net:caif_netlink_parms(): no params data found [ 1913.548312][T21743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1917.262675][T21743] team0: Port device team_slave_0 added [ 1917.321915][T21743] team0: Port device team_slave_1 added [ 1920.947349][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.367770][T21743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1921.367784][T21743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.367804][T21743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1921.758077][T21743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1921.758096][T21743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1921.758128][T21743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.025916][T21781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.026076][T21781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.026346][T21781] bridge_slave_0: entered allmulticast mode [ 1922.029503][T21781] bridge_slave_0: entered promiscuous mode [ 1922.086087][T21781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.086231][T21781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.086524][T21781] bridge_slave_1: entered allmulticast mode [ 1922.089677][T21781] bridge_slave_1: entered promiscuous mode [ 1922.907806][T21743] hsr_slave_0: entered promiscuous mode [ 1922.909373][T21743] hsr_slave_1: entered promiscuous mode [ 1922.910329][T21743] debugfs: 'hsr0' already exists in 'hsr' [ 1922.910534][T21743] Cannot create hsr debugfs directory [ 1922.965662][T21781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.997459][T21781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.749199][T21781] team0: Port device team_slave_0 added [ 1923.889439][T21781] team0: Port device team_slave_1 added [ 1924.720474][T21781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1924.720494][T21781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1924.720525][T21781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.373537][T21925] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4932'. [ 1925.842779][T21781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.842797][T21781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.842830][T21781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1928.698439][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1928.698485][ T38] audit: type=1800 audit(1758450196.539:1218): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4934" name="/" dev="9p" ino=2 res=0 errno=0 [ 1929.691693][T21781] hsr_slave_0: entered promiscuous mode [ 1929.694569][T21781] hsr_slave_1: entered promiscuous mode [ 1929.720154][T21781] debugfs: 'hsr0' already exists in 'hsr' [ 1929.720189][T21781] Cannot create hsr debugfs directory [ 1936.308860][T21993] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1937.246340][T11911] bridge_slave_1: left allmulticast mode [ 1937.246374][T11911] bridge_slave_1: left promiscuous mode [ 1937.246669][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.547059][T11911] bridge_slave_0: left allmulticast mode [ 1937.547097][T11911] bridge_slave_0: left promiscuous mode [ 1937.575770][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.782774][T11911] bridge_slave_1: left allmulticast mode [ 1937.782819][T11911] bridge_slave_1: left promiscuous mode [ 1937.783561][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.890278][T11911] bridge_slave_0: left allmulticast mode [ 1937.890305][T11911] bridge_slave_0: left promiscuous mode [ 1937.890640][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.598633][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1939.119763][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1940.069328][T11911] bond0 (unregistering): Released all slaves [ 1943.900114][T11911] bond0 (unregistering): Released all slaves [ 1944.433629][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1944.506413][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1944.578962][T11911] bond0 (unregistering): Released all slaves [ 1948.398254][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4964'. [ 1949.101640][T20851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1949.242518][T20851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1949.256847][T20851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1949.272412][T20851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1949.274391][T20851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1952.337775][T20851] Bluetooth: hci0: command tx timeout [ 1953.075718][T11911] team0 (unregistering): Port device team_slave_1 removed [ 1953.285938][T11911] team0 (unregistering): Port device team_slave_0 removed [ 1954.570422][T20851] Bluetooth: hci0: command tx timeout [ 1954.845884][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 1954.846144][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 1954.851538][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 1954.851844][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 1955.128780][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 1955.129025][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 1955.643501][T17573] libceph: connect (1)[c::]:6789 error -101 [ 1955.643740][T17573] libceph: mon0 (1)[c::]:6789 connect error [ 1956.425293][T22070] ceph: No mds server is up or the cluster is laggy [ 1956.432612][T20851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1956.457170][T20851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1956.483409][T20851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1956.495200][T20851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1956.512886][T20851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1956.632147][T19033] Bluetooth: hci0: command tx timeout [ 1958.837670][T19033] Bluetooth: hci2: command tx timeout [ 1958.842444][T19033] Bluetooth: hci0: command tx timeout [ 1961.645083][T20851] Bluetooth: hci2: command tx timeout [ 1964.361384][T20851] Bluetooth: hci2: command tx timeout [ 1966.395133][T20851] Bluetooth: hci2: command tx timeout [ 1968.457503][T22080] chnl_net:caif_netlink_parms(): no params data found [ 1968.492147][T22151] overlayfs: failed to clone upperpath [ 1971.365141][ T38] audit: type=1326 audit(1758450239.259:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1971.365204][ T38] audit: type=1326 audit(1758450239.259:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1971.365256][ T38] audit: type=1326 audit(1758450239.269:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1971.365304][ T38] audit: type=1326 audit(1758450239.269:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1971.365354][ T38] audit: type=1326 audit(1758450239.279:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1971.365404][ T38] audit: type=1326 audit(1758450239.279:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86a272d590 code=0x7ffc0000 [ 1971.365454][ T38] audit: type=1326 audit(1758450239.279:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1971.365503][ T38] audit: type=1326 audit(1758450239.289:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 1972.375591][T22044] chnl_net:caif_netlink_parms(): no params data found [ 1975.602249][T22080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.603689][T22080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.668663][T22080] bridge_slave_0: entered allmulticast mode [ 1975.804185][T22080] bridge_slave_0: entered promiscuous mode [ 1977.531027][T22080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.531125][T22080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.531416][T22080] bridge_slave_1: entered allmulticast mode [ 1977.533717][T22080] bridge_slave_1: entered promiscuous mode [ 1978.147685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1978.176846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.154880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.667126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.981929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1981.433429][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.707974][T22080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.842285][T22080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1983.669924][T22044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.675168][T22044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.692031][T22044] bridge_slave_0: entered allmulticast mode [ 1983.705668][T22044] bridge_slave_0: entered promiscuous mode [ 1983.894182][T22044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.894326][T22044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.894551][T22044] bridge_slave_1: entered allmulticast mode [ 1983.897801][T22044] bridge_slave_1: entered promiscuous mode [ 1984.033085][T22080] team0: Port device team_slave_0 added [ 1984.202828][T22080] team0: Port device team_slave_1 added [ 1989.916218][T22044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1990.258917][ T38] audit: type=1804 audit(1758450258.679:1227): pid=22249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.5009" name="file0" dev="tmpfs" ino=1455 res=1 errno=0 [ 1990.343644][T22044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1990.389134][T22080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1990.389149][T22080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1990.389170][T22080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1990.756453][T22080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1990.756473][T22080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1990.756505][T22080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.582394][T22044] team0: Port device team_slave_0 added [ 1999.052842][T22044] team0: Port device team_slave_1 added [ 1999.053555][T11911] bridge_slave_1: left allmulticast mode [ 1999.053585][T11911] bridge_slave_1: left promiscuous mode [ 1999.053855][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.374663][T11911] bridge_slave_0: left allmulticast mode [ 1999.374702][T11911] bridge_slave_0: left promiscuous mode [ 1999.375170][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.251966][T11911] bridge_slave_1: left allmulticast mode [ 2000.252001][T11911] bridge_slave_1: left promiscuous mode [ 2000.252292][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.993850][T11911] bridge_slave_0: left allmulticast mode [ 2000.994310][T11911] bridge_slave_0: left promiscuous mode [ 2001.010676][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.261031][T22327] libceph: resolve 'c9' (ret=-3): failed [ 2006.602826][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2006.677617][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.739702][T11911] bond0 (unregistering): Released all slaves [ 2007.036267][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.126342][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2007.190324][T11911] bond0 (unregistering): Released all slaves [ 2007.629014][T22080] hsr_slave_0: entered promiscuous mode [ 2007.637011][T22080] hsr_slave_1: entered promiscuous mode [ 2007.639489][T22080] debugfs: 'hsr0' already exists in 'hsr' [ 2007.639516][T22080] Cannot create hsr debugfs directory [ 2008.673353][T22336] kvm: kvm [22329]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2008.879301][T22336] kvm: kvm [22329]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2009.969544][T19033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2010.000365][T19033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2010.014573][T19033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2010.041859][T19033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2010.043031][T19033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2012.526876][T19033] Bluetooth: hci5: command tx timeout [ 2014.625580][T19033] Bluetooth: hci5: command tx timeout [ 2014.829881][T11911] hsr_slave_0: left promiscuous mode [ 2014.874202][T11911] hsr_slave_1: left promiscuous mode [ 2014.885832][T11911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2014.906182][T11911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2015.087824][T11911] hsr_slave_0: left promiscuous mode [ 2015.153061][T11911] hsr_slave_1: left promiscuous mode [ 2015.154189][T11911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2015.506293][T11911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2018.768292][T19033] Bluetooth: hci5: command tx timeout [ 2019.023629][T20851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2019.047976][T20851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2019.049812][T20851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2019.051124][T20851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2019.051960][T20851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2021.813053][T20851] Bluetooth: hci0: command tx timeout [ 2021.814090][T19033] Bluetooth: hci5: command tx timeout [ 2023.952799][T22413] Malformed UNC in devname [ 2023.952799][T22413] [ 2023.953128][T22413] CIFS: VFS: Malformed UNC in devname [ 2024.173030][T19033] Bluetooth: hci0: command tx timeout [ 2024.762630][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5048'. [ 2026.320046][T19033] Bluetooth: hci0: command tx timeout [ 2027.458393][T22433] overlayfs: failed to clone upperpath [ 2030.622415][T19033] Bluetooth: hci0: command tx timeout [ 2030.994928][T22436] block device autoloading is deprecated and will be removed. [ 2036.097074][T11911] team0 (unregistering): Port device team_slave_1 removed [ 2037.480570][T11911] team0 (unregistering): Port device team_slave_0 removed [ 2037.938276][T22474] net_ratelimit: 244 callbacks suppressed [ 2037.938298][T22474] netlink: zone id is out of range [ 2037.938307][T22474] netlink: zone id is out of range [ 2037.938316][T22474] netlink: zone id is out of range [ 2037.938325][T22474] netlink: zone id is out of range [ 2037.938333][T22474] netlink: zone id is out of range [ 2037.938341][T22474] netlink: zone id is out of range [ 2037.938350][T22474] netlink: zone id is out of range [ 2037.938359][T22474] netlink: zone id is out of range [ 2037.938368][T22474] netlink: zone id is out of range [ 2037.938377][T22474] netlink: zone id is out of range [ 2040.743735][ T38] audit: type=1326 audit(1758450308.999:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22477 comm="syz.1.5064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2328ec29 code=0x0 [ 2045.305811][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2053.251623][T11911] team0 (unregistering): Port device team_slave_1 removed [ 2054.222203][T11911] team0 (unregistering): Port device team_slave_0 removed [ 2059.288190][T22574] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5086'. [ 2064.294221][T22385] chnl_net:caif_netlink_parms(): no params data found [ 2064.560551][T22344] chnl_net:caif_netlink_parms(): no params data found [ 2065.038435][T22385] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.038558][T22385] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.038992][T22385] bridge_slave_0: entered allmulticast mode [ 2065.041262][T22385] bridge_slave_0: entered promiscuous mode [ 2065.083101][T22385] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.083377][T22385] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.083621][T22385] bridge_slave_1: entered allmulticast mode [ 2065.094384][T22385] bridge_slave_1: entered promiscuous mode [ 2065.434664][T22385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2065.528415][T22385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2065.528813][T22344] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.529148][T22344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.529358][T22344] bridge_slave_0: entered allmulticast mode [ 2065.532329][T22344] bridge_slave_0: entered promiscuous mode [ 2065.636990][T22344] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.637163][T22344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.637386][T22344] bridge_slave_1: entered allmulticast mode [ 2065.645386][T22344] bridge_slave_1: entered promiscuous mode [ 2065.861078][T22385] team0: Port device team_slave_0 added [ 2065.864700][T22385] team0: Port device team_slave_1 added [ 2066.010995][T22344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2066.113293][T22344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2066.114259][T22385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2066.114272][T22385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.114313][T22385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2066.120410][T22385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2066.120429][T22385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.120463][T22385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2066.455262][T22344] team0: Port device team_slave_0 added [ 2066.630339][T22344] team0: Port device team_slave_1 added [ 2066.631031][T11911] bridge_slave_1: left allmulticast mode [ 2066.631113][T11911] bridge_slave_1: left promiscuous mode [ 2066.631321][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.708265][T11911] bridge_slave_0: left allmulticast mode [ 2066.708300][T11911] bridge_slave_0: left promiscuous mode [ 2066.708592][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.791016][T11911] bridge_slave_1: left allmulticast mode [ 2066.791054][T11911] bridge_slave_1: left promiscuous mode [ 2066.791326][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.847028][T11911] bridge_slave_0: left allmulticast mode [ 2066.847065][T11911] bridge_slave_0: left promiscuous mode [ 2066.847345][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.257684][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2067.346031][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2067.408239][T11911] bond0 (unregistering): Released all slaves [ 2067.648896][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2067.746148][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2067.842430][T11911] bond0 (unregistering): Released all slaves [ 2068.482340][T22385] hsr_slave_0: entered promiscuous mode [ 2068.483842][T22385] hsr_slave_1: entered promiscuous mode [ 2068.484838][T22385] debugfs: 'hsr0' already exists in 'hsr' [ 2068.484875][T22385] Cannot create hsr debugfs directory [ 2068.699853][T11911] hsr_slave_0: left promiscuous mode [ 2068.737138][T11911] hsr_slave_1: left promiscuous mode [ 2068.738210][T11911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2068.816438][T11911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2069.380044][T19033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2069.437490][T19033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2069.456560][T19033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2069.457990][T19033] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2069.459738][T19033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2069.716776][T11911] team0 (unregistering): Port device team_slave_1 removed [ 2069.885991][T11911] team0 (unregistering): Port device team_slave_0 removed [ 2070.865974][T11911] team0 (unregistering): Port device team_slave_1 removed [ 2071.028867][T11911] team0 (unregistering): Port device team_slave_0 removed [ 2071.505187][T19033] Bluetooth: hci2: command tx timeout [ 2072.860078][T22609] chnl_net:caif_netlink_parms(): no params data found [ 2073.096228][T22385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2073.280589][T22385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2073.473364][T22385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2073.527450][T22609] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.527686][T22609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.527897][T22609] bridge_slave_0: entered allmulticast mode [ 2073.532704][T22609] bridge_slave_0: entered promiscuous mode [ 2073.571041][T22385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2073.585268][T19033] Bluetooth: hci2: command tx timeout [ 2073.631593][T22609] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.631763][T22609] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.631996][T22609] bridge_slave_1: entered allmulticast mode [ 2073.634396][T22609] bridge_slave_1: entered promiscuous mode [ 2073.866240][T22609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2073.892992][T22609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2074.137197][T22609] team0: Port device team_slave_0 added [ 2074.157635][T22609] team0: Port device team_slave_1 added [ 2074.343677][T22609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2074.343695][T22609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2074.343721][T22609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2074.368777][T22609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2074.368800][T22609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2074.368833][T22609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2074.700638][T11911] bridge_slave_1: left allmulticast mode [ 2074.700671][T11911] bridge_slave_1: left promiscuous mode [ 2074.700961][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2074.756324][T11911] bridge_slave_0: left allmulticast mode [ 2074.756350][T11911] bridge_slave_0: left promiscuous mode [ 2074.756573][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.104637][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2075.185948][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2075.249994][T11911] bond0 (unregistering): Released all slaves [ 2075.302471][T22609] hsr_slave_0: entered promiscuous mode [ 2075.303524][T22609] hsr_slave_1: entered promiscuous mode [ 2075.304232][T22609] debugfs: 'hsr0' already exists in 'hsr' [ 2075.304251][T22609] Cannot create hsr debugfs directory [ 2075.687844][T20851] Bluetooth: hci2: command tx timeout [ 2075.796107][T11911] team0 (unregistering): Port device team_slave_1 removed [ 2075.956976][T11911] team0 (unregistering): Port device team_slave_0 removed [ 2077.632825][T19033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2077.657573][T19033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2077.675912][T19033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2077.720870][T19033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2077.721781][T19033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2077.747549][T20851] Bluetooth: hci2: command tx timeout [ 2078.134329][T22609] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2078.193314][T22609] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2078.477087][T22609] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2078.536887][T22609] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2079.551272][T22609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2079.651427][T22624] chnl_net:caif_netlink_parms(): no params data found [ 2079.683125][T22609] 8021q: adding VLAN 0 to HW filter on device team0 [ 2079.825594][T20851] Bluetooth: hci0: command tx timeout [ 2079.868252][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.868718][T20938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2079.909020][T11911] bridge_slave_1: left allmulticast mode [ 2079.909052][T11911] bridge_slave_1: left promiscuous mode [ 2079.910506][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.985228][T11911] bridge_slave_0: left allmulticast mode [ 2079.985265][T11911] bridge_slave_0: left promiscuous mode [ 2079.985564][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.828736][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2080.915794][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2080.983422][T11911] bond0 (unregistering): Released all slaves [ 2081.208889][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.209049][T10379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2081.452769][T11911] hsr_slave_0: left promiscuous mode [ 2081.465284][T11911] hsr_slave_1: left promiscuous mode [ 2081.466386][T11911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2081.506286][T11911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2081.905775][T20851] Bluetooth: hci0: command tx timeout [ 2082.356759][T11911] team0 (unregistering): Port device team_slave_1 removed [ 2082.561236][T11911] team0 (unregistering): Port device team_slave_0 removed [ 2083.441462][T22624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.441843][T22624] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.442130][T22624] bridge_slave_0: entered allmulticast mode [ 2083.444469][T22624] bridge_slave_0: entered promiscuous mode [ 2083.485524][T22624] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.485697][T22624] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.485903][T22624] bridge_slave_1: entered allmulticast mode [ 2083.488901][T22624] bridge_slave_1: entered promiscuous mode [ 2083.706057][T22624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2083.724700][T22624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2083.985368][T20851] Bluetooth: hci0: command tx timeout [ 2084.084129][T22624] team0: Port device team_slave_0 added [ 2084.144805][T22624] team0: Port device team_slave_1 added [ 2084.392120][T22624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2084.392139][T22624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2084.392182][T22624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2084.464024][T22624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2084.464038][T22624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2084.464057][T22624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2084.853769][T22624] hsr_slave_0: entered promiscuous mode [ 2084.860079][T22624] hsr_slave_1: entered promiscuous mode [ 2084.861272][T22624] debugfs: 'hsr0' already exists in 'hsr' [ 2084.861303][T22624] Cannot create hsr debugfs directory [ 2085.461275][T22609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2085.969207][T22609] veth0_vlan: entered promiscuous mode [ 2086.059476][T22609] veth1_vlan: entered promiscuous mode [ 2086.070087][T20851] Bluetooth: hci0: command tx timeout [ 2086.113525][T22609] veth0_macvtap: entered promiscuous mode [ 2086.198211][T22609] veth1_macvtap: entered promiscuous mode [ 2086.222895][T22609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.269790][T22609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.290227][T11921] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.290280][T11921] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.290321][T11921] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.290360][T11921] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.821954][T11906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.821984][T11906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.968234][T20938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.968257][T20938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.049767][T22624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2087.084247][T22624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2087.156041][T22624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2087.535919][T22624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2088.130494][ T38] audit: type=1326 audit(1758450356.059:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286beeec29 code=0x7ffc0000 [ 2088.130558][ T38] audit: type=1326 audit(1758450356.069:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286beeec29 code=0x7ffc0000 [ 2088.130606][ T38] audit: type=1326 audit(1758450356.069:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f286beed590 code=0x7ffc0000 [ 2088.130677][ T38] audit: type=1326 audit(1758450356.079:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286beeec29 code=0x7ffc0000 [ 2088.130725][ T38] audit: type=1326 audit(1758450356.079:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286beeec29 code=0x7ffc0000 [ 2088.130779][ T38] audit: type=1326 audit(1758450356.079:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f286beed590 code=0x7ffc0000 [ 2088.130825][ T38] audit: type=1326 audit(1758450356.089:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286beeec29 code=0x7ffc0000 [ 2088.130872][ T38] audit: type=1326 audit(1758450356.089:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22649 comm="syz.0.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286beeec29 code=0x7ffc0000 [ 2089.968587][T22656] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2089.973044][T22656] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2090.253798][T22657] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 2090.253853][T22657] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2090.257044][T22657] vhci_hcd vhci_hcd.0: Device attached [ 2090.555245][T22670] vhci_hcd: connection closed [ 2090.577018][ T3562] vhci_hcd: stop threads [ 2090.577037][ T3562] vhci_hcd: release socket [ 2090.577107][ T3562] vhci_hcd: disconnect device [ 2090.628247][T22535] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 2090.628509][T22535] usb 45-1: enqueue for inactive port 0 [ 2090.715949][T22535] vhci_hcd: vhci_device speed not set [ 2093.732957][T22624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2094.076924][T22624] 8021q: adding VLAN 0 to HW filter on device team0 [ 2094.156994][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.157468][T11921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2094.270992][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.273866][T11921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2099.547004][T22624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2102.255800][T22729] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5108'. [ 2102.255826][T22729] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5108'. [ 2102.255846][T22729] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5108'. [ 2102.255892][T22729] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5108'. [ 2104.341457][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.415487][T22624] veth0_vlan: entered promiscuous mode [ 2106.444147][T22624] veth1_vlan: entered promiscuous mode [ 2106.646902][T22624] veth0_macvtap: entered promiscuous mode [ 2106.657173][T22624] veth1_macvtap: entered promiscuous mode [ 2106.716325][T22624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2106.722282][T22624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2109.085705][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.811965][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.814331][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.634454][ T1177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.573356][T19033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2115.647018][T19033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2115.651027][T19033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2115.652804][T19033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2115.654111][T19033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2117.592361][T10369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.592385][T10369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.747644][T20851] Bluetooth: hci4: command tx timeout [ 2120.499759][T20851] Bluetooth: hci4: command tx timeout [ 2122.708073][T22822] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5130'. [ 2123.221800][T20851] Bluetooth: hci4: command tx timeout [ 2125.468895][T20851] Bluetooth: hci4: command tx timeout [ 2125.922411][T10369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.458471][T10376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2127.458746][T10376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2130.029616][T22840] input: syz0 as /devices/virtual/input/input28 [ 2133.004165][T10369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.283146][ T38] audit: type=1326 audit(1758450405.709:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22878 comm="syz.7.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4f7bec29 code=0x7ffc0000 [ 2137.283208][ T38] audit: type=1326 audit(1758450405.709:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22878 comm="syz.7.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4f7bec29 code=0x7ffc0000 [ 2137.283264][ T38] audit: type=1326 audit(1758450405.709:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22878 comm="syz.7.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f2a4f7bec29 code=0x7ffc0000 [ 2137.283311][ T38] audit: type=1326 audit(1758450405.709:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22878 comm="syz.7.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4f7bec29 code=0x7ffc0000 [ 2137.283369][ T38] audit: type=1326 audit(1758450405.709:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22878 comm="syz.7.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4f7bec29 code=0x7ffc0000 [ 2138.366652][T22887] binder: BINDER_SET_CONTEXT_MGR already set [ 2138.366670][T22887] binder: 22886:22887 ioctl 4018620d 200000004a80 returned -16 [ 2138.622130][T10369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.548922][T22911] overlayfs: failed to clone lowerpath [ 2147.840344][T10369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.377870][ T38] audit: type=1326 audit(1758450422.509:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22934 comm="syz.4.5159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d7af9ec29 code=0x0 [ 2155.182130][T22780] chnl_net:caif_netlink_parms(): no params data found [ 2157.306322][T22956] 9pnet_fd: Insufficient options for proto=fd [ 2162.067619][T22977] sd 0:0:1:0: device reset [ 2166.039982][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2168.105335][T10369] bridge_slave_1: left allmulticast mode [ 2168.105386][T10369] bridge_slave_1: left promiscuous mode [ 2168.105687][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2169.407124][T10369] bridge_slave_0: left allmulticast mode [ 2169.407161][T10369] bridge_slave_0: left promiscuous mode [ 2169.407464][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.803659][T19033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2171.788777][T19033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2171.792072][T23011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2172.077265][T23011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2172.079590][T23011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2174.463964][T20851] Bluetooth: hci5: command tx timeout [ 2174.697894][T23011] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2174.969091][T23011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2174.970832][T23011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2174.977253][T23011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2174.978022][T23011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2176.792667][T23011] Bluetooth: hci5: command tx timeout [ 2178.155238][T23011] Bluetooth: hci4: command tx timeout [ 2179.636314][T23011] Bluetooth: hci5: command tx timeout [ 2180.437078][T23011] Bluetooth: hci4: command tx timeout [ 2181.294111][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.665273][T23011] Bluetooth: hci5: command tx timeout [ 2181.803535][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.976328][ C0] vkms_vblank_simulate: vblank timer overrun [ 2182.397518][ C0] vkms_vblank_simulate: vblank timer overrun [ 2182.846412][T23011] Bluetooth: hci4: command tx timeout [ 2183.401848][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.504936][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.678182][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.989568][ C0] vkms_vblank_simulate: vblank timer overrun [ 2184.104301][T23071] loop5: detected capacity change from 0 to 524255232 [ 2184.553390][ C0] vkms_vblank_simulate: vblank timer overrun [ 2184.565106][T18026] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2184.765177][T18026] usb 7-1: Using ep0 maxpacket: 8 [ 2184.774083][T18026] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2184.774114][T18026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.774135][T18026] usb 7-1: Product: syz [ 2184.774151][T18026] usb 7-1: Manufacturer: syz [ 2184.774166][T18026] usb 7-1: SerialNumber: syz [ 2184.781092][T18026] usb 7-1: config 0 descriptor?? [ 2184.865258][T23011] Bluetooth: hci4: command tx timeout [ 2185.059500][T18026] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2185.091618][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.191747][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.357013][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.493907][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.799035][ C0] vkms_vblank_simulate: vblank timer overrun [ 2187.088345][T18026] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2187.092182][T18026] usb 7-1: USB disconnect, device number 14 [ 2195.376046][T10369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2195.514606][T10369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2195.606045][T10369] bond0 (unregistering): Released all slaves [ 2196.204995][ C1] vkms_vblank_simulate: vblank timer overrun [ 2196.243567][ C1] vkms_vblank_simulate: vblank timer overrun [ 2197.396806][ C1] vkms_vblank_simulate: vblank timer overrun [ 2197.712705][ C1] vkms_vblank_simulate: vblank timer overrun [ 2197.817581][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.265882][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.329616][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.767751][ C1] vkms_vblank_simulate: vblank timer overrun [ 2199.128646][T23125] loop5: detected capacity change from 0 to 524255232 [ 2199.852211][ C1] vkms_vblank_simulate: vblank timer overrun [ 2199.918045][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.030785][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.089066][ C1] vkms_vblank_simulate: vblank timer overrun [ 2200.411338][ C1] vkms_vblank_simulate: vblank timer overrun [ 2203.665413][T23011] Bluetooth: hci0: command 0x0406 tx timeout [ 2203.954312][T23138] net_ratelimit: 165 callbacks suppressed [ 2203.954334][T23138] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2205.808395][T23167] syz.0.5211(23167): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2209.677801][T10369] hsr_slave_0: left promiscuous mode [ 2209.725693][T10369] hsr_slave_1: left promiscuous mode [ 2209.727588][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2209.727621][T10369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2210.691558][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2210.691583][T10369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2210.825729][T23183] input: syz1 as /devices/virtual/input/input29 [ 2212.866532][T10369] veth1_macvtap: left promiscuous mode [ 2212.866664][T10369] veth0_macvtap: left promiscuous mode [ 2212.866999][T10369] veth1_vlan: left promiscuous mode [ 2212.867225][T10369] veth0_vlan: left promiscuous mode [ 2214.364156][ T38] audit: type=1326 audit(1758450482.789:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2214.364214][ T38] audit: type=1326 audit(1758450482.789:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2214.364268][ T38] audit: type=1326 audit(1758450482.789:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d7af9d590 code=0x7ffc0000 [ 2214.364314][ T38] audit: type=1326 audit(1758450482.789:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2214.364362][ T38] audit: type=1326 audit(1758450482.789:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2214.364407][ T38] audit: type=1326 audit(1758450482.789:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d7af9d590 code=0x7ffc0000 [ 2214.364453][ T38] audit: type=1326 audit(1758450482.789:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2214.364498][ T38] audit: type=1326 audit(1758450482.789:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23200 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2218.070268][ T38] audit: type=1326 audit(1758450486.499:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23221 comm="syz.4.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2218.070329][ T38] audit: type=1326 audit(1758450486.499:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23221 comm="syz.4.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7af9ec29 code=0x7ffc0000 [ 2218.495431][ C0] vkms_vblank_simulate: vblank timer overrun [ 2218.732852][ C0] vkms_vblank_simulate: vblank timer overrun [ 2218.806206][ C0] vkms_vblank_simulate: vblank timer overrun [ 2218.876588][ C0] vkms_vblank_simulate: vblank timer overrun [ 2219.149754][T23231] program syz.4.5228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2219.732858][ C0] vkms_vblank_simulate: vblank timer overrun [ 2219.885986][ C0] vkms_vblank_simulate: vblank timer overrun [ 2220.004793][ C0] vkms_vblank_simulate: vblank timer overrun [ 2220.388508][ C0] vkms_vblank_simulate: vblank timer overrun [ 2221.329431][ C0] vkms_vblank_simulate: vblank timer overrun [ 2221.703811][ C0] vkms_vblank_simulate: vblank timer overrun [ 2222.150115][ C0] vkms_vblank_simulate: vblank timer overrun [ 2222.300876][ C0] vkms_vblank_simulate: vblank timer overrun [ 2222.379572][ C0] vkms_vblank_simulate: vblank timer overrun [ 2224.940792][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 2224.940813][ T38] audit: type=1326 audit(1758450493.209:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23262 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 2224.940871][ T38] audit: type=1326 audit(1758450493.209:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23262 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 2224.940923][ T38] audit: type=1326 audit(1758450493.209:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23262 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 2224.940991][ T38] audit: type=1326 audit(1758450493.209:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23262 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 2224.941041][ T38] audit: type=1326 audit(1758450493.219:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23262 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a272ec29 code=0x7ffc0000 [ 2225.758866][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500004323 [ 2225.758929][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x500000323 [ 2225.800289][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xeb0000e608 [ 2225.800356][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xeb0000a608 [ 2225.800487][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xeb00004a08 [ 2225.800542][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xeb00000a08 [ 2225.800660][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xea00009729 [ 2225.800715][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xea0000d729 [ 2225.828000][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb300000a65 [ 2225.828063][T23272] kvm: kvm [23270]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xb300004a65 [ 2227.313246][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2228.156113][T22648] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2228.925026][T22648] usb 5-1: Using ep0 maxpacket: 8 [ 2228.927544][T22648] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2228.927576][T22648] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2228.927604][T22648] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2228.927630][T22648] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.927676][T22648] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2228.927702][T22648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.055403][T23304] Invalid source name [ 2229.224424][T22648] usb 5-1: GET_CAPABILITIES returned 0 [ 2229.224459][T22648] usbtmc 5-1:16.0: can't read capabilities [ 2229.485677][T22648] usb 5-1: USB disconnect, device number 31 [ 2232.842182][T23011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2232.849364][T23011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2232.862195][T23011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2232.865260][T23011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2232.866999][T23011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2234.286872][T20851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2234.428988][T20851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2235.296583][T20851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2235.299689][T20851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2235.301665][T20851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2236.045211][T20851] Bluetooth: hci2: command tx timeout [ 2237.505210][T20851] Bluetooth: hci6: command tx timeout [ 2238.975003][T20851] Bluetooth: hci2: command tx timeout [ 2239.363459][T23363] overlayfs: failed to clone upperpath [ 2239.615240][T20851] Bluetooth: hci6: command tx timeout [ 2239.993703][T10369] team0 (unregistering): Port device team_slave_1 removed [ 2241.061852][T20851] Bluetooth: hci2: command tx timeout [ 2241.178705][T10369] team0 (unregistering): Port device team_slave_0 removed [ 2241.559690][ T38] audit: type=1800 audit(1758450509.689:1261): pid=23379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.5264" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 2242.014582][T20851] Bluetooth: hci6: command tx timeout [ 2242.806800][ C0] vkms_vblank_simulate: vblank timer overrun [ 2242.868592][ C0] vkms_vblank_simulate: vblank timer overrun [ 2242.982132][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.105173][T20851] Bluetooth: hci2: command tx timeout [ 2243.241116][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.278642][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.321224][ C0] vkms_vblank_simulate: vblank timer overrun [ 2244.401421][T20851] Bluetooth: hci6: command tx timeout [ 2244.424704][ C0] vkms_vblank_simulate: vblank timer overrun [ 2244.612497][ C0] vkms_vblank_simulate: vblank timer overrun [ 2244.678741][ C0] vkms_vblank_simulate: vblank timer overrun [ 2245.693177][ C0] vkms_vblank_simulate: vblank timer overrun [ 2245.842728][ C0] vkms_vblank_simulate: vblank timer overrun [ 2246.411924][ C0] vkms_vblank_simulate: vblank timer overrun [ 2246.503912][ C0] vkms_vblank_simulate: vblank timer overrun [ 2246.776198][ C0] vkms_vblank_simulate: vblank timer overrun [ 2246.844967][ C0] vkms_vblank_simulate: vblank timer overrun [ 2246.917375][ C0] vkms_vblank_simulate: vblank timer overrun [ 2247.419802][ C0] vkms_vblank_simulate: vblank timer overrun [ 2248.336393][T23404] delete_channel: no stack [ 2254.184372][T23011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2254.974964][T16104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2255.531522][T16104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2255.580703][T16104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2255.582393][T16104] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2257.839054][T20851] Bluetooth: hci7: command tx timeout [ 2260.419082][T20851] Bluetooth: hci7: command tx timeout [ 2263.028511][T20851] Bluetooth: hci7: command tx timeout [ 2265.105694][T20851] Bluetooth: hci7: command tx timeout [ 2268.215172][T22535] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2269.373435][T22535] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2269.373468][T22535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.373490][T22535] usb 7-1: Product: syz [ 2269.373505][T22535] usb 7-1: Manufacturer: syz [ 2269.373519][T22535] usb 7-1: SerialNumber: syz [ 2271.517536][T22535] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 2271.517564][T22535] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2271.519165][T22535] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2271.788900][T22535] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -110 [ 2271.858894][T23513] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2271.948302][T10369] IPVS: stop unused estimator thread 0... [ 2272.960754][T22052] usb 7-1: USB disconnect, device number 15 [ 2273.840956][T23317] chnl_net:caif_netlink_parms(): no params data found [ 2274.404783][T10369] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.755622][T23436] chnl_net:caif_netlink_parms(): no params data found [ 2276.116992][T23330] chnl_net:caif_netlink_parms(): no params data found [ 2277.704508][T10369] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.336665][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804bba0400: rx timeout, send abort [ 2279.353033][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804bba0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2279.366208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804bba2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2281.425854][T10369] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.209510][ C1] vkms_vblank_simulate: vblank timer overrun [ 2284.371532][ C1] vkms_vblank_simulate: vblank timer overrun [ 2284.784166][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.161088][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.348497][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.466950][T23584] [ 2285.466964][T23584] ====================================================== [ 2285.466973][T23584] WARNING: possible circular locking dependency detected [ 2285.466988][T23584] syzkaller #0 Not tainted [ 2285.466999][T23584] ------------------------------------------------------ [ 2285.467008][T23584] syz.6.5313/23584 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2285.467021][T23584] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 2285.467149][T23584] [ 2285.467149][T23584] but task is already holding lock: [ 2285.467156][T23584] ffff8881427223a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 2285.467307][T23584] [ 2285.467307][T23584] which lock already depends on the new lock. [ 2285.467307][T23584] [ 2285.467316][T23584] [ 2285.467316][T23584] the existing dependency chain (in reverse order) is: [ 2285.467325][T23584] [ 2285.467325][T23584] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 2285.467354][T23584] lock_acquire+0x120/0x360 [ 2285.467403][T23584] rt_spin_lock+0x88/0x2c0 [ 2285.467514][T23584] drm_crtc_vblank_on_config+0x2cd/0x860 [ 2285.467537][T23584] drm_crtc_vblank_on+0x88/0xc0 [ 2285.467558][T23584] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 2285.467600][T23584] vkms_atomic_commit_tail+0x69/0x210 [ 2285.467646][T23584] commit_tail+0x281/0x3a0 [ 2285.467697][T23584] drm_atomic_helper_commit+0xa6b/0xb10 [ 2285.467719][T23584] drm_atomic_commit+0x262/0x2c0 [ 2285.467763][T23584] drm_client_modeset_commit_atomic+0x620/0x760 [ 2285.467799][T23584] drm_client_modeset_commit_locked+0xce/0x4d0 [ 2285.467817][T23584] drm_client_modeset_commit+0x4a/0x70 [ 2285.467833][T23584] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 2285.467886][T23584] drm_fb_helper_set_par+0xaf/0x100 [ 2285.467908][T23584] fbcon_init+0x1258/0x2370 [ 2285.467987][T23584] visual_init+0x2ef/0x650 [ 2285.468055][T23584] do_bind_con_driver+0x890/0xf70 [ 2285.468080][T23584] do_take_over_console+0x899/0xa10 [ 2285.468105][T23584] do_fbcon_takeover+0x118/0x200 [ 2285.468135][T23584] fbcon_fb_registered+0x35e/0x610 [ 2285.468161][T23584] register_framebuffer+0x70f/0x890 [ 2285.468176][T23584] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 2285.468200][T23584] drm_fbdev_client_hotplug+0x16f/0x230 [ 2285.468223][T23584] drm_client_register+0x16f/0x210 [ 2285.468247][T23584] drm_fbdev_client_setup+0x19f/0x3f0 [ 2285.468269][T23584] drm_client_setup+0x10a/0x230 [ 2285.468290][T23584] vkms_init+0x3e0/0x4b0 [ 2285.468366][T23584] do_one_initcall+0x233/0x820 [ 2285.468403][T23584] do_initcall_level+0x104/0x190 [ 2285.468451][T23584] do_initcalls+0x59/0xa0 [ 2285.468473][T23584] kernel_init_freeable+0x334/0x4b0 [ 2285.468497][T23584] kernel_init+0x1d/0x1d0 [ 2285.468532][T23584] ret_from_fork+0x436/0x7d0 [ 2285.468562][T23584] ret_from_fork_asm+0x1a/0x30 [ 2285.468584][T23584] [ 2285.468584][T23584] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 2285.468609][T23584] lock_acquire+0x120/0x360 [ 2285.468636][T23584] rt_spin_lock+0x88/0x2c0 [ 2285.468665][T23584] vblank_disable_fn+0x72/0x190 [ 2285.468685][T23584] call_timer_fn+0x17e/0x5f0 [ 2285.468749][T23584] __run_timer_base+0x648/0x970 [ 2285.468768][T23584] run_timer_softirq+0xb7/0x180 [ 2285.468786][T23584] handle_softirqs+0x22f/0x710 [ 2285.468808][T23584] run_ktimerd+0xcf/0x190 [ 2285.468829][T23584] smpboot_thread_fn+0x53f/0xa60 [ 2285.468850][T23584] kthread+0x70e/0x8a0 [ 2285.468873][T23584] ret_from_fork+0x436/0x7d0 [ 2285.468892][T23584] ret_from_fork_asm+0x1a/0x30 [ 2285.468907][T23584] [ 2285.468907][T23584] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 2285.468930][T23584] lock_acquire+0x120/0x360 [ 2285.468954][T23584] call_timer_fn+0xdb/0x5f0 [ 2285.468975][T23584] __run_timer_base+0x648/0x970 [ 2285.468994][T23584] run_timer_softirq+0xb7/0x180 [ 2285.469013][T23584] handle_softirqs+0x22f/0x710 [ 2285.469033][T23584] run_ktimerd+0xcf/0x190 [ 2285.469055][T23584] smpboot_thread_fn+0x53f/0xa60 [ 2285.469074][T23584] kthread+0x70e/0x8a0 [ 2285.469096][T23584] ret_from_fork+0x436/0x7d0 [ 2285.469120][T23584] ret_from_fork_asm+0x1a/0x30 [ 2285.469135][T23584] [ 2285.469135][T23584] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 2285.469159][T23584] lock_acquire+0x120/0x360 [ 2285.469180][T23584] rt_spin_lock+0x88/0x2c0 [ 2285.469198][T23584] __run_timer_base+0x114/0x970 [ 2285.469216][T23584] run_timer_softirq+0x67/0x180 [ 2285.469234][T23584] handle_softirqs+0x22f/0x710 [ 2285.469253][T23584] run_ktimerd+0xcf/0x190 [ 2285.469274][T23584] smpboot_thread_fn+0x53f/0xa60 [ 2285.469293][T23584] kthread+0x70e/0x8a0 [ 2285.469315][T23584] ret_from_fork+0x436/0x7d0 [ 2285.469335][T23584] ret_from_fork_asm+0x1a/0x30 [ 2285.469349][T23584] [ 2285.469349][T23584] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 2285.469371][T23584] validate_chain+0xb9b/0x2140 [ 2285.469405][T23584] __lock_acquire+0xab9/0xd20 [ 2285.469425][T23584] reacquire_held_locks+0x127/0x1d0 [ 2285.469452][T23584] lock_release+0x1b4/0x3e0 [ 2285.469473][T23584] __local_bh_enable_ip+0x10c/0x270 [ 2285.469492][T23584] hrtimer_cancel+0x39/0x60 [ 2285.469515][T23584] drm_vblank_disable_and_save+0x1bc/0x380 [ 2285.469535][T23584] drm_crtc_vblank_off+0x22e/0x820 [ 2285.469556][T23584] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 2285.469578][T23584] vkms_atomic_commit_tail+0x51/0x210 [ 2285.469598][T23584] commit_tail+0x281/0x3a0 [ 2285.469618][T23584] drm_atomic_helper_commit+0xa6b/0xb10 [ 2285.469638][T23584] drm_atomic_commit+0x262/0x2c0 [ 2285.469655][T23584] drm_atomic_helper_set_config+0xe2/0x160 [ 2285.469677][T23584] drm_mode_setcrtc+0x9a4/0x1c50 [ 2285.469717][T23584] drm_ioctl_kernel+0x2d2/0x3a0 [ 2285.469774][T23584] drm_ioctl+0x685/0xb20 [ 2285.469797][T23584] __se_sys_ioctl+0xff/0x170 [ 2285.469836][T23584] do_syscall_64+0xfa/0x3b0 [ 2285.469850][T23584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.469883][T23584] [ 2285.469883][T23584] other info that might help us debug this: [ 2285.469883][T23584] [ 2285.469889][T23584] Chain exists of: [ 2285.469889][T23584] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 2285.469889][T23584] [ 2285.469916][T23584] Possible unsafe locking scenario: [ 2285.469916][T23584] [ 2285.469922][T23584] CPU0 CPU1 [ 2285.469927][T23584] ---- ---- [ 2285.469932][T23584] lock(&dev->vblank_time_lock); [ 2285.469943][T23584] lock(&dev->vbl_lock); [ 2285.469955][T23584] lock(&dev->vblank_time_lock); [ 2285.469968][T23584] lock((softirq_ctrl.lock)); [ 2285.469980][T23584] [ 2285.469980][T23584] *** DEADLOCK *** [ 2285.469980][T23584] [ 2285.469985][T23584] 8 locks held by syz.6.5313/23584: [ 2285.469995][T23584] #0: ffffc90004adfb20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 2285.470035][T23584] #1: ffffc90004adfb48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 2285.470072][T23584] #2: ffff8881427224b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 2285.470117][T23584] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 2285.470161][T23584] #4: ffff888142722420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 2285.470205][T23584] #5: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 2285.470247][T23584] #6: ffff8881427223a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 2285.470290][T23584] #7: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 2285.470332][T23584] [ 2285.470332][T23584] stack backtrace: [ 2285.470344][T23584] CPU: 0 UID: 0 PID: 23584 Comm: syz.6.5313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2285.470364][T23584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2285.470380][T23584] Call Trace: [ 2285.470393][T23584] [ 2285.470401][T23584] dump_stack_lvl+0x189/0x250 [ 2285.470429][T23584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2285.470454][T23584] ? __pfx__printk+0x10/0x10 [ 2285.470479][T23584] ? print_lock_name+0xde/0x100 [ 2285.470498][T23584] print_circular_bug+0x2ee/0x310 [ 2285.470516][T23584] check_noncircular+0x134/0x160 [ 2285.470546][T23584] validate_chain+0xb9b/0x2140 [ 2285.470580][T23584] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2285.470609][T23584] __lock_acquire+0xab9/0xd20 [ 2285.470635][T23584] reacquire_held_locks+0x127/0x1d0 [ 2285.470661][T23584] ? __local_bh_disable_ip+0x264/0x400 [ 2285.470685][T23584] lock_release+0x1b4/0x3e0 [ 2285.470706][T23584] ? __local_bh_enable_ip+0x100/0x270 [ 2285.470729][T23584] __local_bh_enable_ip+0x10c/0x270 [ 2285.470750][T23584] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2285.470773][T23584] ? rt_spin_unlock+0x65/0x80 [ 2285.470795][T23584] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 2285.470821][T23584] ? hrtimer_cancel_wait_running+0x142/0x180 [ 2285.470846][T23584] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 2285.470893][T23584] hrtimer_cancel+0x39/0x60 [ 2285.470918][T23584] drm_vblank_disable_and_save+0x1bc/0x380 [ 2285.470941][T23584] drm_crtc_vblank_off+0x22e/0x820 [ 2285.470966][T23584] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 2285.471012][T23584] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 2285.471038][T23584] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 2285.471069][T23584] vkms_atomic_commit_tail+0x51/0x210 [ 2285.471092][T23584] ? read_tsc+0x9/0x20 [ 2285.471121][T23584] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 2285.471144][T23584] commit_tail+0x281/0x3a0 [ 2285.471171][T23584] drm_atomic_helper_commit+0xa6b/0xb10 [ 2285.471197][T23584] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 2285.471220][T23584] drm_atomic_commit+0x262/0x2c0 [ 2285.471242][T23584] ? __pfx_drm_atomic_commit+0x10/0x10 [ 2285.471262][T23584] ? __pfx___drm_printfn_info+0x10/0x10 [ 2285.471291][T23584] ? drm_atomic_state_init+0x231/0x310 [ 2285.471312][T23584] drm_atomic_helper_set_config+0xe2/0x160 [ 2285.471342][T23584] drm_mode_setcrtc+0x9a4/0x1c50 [ 2285.471369][T23584] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2285.471405][T23584] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 2285.471423][T23584] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2285.471457][T23584] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 2285.471486][T23584] ? drm_ioctl_kernel+0x2af/0x3a0 [ 2285.471532][T23584] drm_ioctl_kernel+0x2d2/0x3a0 [ 2285.471560][T23584] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 2285.471576][T23584] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2285.471606][T23584] drm_ioctl+0x685/0xb20 [ 2285.471631][T23584] ? smk_tskacc+0x2fc/0x370 [ 2285.471721][T23584] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 2285.471738][T23584] ? __pfx_drm_ioctl+0x10/0x10 [ 2285.471770][T23584] ? __fget_files+0x2a/0x420 [ 2285.471798][T23584] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2285.471831][T23584] ? __pfx_drm_ioctl+0x10/0x10 [ 2285.471857][T23584] __se_sys_ioctl+0xff/0x170 [ 2285.471876][T23584] do_syscall_64+0xfa/0x3b0 [ 2285.471893][T23584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.471910][T23584] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2285.471927][T23584] ? clear_bhb_loop+0x60/0xb0 [ 2285.471946][T23584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.471970][T23584] RIP: 0033:0x7f86a272ec29 [ 2285.471986][T23584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2285.472001][T23584] RSP: 002b:00007f86a094c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2285.472020][T23584] RAX: ffffffffffffffda RBX: 00007f86a2976180 RCX: 00007f86a272ec29 [ 2285.472034][T23584] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005 [ 2285.472046][T23584] RBP: 00007f86a27b1e41 R08: 0000000000000000 R09: 0000000000000000 [ 2285.472057][T23584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2285.472068][T23584] R13: 00007f86a2976218 R14: 00007f86a2976180 R15: 00007ffcf429f808 [ 2285.472087][T23584] [ 2286.297199][T10369] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.545301][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 2287.303295][T23330] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 2287.315703][T23436] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 2287.317130][T23317] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.317220][T23317] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.317429][T23317] bridge_slave_0: entered allmulticast mode [ 2287.318885][T23317] bridge_slave_0: entered promiscuous mode [ 2287.321444][T23317] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.321527][T23317] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.321684][T23317] bridge_slave_1: entered allmulticast mode [ 2287.323152][T23317] bridge_slave_1: entered promiscuous mode [ 2288.156418][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.266385][T14228] bridge0: port 3(syz_tun) entered disabled state [ 2288.335548][T14228] syz_tun (unregistering): left allmulticast mode [ 2288.335576][T14228] syz_tun (unregistering): left promiscuous mode [ 2288.335637][T14228] bridge0: port 3(syz_tun) entered disabled state [ 2288.469923][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.615547][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.635487][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.796856][ C0] vkms_vblank_simulate: vblank timer overrun [ 2289.435139][T10369] bridge_slave_1: left allmulticast mode [ 2289.435165][T10369] bridge_slave_1: left promiscuous mode [ 2289.435350][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.525843][T10369] bridge_slave_0: left allmulticast mode [ 2289.525872][T10369] bridge_slave_0: left promiscuous mode [ 2289.526039][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.955658][T10369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2291.016146][T10369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2291.037357][T10369] bond0 (unregistering): Released all slaves [ 2291.130707][T10369] bond0 (unregistering): Released all slaves [ 2291.214740][ C0] vkms_vblank_simulate: vblank timer overrun [ 2292.185082][T10369] hsr_slave_0: left promiscuous mode [ 2292.225228][T10369] hsr_slave_1: left promiscuous mode [ 2292.225878][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2292.225896][T10369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2292.248878][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2292.248908][T10369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2292.326636][T10369] veth1_macvtap: left promiscuous mode [ 2292.326689][T10369] veth0_macvtap: left promiscuous mode [ 2292.326805][T10369] veth1_vlan: left promiscuous mode [ 2292.326877][T10369] veth0_vlan: left promiscuous mode [ 2294.055613][T10369] team0 (unregistering): Port device team_slave_1 removed [ 2294.236116][T10369] team0 (unregistering): Port device team_slave_0 removed