last executing test programs: 30m34.63481692s ago: executing program 32 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x10000, 0x3400000, 0x6, 0x7}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x10) tkill(r3, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) socket$alg(0x26, 0x5, 0x0) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xd8) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x408140) close_range(r1, 0xffffffffffffffff, 0x0) 27m47.685286667s ago: executing program 4 (id=254): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x1b) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = semget$private(0x0, 0x7, 0x3c0) semop(r6, &(0x7f00000001c0)=[{0x4, 0xe6, 0x1800}, {0x3, 0x4000, 0x1000}, {0x3, 0x1000, 0x1000}], 0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x2, 0x0, 0x0, 0x0) socket(0x29, 0x1, 0x4000005) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00eb05ce", @ANYRESDEC=r9, @ANYBLOB="000126bd7000fbdbdf250200000008002c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 27m46.389760027s ago: executing program 4 (id=256): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', r7, 0x0, 0x8001}, 0x18) ioprio_get$pid(0x2, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r8}, 0x10) syz_open_procfs(0x0, 0x0) 27m42.505645744s ago: executing program 4 (id=260): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{r3, 0xe7d4c009da6c1985}], 0x1, 0x6) 27m40.861934473s ago: executing program 4 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2}, 0x94) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000200)=0x400a45) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000007c0)={0xa, 0x2, 0x2, @empty, 0x80000005}, 0x1c) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) r11 = dup(r10) sendto$inet6(r11, &(0x7f0000000800)="0000010300000058150e56a07f987d7d96f2fc0fb10641af863737983909aa3104edba31eb86062f0287ca3c7ad37340902cab5bcd773978b5a8d3b34b096aa7a33ed0a3ce08fdcccfe3a72407e654352f030efed14d9a158a0f4c795ac49a9bfc70e2f1a99f4d0206f19ff68e0356ebd163b646b1474facd662b4f0d7b0dbd669d6126dddfa3f85081e81e3250d0a1cae9102000000000000003f0ad3b7274a1af1f7645d4d76f915afb48a4007b245c713e5d3eabf1585940dbf7946fd6af75a05d90b913f30618f97de36a0d90cd735f947a22dd3aea6d66a1f116c81446d28c2299e6c7d1d769aed514c4a3c7c67e77353d49f8754874a206eba13025c5fc46fde450cbf9e797e2212f69f965b2ee3dd9ee13207524ddae55661ddd36fe1480f659e5af0ed241e8fd2ad45f2e5449367966a3683cc12af08e6226a322fde0962976867f8167ce84341cf7827d43c3c1f712412d2f8c42c19f684e53eb669a631d083ba9133d3d4924663a4d512c15d2ce1c359ac489bd1de", 0x17a, 0x4040000, 0x0, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 27m39.883652781s ago: executing program 4 (id=265): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r4 = open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340), 0x0) 27m34.714668028s ago: executing program 4 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x6) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020}, 0xfffffffffffffe0d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r4) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) 27m18.626841527s ago: executing program 33 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x6) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020}, 0xfffffffffffffe0d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r4) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) 13m38.502474891s ago: executing program 6 (id=3597): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 13m38.321113667s ago: executing program 6 (id=3599): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) 13m37.414918886s ago: executing program 6 (id=3602): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) 13m34.351978638s ago: executing program 6 (id=3614): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 13m34.042391854s ago: executing program 6 (id=3615): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 13m32.189152098s ago: executing program 6 (id=3619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xab, 0xc2, 0xa0, 0x40, 0x1e0e, 0x9200, 0x6d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x2, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x7, 0x6d}}]}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) 13m31.541590724s ago: executing program 0 (id=3622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c810}, 0x10) 13m29.044471423s ago: executing program 0 (id=3632): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) 13m27.904680823s ago: executing program 0 (id=3637): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, r2) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') fchdir(r5) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 13m27.382408293s ago: executing program 0 (id=3641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x100, 0x800001}, @flat=@binder={0x73622a85, 0x0, 0x800001}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x23}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 13m27.298168793s ago: executing program 0 (id=3642): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 13m27.182584251s ago: executing program 0 (id=3643): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 13m17.085146295s ago: executing program 34 (id=3619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xab, 0xc2, 0xa0, 0x40, 0x1e0e, 0x9200, 0x6d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x2, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x7, 0x6d}}]}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) 13m12.081280109s ago: executing program 35 (id=3643): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 13m8.243959869s ago: executing program 5 (id=3710): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) 13m0.964924593s ago: executing program 5 (id=3723): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12m57.078436742s ago: executing program 5 (id=3733): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)) 12m56.575943267s ago: executing program 5 (id=3737): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12m56.488473158s ago: executing program 5 (id=3738): preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 12m52.780909763s ago: executing program 5 (id=3749): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e26, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x3e, {0x2, 0xce22, @empty}}) 12m52.132381223s ago: executing program 36 (id=3749): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e26, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x3e, {0x2, 0xce22, @empty}}) 10m45.512180552s ago: executing program 3 (id=3975): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)) 10m45.378340113s ago: executing program 3 (id=3976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 10m42.380146082s ago: executing program 3 (id=3977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = dup3(r1, r0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 10m42.223321206s ago: executing program 3 (id=3979): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 10m40.966974248s ago: executing program 3 (id=3982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) 10m39.085701225s ago: executing program 3 (id=3985): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 10m23.401900707s ago: executing program 37 (id=3985): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 6m26.002174746s ago: executing program 2 (id=4000): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6m24.73557881s ago: executing program 2 (id=4175): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3e, &(0x7f0000000000)=0x9e9d316ed98f9ab1, 0x4) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) 6m22.096110459s ago: executing program 2 (id=4180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) 6m19.358023068s ago: executing program 7 (id=3683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a00000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1d, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 6m18.101467168s ago: executing program 2 (id=4184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000313}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 6m17.962860588s ago: executing program 7 (id=4185): ioctl$TCSETS(0xffffffffffffffff, 0x40204706, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 6m16.829933336s ago: executing program 7 (id=4187): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) 6m16.457225485s ago: executing program 2 (id=4189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) 6m12.266115051s ago: executing program 7 (id=4191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x7f, 0x101, 0x10, @mcast1, @empty, 0x8000, 0x80, 0x8, 0xe}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2007}) 6m11.946156901s ago: executing program 2 (id=4193): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4f, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) kexec_load(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) madvise(&(0x7f0000417000/0x6000)=nil, 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffd, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="361d362ff382c53fcbd314acbb49", 0x0, 0xe5, 0x0, 0x0, 0xc0, 0x0, &(0x7f00000006c0)="544b78ffba069bfc81d3a56c7a81fba3f73d584ed48af4bb69181ea006cd5348a373788b2d3ef606e965a378186bbbf149bda0b74794906fb1dfa6c04892fa2bbeaea64af4f752bf12e53812333e2a5d69752945cf69664f7ab7659768427d6c24b9b5fbb8482d7f9209c7c1653e83727af2b3bf4d2b9bc9e42a91b81ad30a80a978e32fd51a5a7edf9dc9dc6ab9b477dc3aa1d903a823d57f621b3c01b188e73e36bda5d2d73569b0911b3c3d37a6142e96c35b21f602318d454cb8bf163e42"}, 0x50) 6m10.530461512s ago: executing program 7 (id=4194): socket$kcm(0x11, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000017, 0x3, 0x0, 0x2, 0x4ee59ce4, 0x1, 0xfffffffc}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_pidfd_open(0x0, 0x0) unshare(0x2c020400) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x201f00) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000140)=ANY=[], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m55.754745972s ago: executing program 38 (id=4193): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4f, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) kexec_load(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) madvise(&(0x7f0000417000/0x6000)=nil, 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffd, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="361d362ff382c53fcbd314acbb49", 0x0, 0xe5, 0x0, 0x0, 0xc0, 0x0, &(0x7f00000006c0)="544b78ffba069bfc81d3a56c7a81fba3f73d584ed48af4bb69181ea006cd5348a373788b2d3ef606e965a378186bbbf149bda0b74794906fb1dfa6c04892fa2bbeaea64af4f752bf12e53812333e2a5d69752945cf69664f7ab7659768427d6c24b9b5fbb8482d7f9209c7c1653e83727af2b3bf4d2b9bc9e42a91b81ad30a80a978e32fd51a5a7edf9dc9dc6ab9b477dc3aa1d903a823d57f621b3c01b188e73e36bda5d2d73569b0911b3c3d37a6142e96c35b21f602318d454cb8bf163e42"}, 0x50) 5m53.774945749s ago: executing program 39 (id=4194): socket$kcm(0x11, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000017, 0x3, 0x0, 0x2, 0x4ee59ce4, 0x1, 0xfffffffc}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_pidfd_open(0x0, 0x0) unshare(0x2c020400) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x201f00) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000140)=ANY=[], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m54.412240798s ago: executing program 1 (id=4272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x6}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) prlimit64(r0, 0xc, &(0x7f00000000c0)={0x8cd, 0x6}, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 4m53.079949642s ago: executing program 1 (id=4275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010b00000000fbdbdf251600"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 4m51.43041191s ago: executing program 1 (id=4277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x78) close(r4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 4m49.569568713s ago: executing program 1 (id=4279): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 4m47.265021377s ago: executing program 1 (id=4281): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) 4m44.429229229s ago: executing program 1 (id=4285): socket$kcm(0x29, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='system.advise\x00') pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m28.300951023s ago: executing program 40 (id=4285): socket$kcm(0x29, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='system.advise\x00') pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m2.239830654s ago: executing program 9 (id=4532): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x2, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty}, 0x1c) unshare(0x400) syz_emit_ethernet(0x2a, &(0x7f0000009800)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @rand_addr=0x64010101, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @multicast2}}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = openat$full(0xffffff9c, 0x0, 0x1c302, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, 0x0) r2 = openat$hwrng(0xffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000004c0)={0x60, 0x368, &(0x7f0000000300)="602d2580503e6556ee79a5959640c18906539b58d83a5c0efb9e7192bd45ac4ce74d9697bb66d2f2dc9283f30c975a9d6e634e4ac54ab741485290665d6326ef09c3c66c72bf994b497821ab446fc2fdb055ad2fd5f2fec073d469aab499ff23f28b8770db2bd3183207717943bb200ccc32b85aa96d4ef6bb58ca659f7d2f3078e32cdccca37f209c", &(0x7f00000003c0)="71bbd81491618345dd4b3743032b864af093a1912fd1a9e93e2b2e60821632503200fb0c711cf5d163f7ee4aad23aab875c44b2520549e5bff77a6209f60911d24b5cb2f038e503dba12c698473b6413f0201e4e68955969dc72621f710ae439a2c7db8d24e16970fb14866f8e862d081dc06807b10e8e0e5ab24de67c3d74698905caae6b174ae48e7112d0193d25b66352d3fc218d3374d0d2d4a43d3d67c091999534174e98541acbda1f5fe7fcdd043f330585212237486cf2639f904e06277b9c09da30420c795fde92f619687d787b3fa16709587d680a609d030b1bfe21c15a06a2e306e56a", 0x89, 0xe9}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0xc0000008}) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) unshare(0x26000400) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9d, &(0x7f0000000140)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x3, 0x8b, 0x66, 0x0, 0x8, 0x1, 0x0, @broadcast, @broadcast, {[@end]}}, @redirect={0x5, 0x2, 0x0, @local, {0x1a, 0x4, 0x0, 0x0, 0x700, 0x63, 0x5ba1, 0xe, 0x5c, 0xd, @private=0xa010101, @private=0xa010102, {[@noop, @cipso={0x86, 0x48, 0x0, [{0x5, 0x7, "dd8c2fc85a"}, {0x1, 0x7, "2f2313ab6a"}, {0x0, 0xa, "ca1d4bc4c5f4ef06"}, {0x2, 0x5, "db025f"}, {0x0, 0xc, "f5a2e0580eefafbc21a9"}, {0x1, 0x5, "46b0d2"}, {0x2, 0x4, "4590"}, {0x6, 0x10, "2dded7100021b2d334951ab42319"}]}, @noop, @rr={0x7, 0x7, 0x76, [@private=0xa010100]}]}}, "053b7a"}}}}}, 0x0) 59.086277153s ago: executing program 9 (id=4536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x53f, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x1000000000000) 58.369627816s ago: executing program 9 (id=4537): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x6fbf, 0x1, {0x6000, 0x1}, {0x4f, 0x2}, @period={0x5a, 0x7, 0x8001, 0xee5, 0xff, {0x1, 0xf, 0x6, 0x28}, 0x0, 0x0}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x18) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$evdev(r6, &(0x7f0000000280)=[{{}, 0x7, 0x3, 0x24f}, {{}, 0x1f, 0x7f, 0x5}, {{}, 0x5, 0x0, 0x3}, {{0x0, 0x2710}, 0x12, 0x0, 0x2}, {{0x77359400}, 0x16, 0x6, 0x4}, {{}, 0x1f, 0x7, 0x5}, {{0x77359400}, 0x2, 0xf, 0x8001}], 0xa8) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 54.170595765s ago: executing program 9 (id=4542): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r0}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 53.868302566s ago: executing program 9 (id=4544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f00000014c0)=[{0x4, 0x4a00, 0x0, 0x0}, {0x0, 0x1a01, 0x0, 0x0}], 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) write$sndseq(r3, &(0x7f0000000000), 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(0x0, 0x0) 49.519391688s ago: executing program 9 (id=4547): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x63, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x5b}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x6a, {{0x2, 0x4e22, @broadcast}}}, 0x88) sched_setaffinity(0x0, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) 33.121377154s ago: executing program 41 (id=4547): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x63, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x5b}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x6a, {{0x2, 0x4e22, @broadcast}}}, 0x88) sched_setaffinity(0x0, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) 5.866047139s ago: executing program 8 (id=4583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x24000051) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180001000100318700011000"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x720e, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0xe}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.563689446s ago: executing program 8 (id=4584): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 4.123744403s ago: executing program 8 (id=4585): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESDEC=r2, @ANYBLOB="db1ca611f6adfc9b28e1c219260016081760f1360e405b4286942ae4dd27e3842bb609d21da8b62f7ccc6827185a327ec98da76a4ea7efb76697980a054b262c98e41853050f67140c12d0578caabd366ff703dfd0e3492fde75db43c444d1dfae9de0ee66fa74b885429543e47b497ee0ba48a49b9ffa00ff3485418d8ea67971ed084d27c6f2a22a0f7a426f6a0ea5abbaee7190e69085027a", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES8], 0x3c}}, 0x1000) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='netfs_rreq\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1}, 0x80) r7 = dup3(r5, r6, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, 0x0, 0x0) 2.96478385s ago: executing program 8 (id=4586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYRES16=r6], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.74406992s ago: executing program 8 (id=4587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 8 (id=4588): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x472f, &(0x7f0000000140)={0x0, 0xa173, 0x20, 0x0, 0x185}, &(0x7f0000000240), &(0x7f00000001c0)) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x800, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102378, 0x18fea) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(&(0x7f0000000300)='./cgroup\x00', 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80008) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0000882f719388814e44a6976cded4f09f"], 0x11) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)}}, 0x40) getdents64(r0, &(0x7f0000000300)=""/152, 0x98) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x898, 0x4000000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) kernel console output (not intermixed with test programs): x0c23 length: 249 > 4 [ 1562.128510][T18191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1562.181409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.424981][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1562.473932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.588990][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1562.649943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.702140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.771980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.819519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.928924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.147404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.710867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.786742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.974908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.036472][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1564.143977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.204566][T13478] Bluetooth: hci2: command tx timeout [ 1564.220318][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1564.432762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.545185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.752291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.216623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.308976][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.386918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.511850][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.636893][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1565.695176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.815267][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1566.008116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.284217][T13478] Bluetooth: hci2: command tx timeout [ 1567.049207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.155248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.285192][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1567.333153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.386914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.455234][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1567.503830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.566518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.643513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.809393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.931327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.314479][T19394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1568.390195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.394277][T13478] Bluetooth: hci2: command tx timeout [ 1568.440818][T19394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1568.510819][T19394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1568.556207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.612641][T19394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1568.682057][T19447] lo speed is unknown, defaulting to 1000 [ 1568.718564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.810100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.893282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.005058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.069914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.136039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.249151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.387758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.525950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.550179][T19397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.691619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.770921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.842956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.932379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.945013][T19397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.020692][T19447] chnl_net:caif_netlink_parms(): no params data found [ 1570.050720][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.050935][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.061186][T19376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.313193][ T1546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.313772][ T1546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.423943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.446257][T13478] Bluetooth: hci2: command tx timeout [ 1570.663654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.686870][T19447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.687091][T19447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.687312][T19447] bridge_slave_0: entered allmulticast mode [ 1570.690011][T19447] bridge_slave_0: entered promiscuous mode [ 1570.703115][T19447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.703254][T19447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.703747][T19447] bridge_slave_1: entered allmulticast mode [ 1570.706909][T19447] bridge_slave_1: entered promiscuous mode [ 1570.733334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.766115][T19376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.065341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.102461][T19447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.161441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.189996][T19447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.240823][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.241102][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.337704][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.445127][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.482138][T19447] team0: Port device team_slave_0 added [ 1571.529318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.529884][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.553448][T19447] team0: Port device team_slave_1 added [ 1571.597257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.749373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.882936][T19447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.882953][T19447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.882996][T19447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.955633][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.958752][T19447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.958767][T19447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.958793][T19447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.002796][ T1546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.003049][ T1546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.071114][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.072269][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.146880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.307527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.433381][T19447] hsr_slave_0: entered promiscuous mode [ 1572.434481][T19447] hsr_slave_1: entered promiscuous mode [ 1572.435337][T19447] debugfs: 'hsr0' already exists in 'hsr' [ 1572.435361][T19447] Cannot create hsr debugfs directory [ 1573.118681][T19397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.120851][T19376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.334207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.687367][T19397] veth0_vlan: entered promiscuous mode [ 1574.703838][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.789643][T19397] veth1_vlan: entered promiscuous mode [ 1574.847606][T19376] veth0_vlan: entered promiscuous mode [ 1574.971077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.000736][T19376] veth1_vlan: entered promiscuous mode [ 1575.005404][ T147] bridge_slave_1: left allmulticast mode [ 1575.005434][ T147] bridge_slave_1: left promiscuous mode [ 1575.005680][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.095849][ T147] bridge_slave_0: left allmulticast mode [ 1575.095882][ T147] bridge_slave_0: left promiscuous mode [ 1575.096191][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.343189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.480929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.692747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.751422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.198763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.560289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.629514][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.703667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.773314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.851038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.897905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.008186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.076748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.208244][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.285185][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.347992][ T147] bond0 (unregistering): Released all slaves [ 1577.461545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.567719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.648473][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.733023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.874505][ T147] hsr_slave_0: left promiscuous mode [ 1577.894220][ T147] hsr_slave_1: left promiscuous mode [ 1577.895889][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.935223][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.313178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.454343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.505546][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.727878][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1578.836295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.881652][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1578.976981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.235296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.356763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.763490][T19397] veth0_macvtap: entered promiscuous mode [ 1579.808048][T19397] veth1_macvtap: entered promiscuous mode [ 1579.822095][T19447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1579.855528][T19447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1579.888485][T19376] veth0_macvtap: entered promiscuous mode [ 1579.890558][T19447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1579.956087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.996690][T19447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1580.017875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.064266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.084609][T19376] veth1_macvtap: entered promiscuous mode [ 1580.132275][T19397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.180068][T19397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.185768][T19394] veth0_vlan: entered promiscuous mode [ 1580.233844][T19376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.281395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.281631][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.308819][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.316586][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.325398][T19376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.326704][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.327346][T19394] veth1_vlan: entered promiscuous mode [ 1580.389537][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.427870][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.435927][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.440002][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.485144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.512304][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.705902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.838888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.213238][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.213261][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.311536][T19394] veth0_macvtap: entered promiscuous mode [ 1581.336385][ T3993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.336406][ T3993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.376876][T19394] veth1_macvtap: entered promiscuous mode [ 1581.421639][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.421660][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.481182][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.481201][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.490434][T19394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.558909][T19394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.574971][T19447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.615047][ T164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.617128][ T164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.620633][ T164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.623353][ T164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.691123][T19447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.853771][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.853891][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.225145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.461471][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.470800][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.496690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.543354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.628206][T19504] overlayfs: failed to clone upperpath [ 1582.633834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.776638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.868083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.168013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.365573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.482762][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.482782][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.739309][ T3993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.739331][ T3993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.811597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.028066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.270068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.074997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.251524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.388132][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.523441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.742611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.895742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.114760][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.914871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.000327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.161678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.539586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.909154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.286138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.739403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.983470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.198631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.903808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.085431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.172270][T19447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.464789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.827569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.927629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.100422][T19575] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4188'. [ 1594.901392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.235329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.819582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.878750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.005459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.350868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.494344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.823390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.208887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.406043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.854209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.992129][T19447] veth0_vlan: entered promiscuous mode [ 1598.159765][T19447] veth1_vlan: entered promiscuous mode [ 1598.518561][T19447] veth0_macvtap: entered promiscuous mode [ 1598.631857][T19447] veth1_macvtap: entered promiscuous mode [ 1598.843530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.121384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.190496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.894517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.084642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.124481][T19447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1600.129897][T19447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.879024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.114591][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.118189][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.118622][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.119035][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.297760][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.830019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.749103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1611.076038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1611.113790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1611.914169][ C1] vkms_vblank_simulate: vblank timer overrun [ 1611.915612][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.915685][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.457981][ T3993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.457995][ T3993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.551419][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.551440][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.990844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1613.510676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1613.828324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1614.417736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1614.921657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1615.436493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1615.926211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1616.043780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1616.934265][ C1] vkms_vblank_simulate: vblank timer overrun [ 1617.300103][T18191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1617.330568][T18191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1617.332202][T18191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1617.334289][T18191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1617.353312][T18191] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1617.817904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.023440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.731638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.345151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.487767][T13478] Bluetooth: hci3: command tx timeout [ 1619.505337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.547734][T19647] lo speed is unknown, defaulting to 1000 [ 1619.642200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1620.025919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1620.580845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.842679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.961164][T13478] Bluetooth: hci3: command tx timeout [ 1621.979886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.716672][ C1] vkms_vblank_simulate: vblank timer overrun [ 1623.124938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1623.354528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1623.466591][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.098292][T13478] Bluetooth: hci3: command tx timeout [ 1624.188826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.290874][T18191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1624.304744][T18191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1624.306990][T18191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1624.308079][T18191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1624.309681][T18191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1624.486424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.659507][T19647] chnl_net:caif_netlink_parms(): no params data found [ 1624.700264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.896845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.974201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.499842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.957726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.243481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.275655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.399423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.030966][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.460382][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.489639][T13478] Bluetooth: hci3: command tx timeout [ 1627.489711][T13478] Bluetooth: hci4: command tx timeout [ 1627.698781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1628.501301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.303456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.712515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.722830][T18191] Bluetooth: hci4: command tx timeout [ 1630.227490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1630.617043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1630.691726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.092718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.687752][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.725489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.804536][T18191] Bluetooth: hci4: command tx timeout [ 1631.846580][T19681] lo speed is unknown, defaulting to 1000 [ 1634.286243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1635.426216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1635.440607][T18191] Bluetooth: hci4: command tx timeout [ 1637.865475][T19733] tipc: Enabling of bearer rejected, failed to enable media [ 1637.871355][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4227'. [ 1637.871372][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4227'. [ 1637.963141][T19744] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4228'. [ 1638.290311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1638.727146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.248917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.309359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.867861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.871471][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4229'. [ 1640.031215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.446615][ C1] vkms_vblank_simulate: vblank timer overrun [ 1641.435684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1641.474582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1642.314877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1642.405452][ C1] vkms_vblank_simulate: vblank timer overrun [ 1642.674874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1643.424479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.319066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.571504][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.822614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1644.887999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1645.304235][ C1] vkms_vblank_simulate: vblank timer overrun [ 1645.711408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.825072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.884521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.988400][ T1546] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.273698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.309196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.351308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.428228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.825327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.997691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.027554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.165761][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4239'. [ 1649.165778][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4239'. [ 1649.386292][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.597434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.618045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.903403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1650.826218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1651.833719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.137081][T19814] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1652.137108][T19814] CIFS mount error: No usable UNC path provided in device string! [ 1652.137108][T19814] [ 1652.137470][T19814] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1652.142318][T19814] binder: 19804:19814 ioctl c0046209 9999999999999999 returned -22 [ 1652.158626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.664523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1653.116634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1653.442196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1653.644360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1654.342267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.097323][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.295596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.572659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.686530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.794509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.898752][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.026536][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.079888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.105455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.159794][ T44] IPVS: starting estimator thread 0... [ 1656.189865][ T1546] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.245868][T19836] IPVS: using max 8 ests per chain, 19200 per kthread [ 1656.339893][T19647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.340048][T19647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.340286][T19647] bridge_slave_0: entered allmulticast mode [ 1656.392056][T19647] bridge_slave_0: entered promiscuous mode [ 1656.410555][T19647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.425418][T19647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.425678][T19647] bridge_slave_1: entered allmulticast mode [ 1656.430989][T19647] bridge_slave_1: entered promiscuous mode [ 1656.654133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1657.326899][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.071861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.234502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.376596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.787360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.297884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.102368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.298679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.343362][ T1546] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.458076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.627688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.830730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.657212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.699409][T19647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.728031][T19647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.147727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1663.306585][T19880] overlayfs: failed to clone upperpath [ 1663.497144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.097138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.974661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.343249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.559135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.139046][T18191] Bluetooth: hci7: command 0x0406 tx timeout [ 1666.654342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.791773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.212606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.603037][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1668.605011][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.716650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.761471][ T1546] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.854919][T19647] team0: Port device team_slave_0 added [ 1668.875138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.938491][T19647] team0: Port device team_slave_1 added [ 1669.258771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.849365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.856436][T19916] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 1671.116281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.341409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.435477][T19647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.435494][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.435518][T19647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.449922][T19647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.449940][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.449955][T19647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.936836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.148257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.499365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.500478][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.500551][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.555624][T19681] chnl_net:caif_netlink_parms(): no params data found [ 1674.847709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.410737][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1676.092186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1676.364617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1676.545095][ T1546] bridge_slave_1: left allmulticast mode [ 1676.545130][ T1546] bridge_slave_1: left promiscuous mode [ 1676.545405][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.944995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1677.461112][ T1546] bridge_slave_0: left allmulticast mode [ 1677.461145][ T1546] bridge_slave_0: left promiscuous mode [ 1677.461413][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.701836][T19957] Invalid source name [ 1677.701882][T19957] UBIFS error (pid: 19957): cannot open "ubifs", error -22 [ 1677.706849][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.281732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.864979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.924749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.368358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.449482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.608058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.686158][T18191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1680.713022][T18191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1680.722563][T18191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1680.723880][T18191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1680.853094][T18191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1681.094597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1681.515805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.072548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.085870][T13478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1682.103135][T13478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1682.106470][T13478] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1682.107847][T13478] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1682.109687][T13478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1682.192616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.392641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.588124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.330832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.429510][T18191] Bluetooth: hci0: command tx timeout [ 1683.597798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.141409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.457756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.665083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.747239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.797325][T18191] Bluetooth: hci5: command tx timeout [ 1684.936276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.551937][T13478] Bluetooth: hci0: command tx timeout [ 1686.067067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.081983][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4287'. [ 1686.082000][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4287'. [ 1686.608943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.686468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.885613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.895227][T13478] Bluetooth: hci2: command 0x0406 tx timeout [ 1686.895267][T13478] Bluetooth: hci5: command tx timeout [ 1686.980688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1687.112310][T20007] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1687.136051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1687.489842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1687.639298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1688.042258][T20006] Bluetooth: hci0: command tx timeout [ 1688.640189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1688.823898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.011586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.034416][T18191] Bluetooth: hci5: command tx timeout [ 1689.636744][ C1] vkms_vblank_simulate: vblank timer overrun [ 1690.199657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1690.200164][T18191] Bluetooth: hci0: command tx timeout [ 1690.379386][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.189045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.200526][T18191] Bluetooth: hci5: command tx timeout [ 1691.636672][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.204332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.588943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1693.275484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1699.629568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1699.918562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1700.015344][T19119] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1700.410144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1700.727401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.120934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.934329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.486488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.505580][T18191] Bluetooth: hci2: unexpected event for opcode 0x0024 [ 1703.567027][T20006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1703.670010][T20006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1703.685155][T20006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1703.687278][T20006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1703.687853][T20006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1704.009609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.063376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.673205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.733892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1706.007260][T18191] Bluetooth: hci3: command tx timeout [ 1706.119305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1706.964954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.122290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.379647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.014790][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.044743][T20006] Bluetooth: hci3: command tx timeout [ 1708.055145][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.099159][ T1546] bond0 (unregistering): Released all slaves [ 1708.194368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.282376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.547840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.874596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1709.610174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1710.124379][T20006] Bluetooth: hci3: command tx timeout [ 1710.858577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1711.189511][ T37] audit: type=1326 audit(1758986761.059:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.400504][ T37] audit: type=1326 audit(1758986761.069:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.401464][ T37] audit: type=1326 audit(1758986761.069:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.402226][ T37] audit: type=1326 audit(1758986761.069:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.403204][ T37] audit: type=1326 audit(1758986761.069:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.494093][ T37] audit: type=1326 audit(1758986761.069:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.494148][ T37] audit: type=1326 audit(1758986761.069:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.494189][ T37] audit: type=1326 audit(1758986761.069:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.494229][ T37] audit: type=1326 audit(1758986761.069:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.494272][ T37] audit: type=1326 audit(1758986761.069:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20084 comm="syz.9.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1711.533259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1712.106415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1712.431238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1712.477081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1712.482247][T20006] Bluetooth: hci3: command tx timeout [ 1712.539681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1712.641298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.338726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.815641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.847942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.901487][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.401840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.419977][T20107] netlink: 4804 bytes leftover after parsing attributes in process `syz.9.4311'. [ 1714.420425][T20107] netlink: 4804 bytes leftover after parsing attributes in process `syz.9.4311'. [ 1714.439346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.933230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.183371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.239537][T19996] syz_tun (unregistering): left promiscuous mode [ 1715.402881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1716.490573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1716.810460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.291010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.569495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.767557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.841257][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4317'. [ 1717.841273][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4317'. [ 1718.073529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.517104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.820549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.338667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.377568][T19965] lo speed is unknown, defaulting to 1000 [ 1719.932985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.226214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.371677][T20065] lo speed is unknown, defaulting to 1000 [ 1720.494406][T19975] lo speed is unknown, defaulting to 1000 [ 1720.657422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.812951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.653326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.765206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1722.358370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1722.550781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.332335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.377978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.547856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.985733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.033137][ T1546] hsr_slave_0: left promiscuous mode [ 1724.060150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.085050][ T1546] hsr_slave_1: left promiscuous mode [ 1724.086009][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1724.086038][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.109102][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1724.109132][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.493822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.662270][ C1] vkms_vblank_simulate: vblank timer overrun [ 1725.082752][ T1546] veth1_macvtap: left promiscuous mode [ 1725.082877][ T1546] veth0_macvtap: left promiscuous mode [ 1725.083224][ T1546] veth1_vlan: left promiscuous mode [ 1725.083434][ T1546] veth0_vlan: left promiscuous mode [ 1725.977288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1726.636351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1726.819229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1727.233048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1727.492783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.337172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.373193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.652910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.314597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.402101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.489775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.796682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.969475][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.517874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.756933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.997117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.447374][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.621903][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.899967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.495807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.866641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.196024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.750471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.471334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.506446][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.506491][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.539440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.564418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.924410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.345608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.605775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.627409][T18191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1736.716586][T18191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1736.787569][T18191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1736.902014][T18191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1736.915734][T18191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1737.496583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1737.721409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1737.842761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.169123][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.279332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.303574][T20234] CIFS mount error: No usable UNC path provided in device string! [ 1738.303574][T20234] [ 1738.303597][T20234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1738.583459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.620915][T20006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1738.723912][T20006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1738.798501][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.803495][T20006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1738.834702][T20006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1738.887707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.928983][T20006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1739.128870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1739.295667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1739.821953][ C1] vkms_vblank_simulate: vblank timer overrun [ 1739.947206][T18191] Bluetooth: hci1: command tx timeout [ 1740.031581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.989724][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.073567][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.164153][T18191] Bluetooth: hci4: command tx timeout [ 1741.247759][T20229] syz.9.4341 (20229): drop_caches: 2 [ 1741.765409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.866456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.975074][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.995572][T18191] Bluetooth: hci1: command tx timeout [ 1742.131569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1742.201687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.211778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.244153][T18191] Bluetooth: hci4: command tx timeout [ 1743.553994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.643733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.044120][T18191] Bluetooth: hci1: command tx timeout [ 1744.508444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.687118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.010202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.035507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.556579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.557356][T18191] Bluetooth: hci4: command tx timeout [ 1745.786345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.242727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.250803][T18191] Bluetooth: hci1: command tx timeout [ 1746.537701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.597009][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.714854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1747.511366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1747.512777][T18191] Bluetooth: hci2: command 0x0406 tx timeout [ 1747.681828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1747.695450][T18191] Bluetooth: hci4: command tx timeout [ 1748.059283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1750.955876][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1750.955893][ T37] audit: type=1326 audit(1758986801.029:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.956564][ T37] audit: type=1326 audit(1758986801.029:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.961133][ T37] audit: type=1326 audit(1758986801.029:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.961537][ T37] audit: type=1326 audit(1758986801.029:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.962335][ T37] audit: type=1326 audit(1758986801.029:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.962945][ T37] audit: type=1326 audit(1758986801.029:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.963289][ T37] audit: type=1326 audit(1758986801.029:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.963799][ T37] audit: type=1326 audit(1758986801.029:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.964179][ T37] audit: type=1326 audit(1758986801.039:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1750.964496][ T37] audit: type=1326 audit(1758986801.039:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20282 comm="syz.9.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d400eec9 code=0x7ffc0000 [ 1751.213631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.541467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.646335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.771136][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.074376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.130940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1753.732203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.014928][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 1755.429539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.490580][T20305] Bluetooth: MGMT ver 1.23 [ 1756.146145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.318579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.533184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.658863][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4359'. [ 1756.658953][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4359'. [ 1757.034068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.169858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.256093][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.338889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.502938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.985070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1758.367010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.039370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.444951][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 1759.659372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.905848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.541814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.997668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.032576][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.095924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.279386][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.574913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.657580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.764755][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.875210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.987116][T18191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1761.996210][T18191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1762.013408][T18191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1762.063123][ C1] vkms_vblank_simulate: vblank timer overrun [ 1762.114144][T18191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1762.137072][T18191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1762.207538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1762.475758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.172766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.334787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.451785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.559505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.712680][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.899464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1764.098358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1764.162540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1764.204275][T18191] Bluetooth: hci6: command tx timeout [ 1764.367489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1764.699153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1764.968547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1765.257689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1765.681263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.073938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.140914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.210593][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.475944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.484572][T18191] Bluetooth: hci6: command tx timeout [ 1768.524086][T18191] Bluetooth: hci6: command tx timeout [ 1768.553631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.163608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.552793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.627002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.766732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.241476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.535021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.604217][T18191] Bluetooth: hci6: command tx timeout [ 1770.801517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.045556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.234115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.297841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.558023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.679885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.718415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.274061][T20232] lo speed is unknown, defaulting to 1000 [ 1785.595768][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1785.595786][ T37] audit: type=1326 audit(1758986835.669:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20453 comm="syz.8.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129447eec9 code=0x7ffc0000 [ 1785.595835][ T37] audit: type=1326 audit(1758986835.669:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20453 comm="syz.8.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129447eec9 code=0x7ffc0000 [ 1786.333084][ T37] audit: type=1326 audit(1758986835.669:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20453 comm="syz.8.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f129447eec9 code=0x7ffc0000 [ 1786.333150][ T37] audit: type=1326 audit(1758986836.359:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20453 comm="syz.8.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129447eec9 code=0x7ffc0000 [ 1786.333195][ T37] audit: type=1326 audit(1758986836.359:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20453 comm="syz.8.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129447eec9 code=0x7ffc0000 [ 1786.495024][T20221] lo speed is unknown, defaulting to 1000 [ 1786.534103][T20341] lo speed is unknown, defaulting to 1000 [ 1788.248933][T20465] overlayfs: failed to clone upperpath [ 1789.508753][T20473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.310576][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1792.861192][T20476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1794.542994][T20497] fuse: Bad value for 'group_id' [ 1794.543139][T20497] fuse: Bad value for 'group_id' [ 1795.732528][T20507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1796.484250][T20006] Bluetooth: hci6: command 0x0405 tx timeout [ 1796.873864][T20517] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1796.873864][T20517] program syz.9.4405 not setting count and/or reply_len properly [ 1797.587839][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.587913][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.598130][T20006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1797.620141][T20006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1797.623490][T20006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1797.644140][T20006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1797.644847][T20006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1798.131231][T20006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1798.202424][T20006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1798.213034][T20006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1798.221591][T20006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1799.218836][T20006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1799.492572][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1799.496431][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1800.321396][T18191] Bluetooth: hci0: command tx timeout [ 1801.283292][T20006] Bluetooth: hci3: command tx timeout [ 1802.414515][T20006] Bluetooth: hci0: command tx timeout [ 1803.570325][T20006] Bluetooth: hci3: command tx timeout [ 1805.273734][T20341] chnl_net:caif_netlink_parms(): no params data found [ 1806.329658][T20006] Bluetooth: hci3: command tx timeout [ 1806.692087][T20559] bridge1: port 1(macvlan2) entered blocking state [ 1806.965068][T20569] overlayfs: failed to clone upperpath [ 1807.137106][T20559] bridge1: port 1(macvlan2) entered disabled state [ 1807.143208][T20559] macvlan2: entered allmulticast mode [ 1807.560199][T20559] macvlan2: entered promiscuous mode [ 1808.279482][ T1546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.279516][ T1546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1808.364813][T20006] Bluetooth: hci3: command tx timeout [ 1808.459252][T20515] lo speed is unknown, defaulting to 1000 [ 1809.106055][T13254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1809.326365][T20520] lo speed is unknown, defaulting to 1000 [ 1810.579876][ T1546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.579910][ T1546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1811.189447][ T1546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.189482][ T1546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1811.584443][T20341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.584655][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.584912][T20341] bridge_slave_0: entered allmulticast mode [ 1811.618009][T20341] bridge_slave_0: entered promiscuous mode [ 1811.885199][ T1546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.885234][ T1546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1812.027894][T20341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.028056][T20341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.028281][T20341] bridge_slave_1: entered allmulticast mode [ 1812.031145][T20341] bridge_slave_1: entered promiscuous mode [ 1812.358605][T20341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1812.386357][T20341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.030687][T20341] team0: Port device team_slave_0 added [ 1814.189387][T20341] team0: Port device team_slave_1 added [ 1814.797340][T20611] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4427'. [ 1814.797368][T20611] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4427'. [ 1819.279079][T20341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.279095][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.279121][T20341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.162669][T20341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.162686][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.162713][T20341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.246003][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1820.246451][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1822.178389][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.640923][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.480603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.575835][T18191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1823.579836][T18191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1823.591177][T18191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1823.621700][T18191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1823.629633][T18191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1823.915775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.089763][T20653] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4434'. [ 1824.808752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.884958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.886582][ T1546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.978165][T20515] chnl_net:caif_netlink_parms(): no params data found [ 1825.077992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.135714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.273533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.373133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.704197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.728023][T18191] Bluetooth: hci1: command tx timeout [ 1825.830947][ T1546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.994927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1826.184429][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1826.880687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.119817][T20520] chnl_net:caif_netlink_parms(): no params data found [ 1827.767117][T20669] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4438'. [ 1827.814417][T18191] Bluetooth: hci1: command tx timeout [ 1829.658114][ T1546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.884247][T18191] Bluetooth: hci1: command tx timeout [ 1830.078104][ T992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1830.365031][T20648] lo speed is unknown, defaulting to 1000 [ 1834.068708][ T992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1834.070704][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1834.589036][T18191] Bluetooth: hci1: command tx timeout [ 1837.741041][T20720] qnx6: unable to read the first superblock [ 1838.357686][ T1546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.429123][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.429266][T20515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.429496][T20515] bridge_slave_0: entered allmulticast mode [ 1838.447365][T20515] bridge_slave_0: entered promiscuous mode [ 1838.498962][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.499124][T20515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.499369][T20515] bridge_slave_1: entered allmulticast mode [ 1838.527780][T20515] bridge_slave_1: entered promiscuous mode [ 1839.242900][T19458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1840.084892][T19519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1840.089418][T20515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.118690][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.118847][T20520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.119542][T20520] bridge_slave_0: entered allmulticast mode [ 1840.155179][T20520] bridge_slave_0: entered promiscuous mode [ 1840.275567][T20515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.276965][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.277125][T20520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.277340][T20520] bridge_slave_1: entered allmulticast mode [ 1840.451261][T20520] bridge_slave_1: entered promiscuous mode [ 1843.839022][T20515] team0: Port device team_slave_0 added [ 1843.851414][T20520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.039813][T20515] team0: Port device team_slave_1 added [ 1844.045557][T20520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.865081][T20766] Invalid source name [ 1845.865099][T20766] UBIFS error (pid: 20766): cannot open "ubifs", error -22 [ 1846.041956][ T147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1848.776941][T19458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1848.842038][T20515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1848.842055][T20515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.842081][T20515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1848.845469][T20520] team0: Port device team_slave_0 added [ 1848.901056][T20520] team0: Port device team_slave_1 added [ 1848.902409][T20515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.902421][T20515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.902447][T20515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.331697][T20789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1850.469450][ T1546] bridge_slave_1: left allmulticast mode [ 1850.469483][ T1546] bridge_slave_1: left promiscuous mode [ 1850.469742][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.795551][ T1546] bridge_slave_0: left allmulticast mode [ 1850.795585][ T1546] bridge_slave_0: left promiscuous mode [ 1850.795864][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.930232][T20797] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1851.685063][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1852.068005][ T1546] bridge_slave_1: left allmulticast mode [ 1852.068040][ T1546] bridge_slave_1: left promiscuous mode [ 1852.068295][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.376178][ T1546] bridge_slave_0: left allmulticast mode [ 1852.376212][ T1546] bridge_slave_0: left promiscuous mode [ 1852.376475][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.726514][ T1546] bridge_slave_1: left allmulticast mode [ 1854.726631][ T1546] bridge_slave_1: left promiscuous mode [ 1854.727522][ T1546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.392982][ T1546] bridge_slave_0: left allmulticast mode [ 1855.393013][ T1546] bridge_slave_0: left promiscuous mode [ 1855.393265][ T1546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.788050][T20006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1855.807965][T20006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1855.809669][T20006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1855.812150][T20006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1855.812760][T20006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1857.097182][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1857.964258][T20006] Bluetooth: hci4: command tx timeout [ 1858.158551][T18191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1858.163783][T18191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1858.187309][T18191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1858.190506][T18191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1858.191257][T18191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1858.538278][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.538408][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.044153][T20006] Bluetooth: hci4: command tx timeout [ 1860.137092][ T992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1860.473585][T20006] Bluetooth: hci5: command tx timeout [ 1862.144188][T20006] Bluetooth: hci4: command tx timeout [ 1862.493713][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4479'. [ 1862.493731][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4479'. [ 1862.535156][T20006] Bluetooth: hci5: command tx timeout [ 1863.393287][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1863.604432][T19517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1864.259608][T20006] Bluetooth: hci4: command tx timeout [ 1864.374161][ T992] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1864.544170][ T992] usb 10-1: Using ep0 maxpacket: 32 [ 1864.586524][ T992] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1864.586555][ T992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.592005][ T992] usb 10-1: config 0 descriptor?? [ 1864.606755][T20006] Bluetooth: hci5: command tx timeout [ 1864.803557][ T992] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1864.869539][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1864.884129][ T992] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1864.884189][ T992] usb 10-1: media controller created [ 1864.976921][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1865.174650][ T1546] dvmrp1 (unregistering): left allmulticast mode [ 1865.408414][ T1546] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1866.689189][T20006] Bluetooth: hci5: command tx timeout [ 1867.375652][ T992] az6027: usb out operation failed. (-110) [ 1867.376097][ T992] az6027: usb out operation failed. (-32) [ 1867.376111][ T992] stb0899_attach: Driver disabled by Kconfig [ 1867.376123][ T992] az6027: no front-end attached [ 1867.376123][ T992] [ 1867.376543][ T992] az6027: usb out operation failed. (-32) [ 1867.376556][ T992] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1867.379675][ T992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input43 [ 1868.333620][ T992] dvb-usb: schedule remote query interval to 400 msecs. [ 1868.333643][ T992] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1869.060307][ T992] usb 10-1: USB disconnect, device number 3 [ 1869.376151][T20878] overlayfs: failed to clone upperpath [ 1869.630870][T20880] ptrace attach of "./syz-executor exec"[19447] was attempted by "./syz-executor exec"[20880] [ 1870.075706][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1871.616868][ T992] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1871.698197][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4488'. [ 1871.698214][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4488'. [ 1872.977426][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1873.084481][ T992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1873.315610][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1874.254905][ T1546] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1874.354379][ T1546] bond0 (unregistering): Released all slaves [ 1874.792099][ T1546] bond1 (unregistering): Released all slaves [ 1875.108768][ T1546] bond0 (unregistering): Released all slaves [ 1875.448312][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.656741][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1875.965446][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.604598][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4497'. [ 1876.604614][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4497'. [ 1876.664397][ T1546] bond0 (unregistering): Released all slaves [ 1878.861361][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1883.151198][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1883.695669][T18191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1883.701393][T18191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1883.718646][T18191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1883.745466][T18191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1883.753152][T18191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1883.965614][ T6100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1887.463497][T20006] Bluetooth: hci6: command tx timeout [ 1888.574380][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1889.041851][T20400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1889.232007][T20985] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4511'. [ 1889.484068][T20006] Bluetooth: hci6: command tx timeout [ 1889.815598][ T6056] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1889.994314][ T6056] usb 10-1: Using ep0 maxpacket: 8 [ 1890.205785][ T6056] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1890.205821][ T6056] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 3840, setting to 64 [ 1890.208858][ T6056] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1890.208886][ T6056] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.208906][ T6056] usb 10-1: Product: syz [ 1890.208921][ T6056] usb 10-1: Manufacturer: syz [ 1890.208936][ T6056] usb 10-1: SerialNumber: syz [ 1890.271349][ T6056] usb 10-1: config 0 descriptor?? [ 1890.282148][ T6056] streamzap 10-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1890.620158][ T6056] usb 10-1: USB disconnect, device number 4 [ 1891.265205][ T1546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1891.564027][T20006] Bluetooth: hci6: command tx timeout [ 1891.581314][ T1546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1891.621298][ T1546] bond0 (unregistering): Released all slaves [ 1892.577956][T20520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.577973][T20520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.577999][T20520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.587429][T20648] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1893.058870][T20817] lo speed is unknown, defaulting to 1000 [ 1893.066239][T20956] lo speed is unknown, defaulting to 1000 [ 1893.193175][T21012] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1893.390800][T20829] lo speed is unknown, defaulting to 1000 [ 1893.661380][T20006] Bluetooth: hci6: command tx timeout [ 1894.238457][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1894.462826][T21012] orangefs_mount: mount request failed with -4 [ 1895.232509][T21022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1895.792924][ T6101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1900.752253][ T147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1901.836477][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1906.045872][T13254] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1906.200430][T13254] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.200461][T13254] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.200481][T13254] usb 10-1: Product: syz [ 1906.200503][T13254] usb 10-1: Manufacturer: syz [ 1906.200517][T13254] usb 10-1: SerialNumber: syz [ 1906.268483][T13254] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1906.366103][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1906.523760][T19464] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1908.300087][T19464] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1908.300431][T19464] ath9k_htc: Failed to initialize the device [ 1908.347737][T20400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1908.353968][T13254] usb 10-1: USB disconnect, device number 5 [ 1908.406827][T13254] usb 10-1: ath9k_htc: USB layer deinitialized [ 1909.405134][T21076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1909.737860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1909.904147][T20074] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1910.081258][T20074] usb 10-1: Using ep0 maxpacket: 32 [ 1910.092933][T20074] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1910.092963][T20074] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.092982][T20074] usb 10-1: Product: syz [ 1910.092995][T20074] usb 10-1: Manufacturer: syz [ 1910.093009][T20074] usb 10-1: SerialNumber: syz [ 1910.127387][T20817] chnl_net:caif_netlink_parms(): no params data found [ 1910.147453][T20074] usb 10-1: config 0 descriptor?? [ 1910.160645][T20956] chnl_net:caif_netlink_parms(): no params data found [ 1910.177471][T20074] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1910.635156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.043185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.456763][T20074] gspca_ov534_9: reg_w failed -110 [ 1911.501957][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1911.774096][T20074] gspca_ov534_9: Unknown sensor 0000 [ 1911.774199][T20074] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1912.146362][T20829] chnl_net:caif_netlink_parms(): no params data found [ 1912.257238][T21102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.257680][T21102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.580962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1913.011517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1913.206597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1913.713368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1913.741162][ T6056] usb 10-1: USB disconnect, device number 6 [ 1914.044837][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1914.463511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1914.624688][T20073] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1915.404215][T20073] usb 10-1: Using ep0 maxpacket: 8 [ 1915.445292][T20073] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1915.448195][T20073] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1915.448213][T20073] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.448224][T20073] usb 10-1: Product: syz [ 1915.448232][T20073] usb 10-1: Manufacturer: syz [ 1915.448240][T20073] usb 10-1: SerialNumber: syz [ 1915.524490][T20073] usb 10-1: config 0 descriptor?? [ 1915.549753][T20073] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1915.549814][T20073] usb 10-1: setting power ON [ 1915.549834][T20073] dvb-usb: bulk message failed: -22 (2/0) [ 1915.633646][T20073] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1915.644730][T20073] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1915.644790][T20073] usb 10-1: media controller created [ 1915.726969][T20073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1915.729944][T21119] dvb-usb: bulk message failed: -22 (3/0) [ 1915.729970][T21119] dvb-usb: bulk message failed: -22 (3/0) [ 1915.824266][T20073] usb 10-1: selecting invalid altsetting 6 [ 1915.824290][T20073] usb 10-1: digital interface selection failed (-22) [ 1915.824306][T20073] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1915.825214][T20073] usb 10-1: setting power OFF [ 1915.825235][T20073] dvb-usb: bulk message failed: -22 (2/0) [ 1915.825253][T20073] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1915.825267][T20073] (NULL device *): no alternate interface [ 1916.084669][T20956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.084832][T20956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.085110][T20956] bridge_slave_0: entered allmulticast mode [ 1916.099796][T20956] bridge_slave_0: entered promiscuous mode [ 1916.274163][T20956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.274245][T20956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.274616][T20956] bridge_slave_1: entered allmulticast mode [ 1916.277535][T20956] bridge_slave_1: entered promiscuous mode [ 1917.245245][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1917.539848][T20829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.540052][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.540338][T20829] bridge_slave_0: entered allmulticast mode [ 1917.548788][T20829] bridge_slave_0: entered promiscuous mode [ 1917.621818][T18191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1917.712982][T18191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1917.762465][T18191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1917.763690][T18191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1917.768523][T18191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1917.968775][T20073] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1918.037604][T20073] usb 10-1: USB disconnect, device number 7 [ 1918.061471][T20956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.063198][T20829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.063366][T20829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.063524][T20829] bridge_slave_1: entered allmulticast mode [ 1918.067657][T20829] bridge_slave_1: entered promiscuous mode [ 1918.114924][ T1546] batadv_slave_0: left promiscuous mode [ 1918.294176][ T1546] hsr_slave_0: left promiscuous mode [ 1918.365778][ T1546] hsr_slave_1: left promiscuous mode [ 1918.366385][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1918.366402][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.426253][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1918.426275][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1918.531540][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.576805][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1919.946731][T20006] Bluetooth: hci0: command tx timeout [ 1919.967799][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1919.991394][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.991472][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.101671][ T1546] hsr_slave_0: left promiscuous mode [ 1920.144392][ T1546] hsr_slave_1: left promiscuous mode [ 1920.145386][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1920.145413][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1920.200625][ T1546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1920.200656][ T1546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.324152][ T1546] veth1_macvtap: left promiscuous mode [ 1920.324275][ T1546] veth0_macvtap: left promiscuous mode [ 1920.324567][ T1546] veth1_vlan: left promiscuous mode [ 1920.324659][ T1546] veth0_vlan: left promiscuous mode [ 1920.368455][T18191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1920.389532][T18191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1920.391104][T18191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1920.392579][T18191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1920.393798][T18191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1920.484451][ T1546] veth1_macvtap: left promiscuous mode [ 1920.484568][ T1546] veth0_macvtap: left promiscuous mode [ 1920.484888][ T1546] veth1_vlan: left promiscuous mode [ 1920.485097][ T1546] veth0_vlan: left promiscuous mode [ 1921.964054][T18191] Bluetooth: hci0: command tx timeout [ 1922.524169][T18191] Bluetooth: hci1: command tx timeout [ 1923.594515][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1924.047332][T18191] Bluetooth: hci0: command tx timeout [ 1924.622836][T18191] Bluetooth: hci1: command tx timeout [ 1926.468045][T18191] Bluetooth: hci0: command tx timeout [ 1926.522739][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1926.716423][T18191] Bluetooth: hci1: command tx timeout [ 1926.803924][T21168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1926.807117][T21167] delete_channel: no stack [ 1928.924641][T18191] Bluetooth: hci1: command tx timeout [ 1928.928865][ T6100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1929.513062][T21181] netlink: 1296 bytes leftover after parsing attributes in process `syz.8.4556'. [ 1932.016658][ T6100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1933.255537][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 1934.568650][T20400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1934.598633][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 1936.298332][ T8807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1936.317517][ T8807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1936.319235][ T8807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1936.321363][ T8807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1936.322220][ T8807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1937.193499][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1938.883698][ T8807] Bluetooth: hci3: command tx timeout [ 1940.421548][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1940.937476][ T8807] Bluetooth: hci3: command tx timeout [ 1942.988600][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1943.251462][ T8807] Bluetooth: hci3: command tx timeout [ 1944.687672][T18191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1944.693774][T18191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1944.703738][T18191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1944.710619][T18191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1944.712523][T18191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1944.945848][T21235] netlink: 452 bytes leftover after parsing attributes in process `syz.8.4569'. [ 1945.328859][T18191] Bluetooth: hci3: command tx timeout [ 1945.504891][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 1946.071142][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1946.610841][T21240] ceph: No mds server is up or the cluster is laggy [ 1946.825051][T18191] Bluetooth: hci4: command tx timeout [ 1946.841243][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 1948.417759][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1948.884335][T18191] Bluetooth: hci4: command tx timeout [ 1951.110226][T18191] Bluetooth: hci4: command tx timeout [ 1951.825436][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1953.164866][T18191] Bluetooth: hci4: command tx timeout [ 1953.889656][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1954.285296][T21274] libceph: resolve '4..' (ret=-3): failed [ 1957.035017][T17954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1957.905040][ T1546] team0 (unregistering): Port device team_slave_1 removed [ 1958.211284][ T1546] team0 (unregistering): Port device team_slave_0 removed [ 1959.485688][T17954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1959.659401][T21288] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4580'. [ 1962.696023][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1963.650056][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4584'. [ 1963.650073][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4584'. [ 1963.946004][T21142] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4547'. [ 1963.946034][T21142] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4547'. [ 1963.951061][T20956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.886939][T19458] lo speed is unknown, defaulting to 1000 [ 1964.886973][T19458] syz0: Port: 1 Link DOWN [ 1967.297357][T21315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1968.069921][ T37] audit: type=1804 audit(1758987018.129:675): pid=21326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.4588" name="file0" dev="ramfs" ino=72836 res=1 errno=0 [ 1968.446222][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1968.487922][T21136] chnl_net:caif_netlink_parms(): no params data found [ 1968.695802][T21144] chnl_net:caif_netlink_parms(): no params data found [ 1968.782315][T21232] chnl_net:caif_netlink_parms(): no params data found [ 1968.812720][T21203] chnl_net:caif_netlink_parms(): no params data found [ 1969.476898][T21136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.477048][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.477298][T21136] bridge_slave_0: entered allmulticast mode [ 1969.480248][T21136] bridge_slave_0: entered promiscuous mode [ 1969.539420][T21136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.539629][T21136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.539894][T21136] bridge_slave_1: entered allmulticast mode [ 1969.542798][T21136] bridge_slave_1: entered promiscuous mode [ 1970.365616][T21144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.365836][T21144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.366067][T21144] bridge_slave_0: entered allmulticast mode [ 1970.367619][T21144] bridge_slave_0: entered promiscuous mode [ 1970.372432][T21136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.645806][T21144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.645944][T21144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.646170][T21144] bridge_slave_1: entered allmulticast mode [ 1970.649127][T21144] bridge_slave_1: entered promiscuous mode [ 1970.654483][T21136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1970.654926][T21232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.655055][T21232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.655274][T21232] bridge_slave_0: entered allmulticast mode [ 1970.657962][T21232] bridge_slave_0: entered promiscuous mode [ 1970.766191][T21203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.766335][T21203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.766648][T21203] bridge_slave_0: entered allmulticast mode [ 1970.769514][T21203] bridge_slave_0: entered promiscuous mode [ 1971.100265][T21232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.100423][T21232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.100727][T21232] bridge_slave_1: entered allmulticast mode [ 1971.103580][T21232] bridge_slave_1: entered promiscuous mode [ 1971.124233][T21203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.124366][T21203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.124652][T21203] bridge_slave_1: entered allmulticast mode [ 1971.127833][T21203] bridge_slave_1: entered promiscuous mode [ 1971.484563][T21144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.487665][T21136] team0: Port device team_slave_0 added [ 1971.681092][T21144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.683660][T21136] team0: Port device team_slave_1 added [ 1971.693510][T21232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.710694][T21203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.869041][T21232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.873043][T21203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.376408][T21136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.376425][T21136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.376451][T21136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.379593][T21144] team0: Port device team_slave_0 added [ 1972.569276][T21144] team0: Port device team_slave_1 added [ 1972.570905][T21136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.570919][T21136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.570945][T21136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.577980][T21232] team0: Port device team_slave_0 added [ 1972.582624][T21203] team0: Port device team_slave_0 added [ 1972.690302][T21232] team0: Port device team_slave_1 added [ 1972.706870][T21203] team0: Port device team_slave_1 added [ 1972.957274][T21144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.957292][T21144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.957319][T21144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.250398][T21144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.250416][T21144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.250442][T21144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.337247][T21232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.337262][T21232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.337288][T21232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.436478][T21203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.436496][T21203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.436521][T21203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.438161][T21232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.438175][T21232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.438200][T21232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.585594][T21203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.585611][T21203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.585637][T21203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.597279][T21136] hsr_slave_0: entered promiscuous mode [ 1973.598783][T21136] hsr_slave_1: entered promiscuous mode [ 1973.877096][T21144] hsr_slave_0: entered promiscuous mode [ 1973.878736][T21144] hsr_slave_1: entered promiscuous mode [ 1973.879763][T21144] debugfs: 'hsr0' already exists in 'hsr' [ 1973.879787][T21144] Cannot create hsr debugfs directory [ 1974.038905][T21232] hsr_slave_0: entered promiscuous mode [ 1974.040494][T21232] hsr_slave_1: entered promiscuous mode [ 1974.041518][T21232] debugfs: 'hsr0' already exists in 'hsr' [ 1974.041541][T21232] Cannot create hsr debugfs directory [ 1974.205603][T19519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1974.545545][T21203] hsr_slave_0: entered promiscuous mode [ 1974.547083][T21203] hsr_slave_1: entered promiscuous mode [ 1974.548091][T21203] debugfs: 'hsr0' already exists in 'hsr' [ 1974.548116][T21203] Cannot create hsr debugfs directory [ 1977.786605][ T8807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1977.796725][ T8807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1977.820280][ T8807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1977.834359][ T8807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1977.850039][ T8807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1978.684714][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1979.324759][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1979.366315][T21379] chnl_net:caif_netlink_parms(): no params data found [ 1979.975877][ T8807] Bluetooth: hci2: command tx timeout [ 1980.079881][T21379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.080021][T21379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.080287][T21379] bridge_slave_0: entered allmulticast mode [ 1980.104038][T21379] bridge_slave_0: entered promiscuous mode [ 1980.107683][T21379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.107826][T21379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.108061][T21379] bridge_slave_1: entered allmulticast mode [ 1980.114184][T21379] bridge_slave_1: entered promiscuous mode [ 1980.601336][T21379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1980.622911][T21379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1980.637882][T18191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1980.656379][T18191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1980.658349][T18191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1980.661201][T18191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1980.661955][T18191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1981.007406][T21379] team0: Port device team_slave_0 added [ 1981.148357][T21379] team0: Port device team_slave_1 added [ 1981.254585][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.254663][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.606651][T21379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1981.606667][T21379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.606694][T21379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1981.609141][T21379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1981.609153][T21379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.609176][T21379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1981.984298][T21379] hsr_slave_0: entered promiscuous mode [ 1981.995538][T21379] hsr_slave_1: entered promiscuous mode [ 1981.996537][T21379] debugfs: 'hsr0' already exists in 'hsr' [ 1981.996560][T21379] Cannot create hsr debugfs directory [ 1982.044134][T18191] Bluetooth: hci2: command tx timeout [ 1982.765090][T18191] Bluetooth: hci0: command tx timeout [ 1983.438387][T21433] chnl_net:caif_netlink_parms(): no params data found [ 1983.637078][T21232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1983.846127][T21232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1984.124011][T18191] Bluetooth: hci2: command tx timeout [ 1984.191807][T21232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1984.270101][T21232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1984.444731][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1984.445934][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1984.656009][T21433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.656156][T21433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.656469][T21433] bridge_slave_0: entered allmulticast mode [ 1984.659384][T21433] bridge_slave_0: entered promiscuous mode [ 1984.662723][T21433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.662868][T21433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.663106][T21433] bridge_slave_1: entered allmulticast mode [ 1984.676102][T21433] bridge_slave_1: entered promiscuous mode [ 1984.844255][T18191] Bluetooth: hci0: command tx timeout [ 1984.996622][T21433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1985.014007][T21203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1985.095535][T21433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1985.103712][T21203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1985.276979][T21203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1985.503012][T21203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1985.546584][T21433] team0: Port device team_slave_0 added [ 1985.590916][T21433] team0: Port device team_slave_1 added [ 1986.097397][T21433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1986.097414][T21433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1986.097439][T21433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1986.149844][T21433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1986.149860][T21433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1986.149885][T21433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1986.204220][T18191] Bluetooth: hci2: command tx timeout [ 1986.222525][T21379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1986.301440][T21379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1986.438128][T21379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1986.570015][T21379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1986.609512][T21433] hsr_slave_0: entered promiscuous mode [ 1986.611092][T21433] hsr_slave_1: entered promiscuous mode [ 1986.612157][T21433] debugfs: 'hsr0' already exists in 'hsr' [ 1986.612181][T21433] Cannot create hsr debugfs directory [ 1986.924127][T18191] Bluetooth: hci0: command tx timeout [ 1987.361711][T21232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.536761][T21232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.561435][T21203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.585893][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.586051][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1987.613609][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.613786][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1987.661943][T21379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.668990][T21203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.768165][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.768344][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1987.875157][ T3993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.875308][ T3993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1987.882958][T21379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.999861][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.000081][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.056581][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.056727][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1988.680899][T21232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1988.788117][T21433] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1988.820458][T21433] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1988.894713][T21433] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1988.949041][T21433] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1989.005504][T18191] Bluetooth: hci0: command tx timeout [ 1989.087532][T21203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.115362][T21379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.208749][T21232] veth0_vlan: entered promiscuous mode [ 1989.325860][T21232] veth1_vlan: entered promiscuous mode [ 1989.529921][T21232] veth0_macvtap: entered promiscuous mode [ 1989.574875][T21232] veth1_macvtap: entered promiscuous mode [ 1989.611498][T21433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.730997][T21433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1989.757701][T21232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1989.810559][T21232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1989.813779][T19519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.814057][T19519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1989.860856][T19519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.861149][T19519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1989.878724][T19718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.887120][T19718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.892682][T19718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.908703][T19519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.218739][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1990.373330][ T3993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.373352][ T3993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.544121][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.544142][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.568839][T21203] veth0_vlan: entered promiscuous mode [ 1990.613073][T21379] veth0_vlan: entered promiscuous mode [ 1990.680625][T21203] veth1_vlan: entered promiscuous mode [ 1990.717918][T21379] veth1_vlan: entered promiscuous mode [ 1992.104785][T21379] veth0_macvtap: entered promiscuous mode [ 1992.133631][T21203] veth0_macvtap: entered promiscuous mode [ 1992.266725][T21379] veth1_macvtap: entered promiscuous mode [ 1992.272341][T21203] veth1_macvtap: entered promiscuous mode [ 1992.346584][T21433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1992.376014][T21203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1992.379030][T21379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1992.407698][T21379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1992.509841][T21203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1992.541664][T19519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.670410][T19519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.706865][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.712437][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.713332][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.713632][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.714146][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.715117][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.045966][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1994.137169][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.137189][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.179939][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.179954][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.346906][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.346928][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.448607][ T3993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.448628][ T3993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.766773][T21433] veth0_vlan: entered promiscuous mode [ 1994.788563][T21433] veth1_vlan: entered promiscuous mode [ 1995.817634][ T6101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1996.125497][T21433] veth0_macvtap: entered promiscuous mode [ 1997.025566][T21433] veth1_macvtap: entered promiscuous mode [ 1997.979151][T21433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1998.807105][T21433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1998.983062][ T1428] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.027580][ T1428] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.028425][ T1428] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.028450][ T1428] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.076912][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2000.717030][T19519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.717054][T19519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2000.945073][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.945095][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.086444][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2005.567324][ T6101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2006.847756][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2011.325529][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2012.605951][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2017.085071][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2018.365130][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2022.846228][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2024.131740][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2027.965223][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2029.886158][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2033.724983][ T1436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2035.644397][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2039.485400][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2041.404542][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2042.697347][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.697449][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2045.245031][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2047.165739][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2051.014407][ T1436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2052.290007][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2056.134317][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2058.052427][ T6100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2060.124103][ T8807] Bluetooth: hci3: command 0x0406 tx timeout [ 2061.886178][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2063.085432][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2067.645036][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2068.287460][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2070.365818][T18191] Bluetooth: hci4: command 0x0406 tx timeout [ 2073.406684][ T6100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2073.407236][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2078.525387][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2079.164727][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2083.566281][T19718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2084.294422][ T164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2089.414336][ T1436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2090.044872][ T147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2094.526828][ T147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2095.806012][ T1428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2099.564448][ T6410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2101.094678][T18191] Bluetooth: hci2: command 0x0406 tx timeout [ 2101.567442][T17954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2104.141078][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.141146][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.404926][ T38] INFO: task kworker/u8:14:20400 blocked for more than 143 seconds. [ 2105.404965][ T38] Not tainted syzkaller #0 [ 2105.404975][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2105.404983][ T38] task:kworker/u8:14 state:D stack:23312 pid:20400 tgid:20400 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2105.405028][ T38] Workqueue: ib-unreg-wq ib_unregister_work [ 2105.405058][ T38] Call Trace: [ 2105.405064][ T38] [ 2105.405078][ T38] __schedule+0x16f3/0x4c20 [ 2105.405126][ T38] ? __lock_acquire+0xab9/0xd20 [ 2105.405148][ T38] ? __pfx___schedule+0x10/0x10 [ 2105.405186][ T38] ? schedule+0x91/0x360 [ 2105.405212][ T38] schedule+0x165/0x360 [ 2105.405237][ T38] schedule_timeout+0x9a/0x270 [ 2105.405261][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 2105.405296][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2105.405320][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2105.405341][ T38] ? wait_for_completion+0x267/0x5d0 [ 2105.405368][ T38] wait_for_completion+0x2bf/0x5d0 [ 2105.405404][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 2105.405432][ T38] ? disable_device+0x137/0x320 [ 2105.405461][ T38] disable_device+0x1c6/0x320 [ 2105.405493][ T38] ? __pfx_disable_device+0x10/0x10 [ 2105.405519][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 2105.405539][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 2105.405564][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 2105.405587][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2105.405615][ T38] ib_unregister_work+0x19/0x30 [ 2105.405633][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 2105.405655][ T38] process_scheduled_works+0xae1/0x17b0 [ 2105.405708][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2105.405748][ T38] worker_thread+0x8a0/0xda0 [ 2105.405774][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2105.405809][ T38] ? __kthread_parkme+0x7b/0x200 [ 2105.405842][ T38] kthread+0x711/0x8a0 [ 2105.405871][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2105.405898][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.405929][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.405954][ T38] ret_from_fork+0x436/0x7d0 [ 2105.405980][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2105.406010][ T38] ? __switch_to_asm+0x39/0x70 [ 2105.406027][ T38] ? __switch_to_asm+0x33/0x70 [ 2105.406044][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.406070][ T38] ret_from_fork_asm+0x1a/0x30 [ 2105.406104][ T38] [ 2105.406156][ T38] [ 2105.406156][ T38] Showing all locks held in the system: [ 2105.406167][ T38] 1 lock held by khungtaskd/38: [ 2105.406178][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2105.406229][ T38] 2 locks held by kworker/u8:5/147: [ 2105.406246][ T38] 3 locks held by kworker/u8:11/1546: [ 2105.406258][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2105.406304][ T38] #1: ffffc900057a7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2105.406350][ T38] #2: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2105.406411][ T38] 2 locks held by getty/5602: [ 2105.406422][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2105.406469][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 2105.406518][ T38] 3 locks held by kworker/u9:3/18191: [ 2105.406529][ T38] #0: ffff88803927b138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2105.406569][ T38] #1: ffffc900041ffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2105.406613][ T38] #2: ffff888054c38e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 2105.406666][ T38] 3 locks held by kworker/u8:14/20400: [ 2105.406677][ T38] #0: ffff88801fa86138 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2105.406721][ T38] #1: ffffc90004a17bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2105.406766][ T38] #2: ffff888034974750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 2105.406820][ T38] [ 2105.406825][ T38] ============================================= [ 2105.406825][ T38] [ 2105.406839][ T38] NMI backtrace for cpu 0 [ 2105.406862][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2105.406880][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2105.406890][ T38] Call Trace: [ 2105.406894][ T147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2105.406897][ T38] [ 2105.406904][ T38] dump_stack_lvl+0x189/0x250 [ 2105.406931][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2105.406954][ T38] ? __pfx__printk+0x10/0x10 [ 2105.406984][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 2105.407009][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2105.407034][ T38] ? __pfx__printk+0x10/0x10 [ 2105.407056][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2105.407085][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2105.407108][ T38] watchdog+0xf93/0xfe0 [ 2105.407135][ T38] ? watchdog+0x1de/0xfe0 [ 2105.407161][ T38] kthread+0x711/0x8a0 [ 2105.407186][ T38] ? __pfx_watchdog+0x10/0x10 [ 2105.407204][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.407233][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.407257][ T38] ret_from_fork+0x436/0x7d0 [ 2105.407278][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2105.407304][ T38] ? __switch_to_asm+0x39/0x70 [ 2105.407320][ T38] ? __switch_to_asm+0x33/0x70 [ 2105.407335][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.407359][ T38] ret_from_fork_asm+0x1a/0x30 [ 2105.407391][ T38] [ 2105.407399][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2105.407425][ C1] NMI backtrace for cpu 1 [ 2105.407439][ C1] CPU: 1 UID: 0 PID: 147 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2105.407458][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2105.407468][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 2105.407499][ C1] RIP: 0010:lock_acquire+0xd5/0x360 [ 2105.407519][ C1] Code: 8b 04 25 08 40 f6 91 83 b8 1c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe <4c> 8b 7c 24 30 fa 48 c7 c7 45 e3 04 8d e8 59 4b 5b 09 65 ff 05 c2 [ 2105.407533][ C1] RSP: 0018:ffffc90003a8f680 EFLAGS: 00000246 [ 2105.407547][ C1] RAX: ffff888020b75940 RBX: 0000000000000000 RCX: 31afaabc0de6de00 [ 2105.407559][ C1] RDX: 0000000000000000 RSI: ffffffff8af97b18 RDI: 1ffff11017126cba [ 2105.407571][ C1] RBP: ffffffff8542671f R08: 0000000000000001 R09: 0000000000000000 [ 2105.407582][ C1] R10: ffffc90003a8f8c0 R11: fffff52000751f20 R12: 0000000000000000 [ 2105.407593][ C1] R13: ffff8880b89365d0 R14: 0000000000000001 R15: 0000000000000001 [ 2105.407604][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 2105.407617][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2105.407629][ C1] CR2: 00005581c42bc660 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 2105.407643][ C1] Call Trace: [ 2105.407650][ C1] [ 2105.407657][ C1] ? ret_from_fork+0x436/0x7d0 [ 2105.407680][ C1] rt_spin_lock+0x88/0x2c0 [ 2105.407696][ C1] ? crng_make_state+0x8f/0x2b0 [ 2105.407721][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 2105.407744][ C1] crng_make_state+0x8f/0x2b0 [ 2105.407764][ C1] _get_random_bytes+0xd5/0x210 [ 2105.407780][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 2105.407800][ C1] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 2105.407829][ C1] ? skb_put+0x11b/0x210 [ 2105.407850][ C1] nsim_dev_trap_report_work+0x362/0xbc0 [ 2105.407878][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2105.407897][ C1] process_scheduled_works+0xae1/0x17b0 [ 2105.407928][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2105.407953][ C1] worker_thread+0x8a0/0xda0 [ 2105.407983][ C1] kthread+0x711/0x8a0 [ 2105.408004][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2105.408021][ C1] ? __pfx_kthread+0x10/0x10 [ 2105.408042][ C1] ? __pfx_kthread+0x10/0x10 [ 2105.408062][ C1] ret_from_fork+0x436/0x7d0 [ 2105.408080][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2105.408101][ C1] ? __switch_to_asm+0x39/0x70 [ 2105.408115][ C1] ? __switch_to_asm+0x33/0x70 [ 2105.408129][ C1] ? __pfx_kthread+0x10/0x10 [ 2105.408148][ C1] ret_from_fork_asm+0x1a/0x30 [ 2105.408170][ C1] [ 2105.408425][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2105.408439][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2105.408460][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2105.408483][ T38] Call Trace: [ 2105.408491][ T38] [ 2105.408499][ T38] dump_stack_lvl+0x99/0x250 [ 2105.408523][ T38] ? __asan_memcpy+0x40/0x70 [ 2105.408544][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2105.408567][ T38] ? __pfx__printk+0x10/0x10 [ 2105.408599][ T38] vpanic+0x281/0x750 [ 2105.408626][ T38] ? __pfx_vpanic+0x10/0x10 [ 2105.408646][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 2105.408666][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2105.408700][ T38] panic+0xb9/0xc0 [ 2105.408722][ T38] ? __pfx_panic+0x10/0x10 [ 2105.408748][ T38] ? irq_work_queue+0xc3/0x140 [ 2105.408774][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2105.408799][ T38] watchdog+0xfd2/0xfe0 [ 2105.408825][ T38] ? watchdog+0x1de/0xfe0 [ 2105.408852][ T38] kthread+0x711/0x8a0 [ 2105.408879][ T38] ? __pfx_watchdog+0x10/0x10 [ 2105.408899][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.408928][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.408953][ T38] ret_from_fork+0x436/0x7d0 [ 2105.408977][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2105.409005][ T38] ? __switch_to_asm+0x39/0x70 [ 2105.409021][ T38] ? __switch_to_asm+0x33/0x70 [ 2105.409037][ T38] ? __pfx_kthread+0x10/0x10 [ 2105.409062][ T38] ret_from_fork_asm+0x1a/0x30 [ 2105.409094][ T38] [ 2105.409353][ T38] Kernel Offset: disabled