last executing test programs: 17m35.203510979s ago: executing program 3 (id=176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0x0) 17m33.34430444s ago: executing program 3 (id=180): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0xe, 0x2b, {0x2b, 0x3, "45e2567a34b05e733c4e3c97606ecbcbeedef93b18cb6ee416167db1a484b7ec4813599d159e707f65"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17m30.387490035s ago: executing program 3 (id=189): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x92a8, 0x40, 0x2, 0x8b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x6) sendfile(r1, r2, &(0x7f0000000100)=0x6, 0x100000000010001) close_range(r0, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17m29.869402118s ago: executing program 3 (id=195): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 17m29.161061084s ago: executing program 3 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) io_setup(0x3, 0x0) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) 17m26.86548627s ago: executing program 3 (id=201): sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 17m11.803702362s ago: executing program 32 (id=201): sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 14m37.216586131s ago: executing program 1 (id=459): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) 14m29.330699334s ago: executing program 1 (id=468): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65", 0x6c}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce", 0xab}, {&(0x7f0000001400)="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", 0x7b9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000880)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m27.858685323s ago: executing program 1 (id=471): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB="d4010dd9c391e7d3492c25ce69bd42939ce8b2958dfb065be5fc7b87a9e8af2dba1b07d5c790898b1904199d3afaef37e493f1f9c405d95bc174085af916e8c8df34a915217e96d7c40cc9b4ea6901b70fa20691e9392b64855bf36a6c7ec88b9eba4d9bf412a845da5e580f0eb61e8d5fb6a09e1ecc92888e787f7313a4fb4db2a6e67091345dd1182c561efa3ef8046a1a201eab6bea"], 0x0, 0x4a, 0x0, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 14m23.584554604s ago: executing program 1 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000040)=0x3, 0x4) 14m22.297885309s ago: executing program 1 (id=478): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffb}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x1, @local, 0x9d}}, 0x1, 0x2, 0x9, 0x8, 0x9}, &(0x7f0000000180)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mkdir(&(0x7f0000000280)='./file0\x00', 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x24, &(0x7f0000000300)=0x9, 0x4) close(0xffffffffffffffff) 14m21.561391824s ago: executing program 1 (id=480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = eventfd(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) connect$can_bcm(r3, &(0x7f00000001c0), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) io_setup(0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 14m3.130724345s ago: executing program 33 (id=480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = eventfd(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) connect$can_bcm(r3, &(0x7f00000001c0), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) io_setup(0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 11m16.487444375s ago: executing program 0 (id=697): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd613", 0x4}], 0x2}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd00, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m13.878556575s ago: executing program 0 (id=701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@hyper}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "374abed2"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11m8.688070194s ago: executing program 0 (id=706): syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fsopen(0x0, 0x0) 11m2.90106775s ago: executing program 0 (id=713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881a2, 0xc}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11m0.394682735s ago: executing program 0 (id=716): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 10m57.935772736s ago: executing program 0 (id=717): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='v7\x00', 0xa2040a, &(0x7f0000000440)='\xd3\xeb\nr\x17\xfcq\x16o\x0f\xdc/\xee\xd8\xa8a,T\x1b\xac\x1b\xc0\xa2\x17\xd1\xf4\xa0\x00}\x84\x86q\x04\x0f\xf6u\x13\xbf\xea\xc1u\xa6\x7fp|\x05\x96%\xe2\xf6\xf76\xaaNeC\xf3\xb9r?\x1f=\x0e\xcc\xb2\xe6\xfd7\xa6\xf3C\xd3\xad\x14X\xf5\x96-\x1d:\'8e\xf5\xaf\x00\x1d\x9a3\x15vFDi\x01\xfe\xc7\xbdq-\xea\xd5\xd4\x98H&\xeb\x9a\f\x85)\x99|\xff\xe6f\x1ah7\x9c\xe2\xdc\x98\x9cC1QJ\xd5\xa4\xce\xe5\xd9<<\xf5\xaf\xa2\x92\xdbB\x82\r\xfa\xa6\xe2\xf4\x04\xd1\x1aB?\x8e\xb4\xa6qj\xbf\vE\xc9\xf0\x88\x90\xe1QI\xc5\x0f\xf7\xfd\x04\xfeVE\xfa\xa2A0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7m23.149501222s ago: executing program 2 (id=936): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0xfa29, 0x8, 0x3, 0x1e1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x24, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2daf86a4, 0x89ff]}}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x3, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x4, 0x9, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0x4, 0x3, 0x20, 0xff}, 0x12b, &(0x7f0000000f80)={0x5, 0xf, 0x12b, 0x4, [@generic={0xf4, 0x10, 0xb, "0f4637759482ed7b78b09cc36368c243519c0d070873560edf53d24d0e4f7d04d9bec15e78d3665312a784c2c1e89338ef28c070c21bc500771327d1962f626a3109812fa6fa06522b8b46af44b303c3bd5b9c3de5c39472e8864fa7242b641e1bfc70f6aed26857d26281b3522bf47da513d89a4fba9e65f143bed9e8361bd68f4fcc7b390bc2974bd1b7d33344a1578374b283f6750c712dcba46b39d6f07fecca36c3340006aedc19afe997a37fe7c12043ba402885683e055a05c7b2d4890001bb0b62dffa2d0d2d908270950b29effcec84120632c264fdd9e9738e23b8151c7076561fadf5aa4263dc47cb0fb7c3"}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x7, 0x0, 0x9, [0xffc00f, 0xff000f, 0xc0c0, 0xf, 0xf, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x3, 0x4, 0xffc0, 0x1}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0xfcb5}}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "10c90fb3"}]}}, 0x0}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 7m20.680701723s ago: executing program 2 (id=937): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x118) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 7m18.96921589s ago: executing program 2 (id=940): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000002}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x4, @empty, 0x82}, 0x1c) r2 = semget$private(0x0, 0x20000000102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000680)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0) 7m17.917546554s ago: executing program 2 (id=941): syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x0, 0xfffffffd}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x1c, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) bind$can_j1939(r5, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a08"], 0xc8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002100010026bd700002dcdf25ad40976f3a3f0500000004000480ccc35521818eadb998b17ebfcd1c174fd9329fcc82f3773359b7e0f4046e01383a5b14d0e1877b968aadffc5ae7737b6b3818c173d2e2298e4e610654c1d7c18eb46418356ccc8e5"], 0x18}}, 0x40000) 7m2.5658696s ago: executing program 35 (id=941): syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x0, 0xfffffffd}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x1c, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) bind$can_j1939(r5, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a08"], 0xc8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002100010026bd700002dcdf25ad40976f3a3f0500000004000480ccc35521818eadb998b17ebfcd1c174fd9329fcc82f3773359b7e0f4046e01383a5b14d0e1877b968aadffc5ae7737b6b3818c173d2e2298e4e610654c1d7c18eb46418356ccc8e5"], 0x18}}, 0x40000) 3m57.60347049s ago: executing program 5 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 3m56.287564654s ago: executing program 5 (id=1033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r6, 0x60b, 0x70bd30, 0xfffffffe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3m53.900638679s ago: executing program 5 (id=1035): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000140)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 3m37.485883122s ago: executing program 36 (id=1035): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000140)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 3m26.819191784s ago: executing program 6 (id=1061): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000580)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x80482, 0x0) write$binfmt_aout(r3, &(0x7f0000000500)=ANY=[], 0xff2e) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3m23.824830654s ago: executing program 6 (id=1063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003440), 0x0, 0x4008040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m22.292706376s ago: executing program 6 (id=1065): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 3m20.065275086s ago: executing program 6 (id=1068): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) 3m19.797584428s ago: executing program 6 (id=1072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x119) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x1, 0x8}, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m11.118411545s ago: executing program 6 (id=1087): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x44, 0x86}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000000080)=0x4, 0x4) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1200}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'macvlan1\x00'}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000500)) 2m54.644982419s ago: executing program 37 (id=1087): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x44, 0x86}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000000080)=0x4, 0x4) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1200}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'macvlan1\x00'}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000500)) 43.598137129s ago: executing program 7 (id=1232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x200, 0x5, 0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="39addaf7419cdc6c614bb55b52477998e59cfe41f22c6dc89ad5d0faa74d46e499bea41b856fc07a4ffc61750c0b1c6525f2a5b96090afcb8433b34250c702e435677ba9c9af27dcee989d059295bfad"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000580)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x99fafe131a9bc5af) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000b00000000000000040000000000000008000600", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0xd, 0x60, 0x7, 0x1}, {0x4, 0x9, 0x6, 0xfffffff7}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48}) 36.987998964s ago: executing program 7 (id=1243): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @timestamp, @mss={0x2, 0x3}], 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/protocols\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100", @ANYRES64], 0x24}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4b44, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000080)="11000000140025000307f4", 0xb) close_range(0xffffffffffffffff, r3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 30.879407418s ago: executing program 8 (id=1253): sendmsg(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_clone(0x104000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2844d5741631302b6fabeda6b685a2551ae01f5a7eab52000fb3a55d44d07c29f63044e74b3346f244f2ccc7398861ba4c255668991a0050511c52d5ac297bfd40a17f3b5c32ac39a2e7808050b730d72ddaeb5e2bdd87f38585b869b8c378ab3a57cfac890a0ccab0677e6e496393455128ba4574ae7f") write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000580)=[{}], 0x1, 0x0, 0x0, 0x0) open(0x0, 0x1607c0, 0x78e22799f4a46ffe) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x4, 0x6, 0x6}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400100, 0x2) 30.829290035s ago: executing program 7 (id=1254): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4}, &(0x7f0000044000)) rt_tgsigqueueinfo(0x0, 0x0, 0x30, &(0x7f00000002c0)={0x3f, 0x3, 0x1ff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040), 0x4000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ffd3bf79a1f5c5dc34cf2645cbc11c4562d22db8780edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b000000fb354673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0100f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce78754182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f26df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132155fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0xd, {0xffff, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x7}, {0x2, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 27.269767121s ago: executing program 9 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 25.970484984s ago: executing program 8 (id=1258): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r10, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000}) 24.308335499s ago: executing program 9 (id=1260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 22.38720473s ago: executing program 9 (id=1261): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r4 = fsopen(0x0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffb}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r5, 0xa, 0x3, [0x0, 0x2, 0x44]}, 0xe) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) r7 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000040)='syscall\x00') pread64(r8, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) close_range(r2, 0xffffffffffffffff, 0x0) 22.301353066s ago: executing program 7 (id=1262): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000806) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x9, 0x7f, 0x8000000000000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000880)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x88, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@srh={0x33, 0x6, 0x4, 0x3, 0x6, 0x0, 0x3, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1]}, @srh={0x5e, 0x2, 0x4, 0x1, 0x4, 0x0, 0x2, [@dev={0xfe, 0x80, '\x00', 0x22}]}, @srh={0x16, 0x0, 0x4, 0x0, 0xfb, 0x8, 0xf}, @routing={0x21}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 18.662599235s ago: executing program 9 (id=1263): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c8030000000000004000000000000000f60543"], 0x78) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00j\x00'/20, @ANYRES32, @ANYBLOB], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x57) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18.477079927s ago: executing program 7 (id=1264): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x12c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = gettid() tkill(r4, 0x16) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x6, 0x308, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x2005, 0x5}, [{0x2, 0xb66, 0x8, 0x8, 0x7, 0x3, 0x7, 0x6}]}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) 16.476293268s ago: executing program 8 (id=1266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) pipe(0x0) sync_file_range(0xffffffffffffffff, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8090) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYBLOB=',version=9p2000.u,smackfsfloor=\\,pcr=000000000000']) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe9b, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, &(0x7f0000000040), 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:'], 0x9) 15.1872955s ago: executing program 7 (id=1268): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffc, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50080}}], 0x1, 0x4008890) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r5}, 0x18) prctl$PR_GET_NAME(0x10, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="0062fcffffff202d6e65745f476c733ffbff707520776c75cdcbf40000c57ec2084230beff519336f3e0c8efa86018d76f94a522246afd3436c2eb00009b83646e602895280735a09d3a988a7cca949d7bf7e4bd356a0350781716bc1e5ca73cd7cec937368cd6ec1d3a55348b0c587602bd23caf4d6b63c76d8be3bb2f4d5d33a0e6ef048368ae8e0ea02db4f05507da5326db696b364e1435abe32df4ee65f6b8e4ef20258d1b0ac84f19aac2917ca89a979463ee1b278958c0717c63ef51967dfb7397bf67e88438ccd04361e37223d10ed5b10d2a62c262134aebf51d48f9e11c0976e8043d3e5f0650c0645d39ffac9f39943cc"], 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x50) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.31889068s ago: executing program 4 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 14.093353039s ago: executing program 9 (id=1270): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000140)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 12.733385618s ago: executing program 4 (id=1271): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="09000000000000000200fffee0000002"], 0x110) 12.505695405s ago: executing program 8 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0x90000009}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000053040100000000e30900000000000500000a14000000eb03010000000000000002000a00"], 0x28}, 0x1, 0x0, 0x0, 0x240208d1}, 0x40000) 10.914506596s ago: executing program 4 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) 9.029820486s ago: executing program 4 (id=1274): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) r4 = eventfd2(0x5, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x3, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000002c0)={0x400002, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x400002, r4, 0x1}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009540"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, r0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r9}}) io_uring_enter(r5, 0x4e14, 0x912a, 0x41, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 5.403444282s ago: executing program 8 (id=1275): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x101, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00"/12], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r11) 3.68568028s ago: executing program 4 (id=1276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001b00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000f1d53fec9b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x4}, 0xc) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 2.220261727s ago: executing program 8 (id=1277): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x50}}], 0x1, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet(0x2, 0x800, 0xffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8850}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x3c}}, 0x20004000) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) close(r3) 2.218468039s ago: executing program 9 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 2.169281445s ago: executing program 4 (id=1279): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) r1 = semget$private(0x0, 0x207, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) semctl$GETALL(r1, 0x0, 0xd, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) 0s ago: executing program 38 (id=1268): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffc, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50080}}], 0x1, 0x4008890) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r5}, 0x18) prctl$PR_GET_NAME(0x10, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="0062fcffffff202d6e65745f476c733ffbff707520776c75cdcbf40000c57ec2084230beff519336f3e0c8efa86018d76f94a522246afd3436c2eb00009b83646e602895280735a09d3a988a7cca949d7bf7e4bd356a0350781716bc1e5ca73cd7cec937368cd6ec1d3a55348b0c587602bd23caf4d6b63c76d8be3bb2f4d5d33a0e6ef048368ae8e0ea02db4f05507da5326db696b364e1435abe32df4ee65f6b8e4ef20258d1b0ac84f19aac2917ca89a979463ee1b278958c0717c63ef51967dfb7397bf67e88438ccd04361e37223d10ed5b10d2a62c262134aebf51d48f9e11c0976e8043d3e5f0650c0645d39ffac9f39943cc"], 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x50) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 716][ T61] Bluetooth: hci3: command tx timeout [ 643.931903][ T61] Bluetooth: hci6: command tx timeout [ 644.334845][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 645.308386][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 648.234669][ T5844] IPVS: starting estimator thread 0... [ 648.353928][ T9230] IPVS: using max 8 ests per chain, 19200 per kthread [ 650.686457][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.741739][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.746721][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.750922][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.764004][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 651.617759][ T8945] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 653.674865][ T5809] Bluetooth: hci0: command tx timeout [ 655.831063][ T5809] Bluetooth: hci0: command tx timeout [ 657.853883][ T5809] Bluetooth: hci0: command tx timeout [ 659.313498][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 660.320682][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 661.031250][ T5809] Bluetooth: hci0: command tx timeout [ 661.905383][ T9300] No source specified [ 663.098935][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 666.862903][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.863204][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.863406][ T9151] bridge_slave_0: entered allmulticast mode [ 666.866392][ T9151] bridge_slave_0: entered promiscuous mode [ 667.026845][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.026935][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.027113][ T9151] bridge_slave_1: entered allmulticast mode [ 667.029034][ T9151] bridge_slave_1: entered promiscuous mode [ 669.609753][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.609928][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.610203][ T9242] bridge_slave_0: entered allmulticast mode [ 669.625081][ T9242] bridge_slave_0: entered promiscuous mode [ 669.850249][ T9349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'. [ 669.863807][ T37] audit: type=1400 audit(1762128056.605:176): lsm=SMACK fn=smack_inode_removexattr action=denied subject="w" object="_" requested=w pid=9348 comm="syz.2.822" name="file1" dev="tmpfs" ino=1170 [ 669.996546][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.996672][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.996811][ T9242] bridge_slave_1: entered allmulticast mode [ 669.998906][ T9242] bridge_slave_1: entered promiscuous mode [ 671.009416][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.808686][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.809100][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.809258][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.809480][ T9138] bridge_slave_0: entered allmulticast mode [ 673.812982][ T9138] bridge_slave_0: entered promiscuous mode [ 676.874833][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.935394][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.935621][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.935870][ T9138] bridge_slave_1: entered allmulticast mode [ 676.955145][ T9138] bridge_slave_1: entered promiscuous mode [ 676.984045][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.146978][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.489415][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.595691][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.783581][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.847436][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.007242][ T9151] team0: Port device team_slave_0 added [ 678.996649][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.543460][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.590394][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.686207][ T9151] team0: Port device team_slave_1 added [ 682.633160][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.993086][ T6386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.121160][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.134886][ T9242] team0: Port device team_slave_0 added [ 684.856154][ T9242] team0: Port device team_slave_1 added [ 685.070385][ T6386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.122864][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.122889][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.122919][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.899737][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.899758][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.899786][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.956913][ T9138] team0: Port device team_slave_0 added [ 688.906269][ T6386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.894500][ T9138] team0: Port device team_slave_1 added [ 689.908812][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.908831][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.908856][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.512160][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.512339][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.512488][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.493628][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.507845][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.509661][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.513614][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.554156][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.973253][ T6386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.639341][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.660834][ T5809] Bluetooth: hci1: command tx timeout [ 696.663142][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.684973][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.720363][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.721540][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.825894][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.825999][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.803078][ T61] Bluetooth: hci1: command tx timeout [ 699.261135][ T61] Bluetooth: hci3: command tx timeout [ 700.898514][ T61] Bluetooth: hci1: command tx timeout [ 700.929781][ T37] audit: type=1800 audit(1762128087.665:177): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.856" name="nullb0" dev="tmpfs" ino=1579 res=0 errno=0 [ 701.294216][ T61] Bluetooth: hci3: command tx timeout [ 702.973905][ T61] Bluetooth: hci1: command tx timeout [ 703.383886][ T61] Bluetooth: hci3: command tx timeout [ 704.289841][ T9242] hsr_slave_0: entered promiscuous mode [ 704.291639][ T9242] hsr_slave_1: entered promiscuous mode [ 704.292859][ T9242] debugfs: 'hsr0' already exists in 'hsr' [ 704.292889][ T9242] Cannot create hsr debugfs directory [ 705.455849][ T61] Bluetooth: hci3: command tx timeout [ 709.127289][ T9536] futex_wake_op: syz.2.866 tries to shift op by 36; fix this program [ 712.525137][ T9543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.901724][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 713.926527][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 713.928272][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.929692][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 713.930590][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.505731][ T37] audit: type=1400 audit(1762128101.205:178): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=9556 comm="syz.4.869" daddr=::ffff:172.20.20.187 [ 714.717278][ T9565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.380310][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 717.760580][ T9575] random: crng reseeded on system resumption [ 717.793512][ T5801] Bluetooth: hci5: command tx timeout [ 720.089231][ T5801] Bluetooth: hci5: command tx timeout [ 721.060550][ T9477] chnl_net:caif_netlink_parms(): no params data found [ 721.562173][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.562609][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.562906][ T9460] bridge_slave_0: entered allmulticast mode [ 721.580412][ T9460] bridge_slave_0: entered promiscuous mode [ 721.609667][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.609843][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.610163][ T9460] bridge_slave_1: entered allmulticast mode [ 721.615985][ T9460] bridge_slave_1: entered promiscuous mode [ 723.225939][ T5801] Bluetooth: hci5: command tx timeout [ 725.079056][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.295582][ T5801] Bluetooth: hci5: command tx timeout [ 725.381333][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.242569][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.242731][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.243030][ T9477] bridge_slave_0: entered allmulticast mode [ 726.275163][ T9477] bridge_slave_0: entered promiscuous mode [ 726.464357][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.464531][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.464863][ T9477] bridge_slave_1: entered allmulticast mode [ 726.468197][ T9477] bridge_slave_1: entered promiscuous mode [ 728.886893][ T37] audit: type=1400 audit(1762128115.495:179): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=9619 comm="syz.2.881" daddr=::ffff:0.0.0.0 dest=20000 [ 733.238327][ T9460] team0: Port device team_slave_0 added [ 733.853289][ T9639] overlayfs: overlapping lowerdir path [ 734.467449][ T9460] team0: Port device team_slave_1 added [ 734.493489][ T6386] bridge_slave_1: left allmulticast mode [ 734.493524][ T6386] bridge_slave_1: left promiscuous mode [ 734.614426][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.714918][ T6386] bridge_slave_0: left allmulticast mode [ 734.714942][ T6386] bridge_slave_0: left promiscuous mode [ 734.715165][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.859468][ T6386] bridge_slave_1: left allmulticast mode [ 735.859507][ T6386] bridge_slave_1: left promiscuous mode [ 735.859799][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.956003][ T6386] bridge_slave_0: left allmulticast mode [ 736.956040][ T6386] bridge_slave_0: left promiscuous mode [ 736.956339][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.406653][ T6386] bridge_slave_1: left allmulticast mode [ 737.406676][ T6386] bridge_slave_1: left promiscuous mode [ 737.406829][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.480569][ T9654] sctp: [Deprecated]: syz.4.886 (pid 9654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.480569][ T9654] Use struct sctp_sack_info instead [ 738.553967][ T6386] bridge_slave_0: left allmulticast mode [ 738.554044][ T6386] bridge_slave_0: left promiscuous mode [ 738.556095][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.635971][ T6386] bridge_slave_1: left allmulticast mode [ 738.636068][ T6386] bridge_slave_1: left promiscuous mode [ 738.637007][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.697939][ T6386] bridge_slave_0: left allmulticast mode [ 738.698034][ T6386] bridge_slave_0: left promiscuous mode [ 738.698860][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.738319][ T6386] bond0 (unregistering): Released all slaves [ 745.039691][ T37] audit: type=1804 audit(1762128131.735:180): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.889" name="file0" dev="tmpfs" ino=1656 res=1 errno=0 [ 746.740650][ T6386] bond0 (unregistering): Released all slaves [ 750.324505][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.615054][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.524449][ T9688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.528832][ T6386] bond0 (unregistering): Released all slaves [ 755.102497][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 755.120243][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 755.122071][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 755.123439][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 755.125107][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.366138][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 756.606698][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 756.674006][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 756.686350][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 756.687178][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 757.623993][ T5801] Bluetooth: hci0: command tx timeout [ 758.074733][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.286949][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.287189][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.113758][ T5801] Bluetooth: hci6: command tx timeout [ 759.227608][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.290043][ T6386] bond0 (unregistering): Released all slaves [ 760.413779][ T5801] Bluetooth: hci0: command tx timeout [ 761.767451][ T5801] Bluetooth: hci6: command tx timeout [ 761.802664][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.914728][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.289088][ T6386] bond0 (unregistering): Released all slaves [ 764.895108][ T5801] Bluetooth: hci0: command tx timeout [ 764.895155][ T5801] Bluetooth: hci6: command tx timeout [ 765.145600][ T37] audit: type=1400 audit(1762128151.885:181): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=9748 comm="syz.4.908" dest=20004 [ 767.779245][ T61] Bluetooth: hci6: command tx timeout [ 767.779290][ T61] Bluetooth: hci0: command tx timeout [ 768.754690][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.529388][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.677199][ T6386] bond0 (unregistering): Released all slaves [ 773.142778][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 773.157873][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 773.163423][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 773.166013][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 773.166972][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 773.278601][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.586693][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 774.786725][ T9795] overlayfs: failed to clone upperpath [ 775.493919][ T5801] Bluetooth: hci7: command tx timeout [ 777.586416][ T5801] Bluetooth: hci7: command tx timeout [ 779.904177][ T9822] tipc: New replicast peer: 255.255.255.255 [ 779.906527][ T9822] tipc: Enabled bearer , priority 10 [ 780.029479][ T5801] Bluetooth: hci7: command tx timeout [ 782.118113][ T5801] Bluetooth: hci7: command tx timeout [ 783.281928][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 788.090169][ T9873] dvmrp0: entered allmulticast mode [ 788.327973][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 788.394152][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 789.047247][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 789.283879][ T5791] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 789.433930][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 789.436560][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.436600][ T5791] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 789.436613][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.440815][ T5791] usb 3-1: config 0 descriptor?? [ 789.651027][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.665342][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.191590][ T5844] usb 3-1: USB disconnect, device number 7 [ 790.384918][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.385101][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.385362][ T9704] bridge_slave_0: entered allmulticast mode [ 790.388795][ T9704] bridge_slave_0: entered promiscuous mode [ 790.465882][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.466003][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.466201][ T9714] bridge_slave_0: entered allmulticast mode [ 790.467676][ T9714] bridge_slave_0: entered promiscuous mode [ 790.469169][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.469281][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.469496][ T9704] bridge_slave_1: entered allmulticast mode [ 790.471522][ T9704] bridge_slave_1: entered promiscuous mode [ 790.565837][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.565987][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.566276][ T9714] bridge_slave_1: entered allmulticast mode [ 790.568959][ T9714] bridge_slave_1: entered promiscuous mode [ 790.645293][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.645399][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.645617][ T9784] bridge_slave_0: entered allmulticast mode [ 790.647302][ T9784] bridge_slave_0: entered promiscuous mode [ 790.796555][ T37] audit: type=1326 audit(1762128177.545:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.2.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57150fefc9 code=0x0 [ 792.080411][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.080614][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.081055][ T9784] bridge_slave_1: entered allmulticast mode [ 792.084622][ T9784] bridge_slave_1: entered promiscuous mode [ 792.346267][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.478512][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.497133][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.531618][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.559181][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.583920][ T6386] hsr_slave_0: left promiscuous mode [ 793.625249][ T6386] hsr_slave_1: left promiscuous mode [ 793.691646][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.704833][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.818272][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 793.864029][ T6386] hsr_slave_0: left promiscuous mode [ 793.886792][ T6386] hsr_slave_1: left promiscuous mode [ 793.887561][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.887582][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.940371][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.940395][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.106508][ T6386] hsr_slave_0: left promiscuous mode [ 794.143975][ T6386] hsr_slave_1: left promiscuous mode [ 794.144767][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.175497][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.282490][ T6386] veth1_macvtap: left promiscuous mode [ 794.282560][ T6386] veth0_macvtap: left promiscuous mode [ 794.282882][ T6386] veth1_vlan: left promiscuous mode [ 794.282981][ T6386] veth0_vlan: left promiscuous mode [ 795.574765][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 795.764979][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 800.309554][ T9938] sctp: [Deprecated]: syz.4.946 (pid 9938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.309554][ T9938] Use struct sctp_sack_info instead [ 804.314653][ T6386] team_slave_1 (unregistering): left promiscuous mode [ 804.356877][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 804.666802][ T6386] team_slave_0 (unregistering): left promiscuous mode [ 804.704624][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 808.404813][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 808.566728][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 809.228639][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 809.270147][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 809.272955][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 809.278925][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 809.279841][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 809.928584][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.058934][ T9915] pim6reg: entered allmulticast mode [ 810.074751][ T9704] team0: Port device team_slave_0 added [ 810.389899][ T9704] team0: Port device team_slave_1 added [ 810.518810][ T9714] team0: Port device team_slave_0 added [ 810.919436][ T9784] team0: Port device team_slave_0 added [ 810.922159][ T9714] team0: Port device team_slave_1 added [ 811.636349][ T5801] Bluetooth: hci1: command tx timeout [ 812.257455][ T9784] team0: Port device team_slave_1 added [ 812.315962][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.315984][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.316013][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.706145][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.706166][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.706195][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.694557][ T5801] Bluetooth: hci1: command tx timeout [ 813.769470][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.769493][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.769525][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.782520][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.782552][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.782583][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.788743][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.788765][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.788794][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.803345][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.803366][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.803392][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.542750][ T9714] hsr_slave_0: entered promiscuous mode [ 815.548131][ T9714] hsr_slave_1: entered promiscuous mode [ 815.572975][ T9784] hsr_slave_0: entered promiscuous mode [ 815.574664][ T9784] hsr_slave_1: entered promiscuous mode [ 815.575694][ T9784] debugfs: 'hsr0' already exists in 'hsr' [ 815.575720][ T9784] Cannot create hsr debugfs directory [ 815.793316][ T5801] Bluetooth: hci1: command tx timeout [ 816.328277][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.339283][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.344979][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.346225][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.347035][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 817.159062][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 817.169620][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 817.171878][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 817.176910][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 817.178844][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 817.346163][ T37] audit: type=1800 audit(1762128204.095:183): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.959" name="nullb0" dev="tmpfs" ino=1579 res=0 errno=0 [ 817.857528][ T61] Bluetooth: hci1: command tx timeout [ 818.292234][ T9953] chnl_net:caif_netlink_parms(): no params data found [ 818.425939][ T61] Bluetooth: hci0: command tx timeout [ 818.860671][ T9784] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 819.266897][ T61] Bluetooth: hci3: command tx timeout [ 819.400695][ T9784] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 820.005241][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.005331][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.257863][ T9784] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 820.493988][ T61] Bluetooth: hci0: command tx timeout [ 821.582364][ T61] Bluetooth: hci3: command tx timeout [ 821.671405][ T9784] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 821.755708][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.755864][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.756649][ T9953] bridge_slave_0: entered allmulticast mode [ 821.758269][ T9953] bridge_slave_0: entered promiscuous mode [ 821.909867][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.910420][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.911163][ T9953] bridge_slave_1: entered allmulticast mode [ 821.929923][ T9953] bridge_slave_1: entered promiscuous mode [ 822.236446][ T9953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.257643][ T9980] chnl_net:caif_netlink_parms(): no params data found [ 822.289053][ T9953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.579354][ T61] Bluetooth: hci0: command tx timeout [ 822.828156][ T9953] team0: Port device team_slave_0 added [ 822.891554][ T9953] team0: Port device team_slave_1 added [ 823.537860][ T9953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.537882][ T9953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.537914][ T9953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.127294][ T61] Bluetooth: hci3: command tx timeout [ 824.654585][ T61] Bluetooth: hci0: command tx timeout [ 824.782123][ T9953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.782148][ T9953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.782179][ T9953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.793353][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.793532][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.794134][ T9980] bridge_slave_0: entered allmulticast mode [ 824.797880][ T9980] bridge_slave_0: entered promiscuous mode [ 824.820252][ T9986] chnl_net:caif_netlink_parms(): no params data found [ 824.842635][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.842795][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.843484][ T9980] bridge_slave_1: entered allmulticast mode [ 824.884481][ T9980] bridge_slave_1: entered promiscuous mode [ 825.311285][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.428605][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.435103][ T9953] hsr_slave_0: entered promiscuous mode [ 825.436667][ T9953] hsr_slave_1: entered promiscuous mode [ 825.437763][ T9953] debugfs: 'hsr0' already exists in 'hsr' [ 825.437788][ T9953] Cannot create hsr debugfs directory [ 826.768493][ T61] Bluetooth: hci3: command tx timeout [ 829.306986][ T9980] team0: Port device team_slave_0 added [ 829.613573][ T9980] team0: Port device team_slave_1 added [ 829.618093][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.618264][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.619297][ T9986] bridge_slave_0: entered allmulticast mode [ 829.621125][ T9986] bridge_slave_0: entered promiscuous mode [ 832.006652][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.006930][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.007661][ T9986] bridge_slave_1: entered allmulticast mode [ 832.011136][ T9986] bridge_slave_1: entered promiscuous mode [ 832.928115][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 832.961564][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.961587][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.961627][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.971048][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 832.985354][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 832.987280][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 832.988549][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 833.921816][T10077] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 834.270982][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.270999][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.271018][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.528650][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.573105][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.806878][ T6386] IPVS: stop unused estimator thread 0... [ 835.030385][ T9986] team0: Port device team_slave_0 added [ 835.137084][ T9986] team0: Port device team_slave_1 added [ 835.160267][ T9980] hsr_slave_0: entered promiscuous mode [ 835.161441][ T9980] hsr_slave_1: entered promiscuous mode [ 835.162072][ T9980] debugfs: 'hsr0' already exists in 'hsr' [ 835.162087][ T9980] Cannot create hsr debugfs directory [ 835.446016][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.446030][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.446049][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.548079][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.548094][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.548113][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.770627][ T61] Bluetooth: hci4: command tx timeout [ 837.589499][ T9986] hsr_slave_0: entered promiscuous mode [ 837.594139][ T9986] hsr_slave_1: entered promiscuous mode [ 837.595246][ T9986] debugfs: 'hsr0' already exists in 'hsr' [ 837.595273][ T9986] Cannot create hsr debugfs directory [ 838.324811][ T9953] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 838.487302][ T9953] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 838.565832][ T9953] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 838.815637][ T61] Bluetooth: hci4: command tx timeout [ 840.306312][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 840.894945][ T61] Bluetooth: hci4: command tx timeout [ 840.955642][ T9953] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 842.697222][T10073] chnl_net:caif_netlink_parms(): no params data found [ 842.975383][ T61] Bluetooth: hci4: command tx timeout [ 843.611095][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.611356][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.611698][T10073] bridge_slave_0: entered allmulticast mode [ 843.615141][T10073] bridge_slave_0: entered promiscuous mode [ 843.721234][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.721322][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.721559][T10073] bridge_slave_1: entered allmulticast mode [ 843.723450][T10073] bridge_slave_1: entered promiscuous mode [ 844.261645][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.320742][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.014832][T10073] team0: Port device team_slave_0 added [ 846.048039][T10073] team0: Port device team_slave_1 added [ 846.639203][ T6386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.598908][ T9980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 847.937131][ T9980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 850.191330][ T6386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.228653][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.228678][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.228712][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.232753][ T9980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 850.389424][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.389447][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.389480][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.398868][ T9980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 853.030470][ T6386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.362771][T10172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.995'. [ 853.488664][ T6386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.574688][T10073] hsr_slave_0: entered promiscuous mode [ 853.576163][T10073] hsr_slave_1: entered promiscuous mode [ 853.579792][T10073] debugfs: 'hsr0' already exists in 'hsr' [ 853.579822][T10073] Cannot create hsr debugfs directory [ 853.627110][ T9986] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 853.700203][ T9986] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 853.811005][ T9986] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 853.908091][ T9986] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 854.135197][ T9953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.619158][ T6386] bridge_slave_1: left allmulticast mode [ 854.619198][ T6386] bridge_slave_1: left promiscuous mode [ 854.619554][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.002269][ T6386] bridge_slave_0: left allmulticast mode [ 855.002308][ T6386] bridge_slave_0: left promiscuous mode [ 855.002657][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.258811][ T6386] bridge_slave_1: left allmulticast mode [ 855.258852][ T6386] bridge_slave_1: left promiscuous mode [ 855.259138][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.315055][ T6386] bridge_slave_0: left allmulticast mode [ 855.315171][ T6386] bridge_slave_0: left promiscuous mode [ 855.315381][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.382741][T10193] overlayfs: failed to clone lowerpath [ 855.405184][ T6386] bridge_slave_1: left allmulticast mode [ 855.405228][ T6386] bridge_slave_1: left promiscuous mode [ 855.405544][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.455551][T10193] overlayfs: failed to clone upperpath [ 855.495516][ T6386] bridge_slave_0: left allmulticast mode [ 855.495554][ T6386] bridge_slave_0: left promiscuous mode [ 855.495892][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.567024][ T6386] bridge_slave_1: left allmulticast mode [ 855.567049][ T6386] bridge_slave_1: left promiscuous mode [ 855.567226][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.627026][ T6386] bridge_slave_0: left allmulticast mode [ 855.627079][ T6386] bridge_slave_0: left promiscuous mode [ 855.627415][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.738484][ T6386] bridge_slave_1: left allmulticast mode [ 855.738522][ T6386] bridge_slave_1: left promiscuous mode [ 855.739350][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.788000][ T6386] bridge_slave_0: left allmulticast mode [ 855.788153][ T6386] bridge_slave_0: left promiscuous mode [ 855.805933][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.893750][ T6386] bridge_slave_1: left allmulticast mode [ 855.893791][ T6386] bridge_slave_1: left promiscuous mode [ 855.894103][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.968200][ T6386] bridge_slave_0: left allmulticast mode [ 855.968241][ T6386] bridge_slave_0: left promiscuous mode [ 855.968635][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.059033][ T6386] bridge_slave_1: left allmulticast mode [ 856.059075][ T6386] bridge_slave_1: left promiscuous mode [ 856.059374][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.116139][ T6386] bridge_slave_0: left allmulticast mode [ 856.116178][ T6386] bridge_slave_0: left promiscuous mode [ 856.116503][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.188986][ T6386] bridge_slave_1: left allmulticast mode [ 856.189025][ T6386] bridge_slave_1: left promiscuous mode [ 856.189310][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.245670][ T6386] bridge_slave_0: left allmulticast mode [ 856.245712][ T6386] bridge_slave_0: left promiscuous mode [ 856.246070][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.308796][ T6386] bridge_slave_1: left allmulticast mode [ 856.308835][ T6386] bridge_slave_1: left promiscuous mode [ 856.309173][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.375872][ T6386] bridge_slave_0: left allmulticast mode [ 856.375913][ T6386] bridge_slave_0: left promiscuous mode [ 856.376294][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.244334][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.354485][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.440138][ T6386] bond0 (unregistering): Released all slaves [ 857.694656][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.780704][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.836513][ T6386] bond0 (unregistering): Released all slaves [ 858.084488][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.166349][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.246558][ T6386] bond0 (unregistering): Released all slaves [ 859.084476][ T6386] dvmrp0 (unregistering): left allmulticast mode [ 860.416830][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.484495][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.528952][ T6386] bond0 (unregistering): Released all slaves [ 860.694711][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.766096][ T6386] bond0 (unregistering): Released all slaves [ 860.976027][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.054383][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.116017][ T6386] bond0 (unregistering): Released all slaves [ 861.344900][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.424640][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.516164][ T6386] bond0 (unregistering): Released all slaves [ 861.734744][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.834470][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.897557][ T6386] bond0 (unregistering): Released all slaves [ 862.054471][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.134562][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.201720][ T6386] bond0 (unregistering): Released all slaves [ 862.259194][ T9953] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.276510][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 862.276544][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 862.513113][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.513367][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.186606][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.186867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.278705][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.785048][ T9980] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.797020][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.834409][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.834719][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.053310][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.053488][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.215343][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.252333][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.252578][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.278437][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.278704][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.193755][ T37] audit: type=1326 audit(1762128256.925:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.193825][ T37] audit: type=1326 audit(1762128256.925:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e6156d810 code=0x7ffc0000 [ 870.193874][ T37] audit: type=1326 audit(1762128256.925:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.193921][ T37] audit: type=1326 audit(1762128256.925:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.193974][ T37] audit: type=1326 audit(1762128256.925:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.194022][ T37] audit: type=1326 audit(1762128256.925:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.194082][ T37] audit: type=1326 audit(1762128256.935:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.194128][ T37] audit: type=1326 audit(1762128256.935:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.352710][ T37] audit: type=1326 audit(1762128257.095:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.352766][ T37] audit: type=1326 audit(1762128257.095:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 870.968551][T10244] pim6reg: entered allmulticast mode [ 871.015476][T10240] pim6reg: left allmulticast mode [ 871.362950][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 871.401482][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 871.421033][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 871.444675][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 871.445422][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 871.503819][T10073] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 871.976798][T10073] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 872.567264][T10251] net_ratelimit: 68 callbacks suppressed [ 872.567321][T10251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.614696][ T61] Bluetooth: hci5: command tx timeout [ 874.868088][T10073] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 875.721594][ T61] Bluetooth: hci5: command tx timeout [ 875.757342][T10073] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 876.931380][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.505550][ T6386] hsr_slave_0: left promiscuous mode [ 877.543841][ T6386] hsr_slave_1: left promiscuous mode [ 877.545061][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.567937][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.671640][ T6386] hsr_slave_0: left promiscuous mode [ 877.672283][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 877.685750][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 877.699959][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 877.702393][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 877.703143][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 877.728295][ T6386] hsr_slave_1: left promiscuous mode [ 877.729506][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.764680][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.774434][ T61] Bluetooth: hci5: command tx timeout [ 877.806228][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.844458][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.983837][ T6386] hsr_slave_0: left promiscuous mode [ 877.984513][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.984531][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.034949][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.034984][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.173887][ T6386] hsr_slave_0: left promiscuous mode [ 878.193875][ T6386] hsr_slave_1: left promiscuous mode [ 878.195258][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.234742][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.256659][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.296773][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.542463][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 878.568042][ T6386] veth1_macvtap: left promiscuous mode [ 878.568171][ T6386] veth0_macvtap: left promiscuous mode [ 878.568495][ T6386] veth1_vlan: left promiscuous mode [ 878.568713][ T6386] veth0_vlan: left promiscuous mode [ 878.785513][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 878.790833][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 878.792492][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 878.829370][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 878.830376][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 879.773836][ T61] Bluetooth: hci0: command tx timeout [ 879.854116][ T61] Bluetooth: hci5: command tx timeout [ 880.284783][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 881.734396][ T61] Bluetooth: hci1: command tx timeout [ 881.755711][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.755903][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.815338][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 881.854018][ T61] Bluetooth: hci0: command tx timeout [ 883.014437][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 883.174553][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 883.773757][ T61] Bluetooth: hci1: command tx timeout [ 883.933807][ T61] Bluetooth: hci0: command tx timeout [ 883.954451][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 884.115968][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 884.736431][ T6386] pim6reg (unregistering): left allmulticast mode [ 885.853823][ T61] Bluetooth: hci1: command tx timeout [ 886.041831][ T61] Bluetooth: hci0: command tx timeout [ 887.014602][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 887.275045][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 887.933935][ T61] Bluetooth: hci1: command tx timeout [ 890.676623][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 890.814231][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 891.814380][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 891.974357][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 892.794286][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 892.964301][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 893.837336][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 893.930386][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 893.978143][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 893.996708][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 893.999428][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 894.000287][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 894.064392][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 894.506671][T10290] dvmrp0: entered allmulticast mode [ 896.020769][ T61] Bluetooth: hci6: command tx timeout [ 896.413846][T10303] bridge2: entered promiscuous mode [ 896.413882][T10303] bridge2: entered allmulticast mode [ 897.260712][T10246] chnl_net:caif_netlink_parms(): no params data found [ 897.817188][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.817451][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.817736][T10246] bridge_slave_0: entered allmulticast mode [ 897.819562][T10246] bridge_slave_0: entered promiscuous mode [ 897.865024][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.865154][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.865318][T10246] bridge_slave_1: entered allmulticast mode [ 897.867092][T10246] bridge_slave_1: entered promiscuous mode [ 898.095514][ T5801] Bluetooth: hci6: command tx timeout [ 898.288201][T10246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.336721][T10246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.712983][T10246] team0: Port device team_slave_0 added [ 898.714649][T10273] chnl_net:caif_netlink_parms(): no params data found [ 898.725419][T10283] chnl_net:caif_netlink_parms(): no params data found [ 898.736260][T10293] chnl_net:caif_netlink_parms(): no params data found [ 898.774695][T10246] team0: Port device team_slave_1 added [ 899.312255][T10246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.312272][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.312290][T10246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.359332][T10246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.359345][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.359360][T10246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.057805][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.058067][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.058299][T10273] bridge_slave_0: entered allmulticast mode [ 900.060099][T10273] bridge_slave_0: entered promiscuous mode [ 900.174921][ T5801] Bluetooth: hci6: command tx timeout [ 900.190074][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.190225][T10283] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.190441][T10283] bridge_slave_0: entered allmulticast mode [ 900.200119][T10283] bridge_slave_0: entered promiscuous mode [ 900.205456][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.205621][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.205886][T10293] bridge_slave_0: entered allmulticast mode [ 900.208877][T10293] bridge_slave_0: entered promiscuous mode [ 900.213012][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.213157][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.213387][T10273] bridge_slave_1: entered allmulticast mode [ 900.218492][T10273] bridge_slave_1: entered promiscuous mode [ 900.325602][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.325776][T10283] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.326045][T10283] bridge_slave_1: entered allmulticast mode [ 900.327830][T10283] bridge_slave_1: entered promiscuous mode [ 900.329045][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.329170][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.329308][T10293] bridge_slave_1: entered allmulticast mode [ 900.331035][T10293] bridge_slave_1: entered promiscuous mode [ 900.471615][T10246] hsr_slave_0: entered promiscuous mode [ 900.472600][T10246] hsr_slave_1: entered promiscuous mode [ 900.999020][T10273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.052117][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.062125][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.072732][T10273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.179203][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.268149][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.736790][T10273] team0: Port device team_slave_0 added [ 901.844364][T10283] team0: Port device team_slave_0 added [ 901.846810][T10273] team0: Port device team_slave_1 added [ 902.067789][T10293] team0: Port device team_slave_0 added [ 902.079302][T10283] team0: Port device team_slave_1 added [ 902.146766][T10293] team0: Port device team_slave_1 added [ 902.266690][ T5801] Bluetooth: hci6: command tx timeout [ 902.576016][T10273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.576039][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.576070][T10273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.713170][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.713186][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.713204][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.716966][T10273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.716984][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.717010][T10273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.720528][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.720544][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.720570][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.740916][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.740936][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.740965][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.799210][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.799231][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.799258][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.751884][T10273] hsr_slave_0: entered promiscuous mode [ 903.754557][T10273] hsr_slave_1: entered promiscuous mode [ 903.755668][T10273] debugfs: 'hsr0' already exists in 'hsr' [ 903.755693][T10273] Cannot create hsr debugfs directory [ 903.785782][T10283] hsr_slave_0: entered promiscuous mode [ 903.787568][T10283] hsr_slave_1: entered promiscuous mode [ 903.788728][T10283] debugfs: 'hsr0' already exists in 'hsr' [ 903.788758][T10283] Cannot create hsr debugfs directory [ 903.820382][T10293] hsr_slave_0: entered promiscuous mode [ 903.821428][T10293] hsr_slave_1: entered promiscuous mode [ 903.822118][T10293] debugfs: 'hsr0' already exists in 'hsr' [ 903.822140][T10293] Cannot create hsr debugfs directory [ 910.413077][ T6386] bridge_slave_1: left allmulticast mode [ 910.413115][ T6386] bridge_slave_1: left promiscuous mode [ 910.413429][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.514551][ T6386] bridge_slave_0: left allmulticast mode [ 910.514571][ T6386] bridge_slave_0: left promiscuous mode [ 910.514745][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.586862][ T6386] bridge_slave_1: left allmulticast mode [ 910.586889][ T6386] bridge_slave_1: left promiscuous mode [ 910.587087][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.645743][ T6386] bridge_slave_0: left allmulticast mode [ 910.645769][ T6386] bridge_slave_0: left promiscuous mode [ 910.645962][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.707046][ T6386] bridge_slave_1: left allmulticast mode [ 910.707073][ T6386] bridge_slave_1: left promiscuous mode [ 910.707298][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.784703][ T6386] bridge_slave_0: left allmulticast mode [ 910.784731][ T6386] bridge_slave_0: left promiscuous mode [ 910.784928][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.846595][ T6386] bridge_slave_1: left allmulticast mode [ 910.846630][ T6386] bridge_slave_1: left promiscuous mode [ 910.846810][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.904704][ T6386] bridge_slave_0: left allmulticast mode [ 910.904732][ T6386] bridge_slave_0: left promiscuous mode [ 910.904942][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.954372][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.034937][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.056895][ T6386] bond0 (unregistering): Released all slaves [ 913.536447][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.635028][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.697142][ T6386] bond0 (unregistering): Released all slaves [ 915.604393][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.665010][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.686241][ T6386] bond0 (unregistering): Released all slaves [ 917.564375][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.624354][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.666133][ T6386] bond0 (unregistering): Released all slaves [ 918.006683][T10246] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 918.072529][T10246] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 918.163362][T10246] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 918.227145][T10246] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 918.450506][T10273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 918.520048][T10273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 918.586934][T10273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.759453][T10273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 919.023882][ T6386] hsr_slave_0: left promiscuous mode [ 919.043892][ T6386] hsr_slave_1: left promiscuous mode [ 919.044670][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.094645][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.233866][ T6386] hsr_slave_0: left promiscuous mode [ 919.256249][ T6386] hsr_slave_1: left promiscuous mode [ 919.257804][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.304938][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.453993][ T6386] hsr_slave_0: left promiscuous mode [ 919.493870][ T6386] hsr_slave_1: left promiscuous mode [ 919.494714][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.524647][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.693690][ T6386] hsr_slave_0: left promiscuous mode [ 919.713737][ T6386] hsr_slave_1: left promiscuous mode [ 919.715425][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.754460][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.105439][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 921.404505][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 924.914892][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 925.064459][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 926.756562][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 927.034376][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 929.799107][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.817394][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.822555][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.851171][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.852105][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.994404][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 931.305111][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 932.053858][ T5801] Bluetooth: hci3: command tx timeout [ 933.872378][T10283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 933.933721][T10283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 933.989495][T10283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 934.103942][ T5801] Bluetooth: hci3: command tx timeout [ 934.213404][T10283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 934.886551][T10293] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 934.920933][T10293] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 934.951654][T10293] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 935.030902][T10293] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 935.389058][T10344] chnl_net:caif_netlink_parms(): no params data found [ 935.473199][T10273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.911763][T10344] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.911881][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.912010][T10344] bridge_slave_0: entered allmulticast mode [ 935.913380][T10344] bridge_slave_0: entered promiscuous mode [ 935.933126][T10344] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.933301][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.934026][T10344] bridge_slave_1: entered allmulticast mode [ 935.938456][T10344] bridge_slave_1: entered promiscuous mode [ 936.090017][T10273] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.173934][ T5801] Bluetooth: hci3: command tx timeout [ 936.223162][T10344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.236870][T10344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.457044][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.457199][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.470074][T10283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.591423][T10344] team0: Port device team_slave_0 added [ 936.601715][T10344] team0: Port device team_slave_1 added [ 936.672515][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.672637][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.916276][T10344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.916291][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.916310][T10344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.922603][T10344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.922620][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.922634][T10344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.967997][T10283] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.200099][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.200256][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.209992][T10344] hsr_slave_0: entered promiscuous mode [ 937.211419][T10344] hsr_slave_1: entered promiscuous mode [ 937.212434][T10344] debugfs: 'hsr0' already exists in 'hsr' [ 937.212461][T10344] Cannot create hsr debugfs directory [ 937.222556][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.416137][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.416265][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.928516][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.211231][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.211351][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.255659][ T5801] Bluetooth: hci3: command tx timeout [ 938.320071][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.320191][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.092169][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 939.112178][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 939.125861][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 939.157908][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 939.160105][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 939.980363][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 939.997041][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 939.999548][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 940.004830][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 940.005754][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 941.215106][ T61] Bluetooth: hci0: command tx timeout [ 941.474420][T10344] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 941.528790][T10344] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 941.764366][T10344] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 941.799167][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.834558][T10344] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 942.094035][ T61] Bluetooth: hci1: command tx timeout [ 942.160029][T10369] chnl_net:caif_netlink_parms(): no params data found [ 942.509205][T10372] chnl_net:caif_netlink_parms(): no params data found [ 942.582269][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.582381][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.831953][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.832196][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.832448][T10369] bridge_slave_0: entered allmulticast mode [ 942.843241][T10369] bridge_slave_0: entered promiscuous mode [ 942.864803][T10369] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.864946][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.865197][T10369] bridge_slave_1: entered allmulticast mode [ 942.868087][T10369] bridge_slave_1: entered promiscuous mode [ 943.183100][T10369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.293816][ T61] Bluetooth: hci0: command tx timeout [ 943.317127][T10369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.575135][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.575306][T10372] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.575477][T10372] bridge_slave_0: entered allmulticast mode [ 943.577277][T10372] bridge_slave_0: entered promiscuous mode [ 943.670790][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.670956][T10372] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.671202][T10372] bridge_slave_1: entered allmulticast mode [ 943.675862][T10372] bridge_slave_1: entered promiscuous mode [ 943.986394][T10369] team0: Port device team_slave_0 added [ 944.064999][T10369] team0: Port device team_slave_1 added [ 944.071696][T10372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.190751][ T61] Bluetooth: hci1: command tx timeout [ 944.327763][T10372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.717339][T10369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.717359][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.717377][T10369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.960625][T10369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.960640][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.960658][T10369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.964778][T10372] team0: Port device team_slave_0 added [ 944.990406][T10372] team0: Port device team_slave_1 added [ 944.992433][T10293] veth0_vlan: entered promiscuous mode [ 945.258297][T10372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.258320][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.258346][T10372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.373802][ T61] Bluetooth: hci0: command tx timeout [ 945.380416][T10372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.380437][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.380468][T10372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.396786][T10369] hsr_slave_0: entered promiscuous mode [ 945.398248][T10369] hsr_slave_1: entered promiscuous mode [ 945.399219][T10369] debugfs: 'hsr0' already exists in 'hsr' [ 945.399245][T10369] Cannot create hsr debugfs directory [ 945.406463][T10293] veth1_vlan: entered promiscuous mode [ 945.857006][T10372] hsr_slave_0: entered promiscuous mode [ 945.858614][T10372] hsr_slave_1: entered promiscuous mode [ 945.859271][T10372] debugfs: 'hsr0' already exists in 'hsr' [ 945.859298][T10372] Cannot create hsr debugfs directory [ 946.074620][ T6386] bridge_slave_1: left allmulticast mode [ 946.074658][ T6386] bridge_slave_1: left promiscuous mode [ 946.074936][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.165202][ T6386] bridge_slave_0: left allmulticast mode [ 946.165230][ T6386] bridge_slave_0: left promiscuous mode [ 946.165438][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.237534][ T6386] bridge_slave_1: left allmulticast mode [ 946.237563][ T6386] bridge_slave_1: left promiscuous mode [ 946.237737][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.253750][ T61] Bluetooth: hci1: command tx timeout [ 946.305046][ T6386] bridge_slave_0: left allmulticast mode [ 946.305074][ T6386] bridge_slave_0: left promiscuous mode [ 946.305291][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.376681][ T6386] bridge_slave_1: left allmulticast mode [ 946.376705][ T6386] bridge_slave_1: left promiscuous mode [ 946.376852][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.465731][ T6386] bridge_slave_0: left allmulticast mode [ 946.465769][ T6386] bridge_slave_0: left promiscuous mode [ 946.466063][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.453916][ T61] Bluetooth: hci0: command tx timeout [ 948.333809][ T61] Bluetooth: hci1: command tx timeout [ 948.624658][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.684508][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.706945][ T6386] bond0 (unregistering): Released all slaves [ 950.494704][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.585201][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.606650][ T6386] bond0 (unregistering): Released all slaves [ 951.074352][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.154643][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.217841][ T6386] bond0 (unregistering): Released all slaves [ 951.480532][T10344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.888007][T10293] veth0_macvtap: entered promiscuous mode [ 952.152290][T10344] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.162638][T10293] veth1_macvtap: entered promiscuous mode [ 952.313802][ T6386] hsr_slave_0: left promiscuous mode [ 952.363993][ T6386] hsr_slave_1: left promiscuous mode [ 952.364831][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.395114][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.553950][ T6386] hsr_slave_0: left promiscuous mode [ 952.588881][ T6386] hsr_slave_1: left promiscuous mode [ 952.590084][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.628805][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.763912][ T6386] hsr_slave_0: left promiscuous mode [ 952.784059][ T6386] hsr_slave_1: left promiscuous mode [ 952.784934][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.846178][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.897994][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 954.205236][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 954.508594][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.512466][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.515337][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.529730][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.530771][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.659898][ T61] Bluetooth: hci4: command tx timeout [ 957.673045][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 957.995659][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 958.733784][ T61] Bluetooth: hci4: command tx timeout [ 960.814127][ T61] Bluetooth: hci4: command tx timeout [ 961.194742][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 961.364917][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 962.126879][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.129140][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.251033][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.251283][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.893656][ T61] Bluetooth: hci4: command tx timeout [ 963.669688][T10406] chnl_net:caif_netlink_parms(): no params data found [ 964.271611][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.271749][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.271950][T10406] bridge_slave_0: entered allmulticast mode [ 964.274817][T10406] bridge_slave_0: entered promiscuous mode [ 964.280924][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.281060][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.281281][T10406] bridge_slave_1: entered allmulticast mode [ 964.285234][T10406] bridge_slave_1: entered promiscuous mode [ 964.386982][T10344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.639989][T10406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.657929][T10406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.914534][T10406] team0: Port device team_slave_0 added [ 964.920995][T10406] team0: Port device team_slave_1 added [ 965.245003][T10406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.245025][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.245052][T10406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.252090][T10406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.252109][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.252140][T10406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.810367][T10406] hsr_slave_0: entered promiscuous mode [ 965.811302][T10406] hsr_slave_1: entered promiscuous mode [ 965.888655][T10369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 966.090016][T10369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 966.158172][T10369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 966.186759][T10344] veth0_vlan: entered promiscuous mode [ 966.332813][T10369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 966.481020][T10344] veth1_vlan: entered promiscuous mode [ 966.650491][T10372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 966.696838][T10372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 966.737081][T10372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 966.789642][T10372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 967.189177][T10344] veth0_macvtap: entered promiscuous mode [ 967.223900][T10344] veth1_macvtap: entered promiscuous mode [ 967.463119][T10344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.500386][T10344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.725569][ T89] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.729170][ T89] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.731962][ T89] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.735896][ T89] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.750481][T10369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.130048][T10369] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.237150][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.239282][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.258609][T10372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.339302][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.339494][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.341762][ T6386] bridge_slave_1: left allmulticast mode [ 968.341790][ T6386] bridge_slave_1: left promiscuous mode [ 968.342056][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.343239][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.343258][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.454969][ T6386] bridge_slave_0: left allmulticast mode [ 968.455006][ T6386] bridge_slave_0: left promiscuous mode [ 968.455282][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.496207][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.554434][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.576373][ T6386] bond0 (unregistering): Released all slaves [ 970.897819][T10372] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.901339][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.901365][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.113847][ T6386] hsr_slave_0: left promiscuous mode [ 971.133805][ T6386] hsr_slave_1: left promiscuous mode [ 971.134552][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.174671][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.263424][ T6386] veth1_macvtap: left promiscuous mode [ 971.267354][ T6386] veth0_macvtap: left promiscuous mode [ 971.267655][ T6386] veth1_vlan: left promiscuous mode [ 971.267857][ T6386] veth0_vlan: left promiscuous mode [ 973.614524][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 973.935015][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 976.919728][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.919903][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.005848][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.006134][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.067071][T10406] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 977.110230][T10406] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 978.191051][T10406] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 978.330054][T10406] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 978.688886][T10372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 978.996662][T10406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.339816][T10406] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.422905][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.423244][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.482123][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.482448][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.570483][T10369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.198736][T10372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.923529][T10489] Can't find ip_set type hash:net,po [ 986.230560][T10406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.174274][T10369] veth0_vlan: entered promiscuous mode [ 987.210554][T10369] veth1_vlan: entered promiscuous mode [ 987.832562][T10372] veth0_vlan: entered promiscuous mode [ 987.893401][T10372] veth1_vlan: entered promiscuous mode [ 988.102337][T10369] veth0_macvtap: entered promiscuous mode [ 988.183643][T10369] veth1_macvtap: entered promiscuous mode [ 988.566425][T10369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.634983][T10369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.664333][T10529] Bluetooth: MGMT ver 1.23 [ 989.644462][ T151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.683758][ T151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.690203][ T7672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.721888][ T7672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.765232][T10372] veth0_macvtap: entered promiscuous mode [ 989.914433][T10372] veth1_macvtap: entered promiscuous mode [ 990.098244][T10536] binder: 10533:10536 ioctl 400c620e 200000000380 returned -22 [ 990.406155][T10372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.451002][T10406] veth0_vlan: entered promiscuous mode [ 990.462954][T10406] veth1_vlan: entered promiscuous mode [ 990.476197][T10372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.785178][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.785203][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.683993][ T7672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.857009][ T7672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.876491][ T7672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.878636][ T7672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.445048][T10406] veth0_macvtap: entered promiscuous mode [ 992.462086][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.462110][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.551628][T10406] veth1_macvtap: entered promiscuous mode [ 993.782079][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.782099][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.969598][T10406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.774291][T10406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.236382][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.236409][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.291192][ T7044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.755030][ T89] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.785076][ T89] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.793691][ T89] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.479292][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.479709][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.113765][ T7044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.113801][ T7044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.090128][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1005.090214][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.144707][T10590] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1007.240662][T10612] netlink: 'syz.7.1042': attribute type 12 has an invalid length. [ 1013.740385][ T6002] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1015.188245][T10632] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1015.577411][T10632] cramfs: wrong magic [ 1019.802731][T10655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1019.822492][T10655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1019.825302][T10655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1019.828173][T10655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1019.829224][T10655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1021.934789][ T61] Bluetooth: hci5: command tx timeout [ 1024.029199][ T61] Bluetooth: hci5: command tx timeout [ 1025.541745][T10651] chnl_net:caif_netlink_parms(): no params data found [ 1026.790946][ T61] Bluetooth: hci5: command tx timeout [ 1029.008741][ T61] Bluetooth: hci5: command tx timeout [ 1030.310584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.670855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.175049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.416323][T10651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.416413][T10651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.416602][T10651] bridge_slave_0: entered allmulticast mode [ 1031.418357][T10651] bridge_slave_0: entered promiscuous mode [ 1031.461412][T10651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.463192][T10651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.493333][T10651] bridge_slave_1: entered allmulticast mode [ 1031.506983][T10651] bridge_slave_1: entered promiscuous mode [ 1032.000315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.406279][T10733] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1033.414562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.509889][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.742162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.729450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.870641][T10651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.136232][T10651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.591690][T10651] team0: Port device team_slave_0 added [ 1037.597849][T10651] team0: Port device team_slave_1 added [ 1038.075351][T10651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.075369][T10651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.075388][T10651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.076970][T10651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.076982][T10651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.076997][T10651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.320283][T10651] hsr_slave_0: entered promiscuous mode [ 1038.321271][T10651] hsr_slave_1: entered promiscuous mode [ 1038.321944][T10651] debugfs: 'hsr0' already exists in 'hsr' [ 1038.321962][T10651] Cannot create hsr debugfs directory [ 1038.830078][T10651] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1038.847914][T10651] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1038.887177][T10651] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1038.928958][T10651] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1039.059089][T10651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.082283][T10651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.097932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.098106][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.116404][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.116599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.381255][T10651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.668417][T10651] veth0_vlan: entered promiscuous mode [ 1039.678622][T10651] veth1_vlan: entered promiscuous mode [ 1039.711582][T10651] veth0_macvtap: entered promiscuous mode [ 1039.720716][T10651] veth1_macvtap: entered promiscuous mode [ 1039.745373][T10651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.764273][T10651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.772329][ T6482] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.772559][ T6482] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.772593][ T6482] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.772622][ T6482] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.080126][ T6482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.080152][ T6482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.131723][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.131749][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.046326][T10788] binder: 10767:10788 ioctl 9000aea4 200000000500 returned -22 [ 1049.312656][T10655] Bluetooth: hci5: command 0x0405 tx timeout [ 1052.495742][T10655] Bluetooth: hci3: command 0x0406 tx timeout [ 1059.245787][ T37] audit: type=1107 audit(1762128445.985:194): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1060.492263][ T37] audit: type=1326 audit(1762128447.235:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.492679][ T37] audit: type=1326 audit(1762128447.235:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.492967][ T37] audit: type=1326 audit(1762128447.235:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.493332][ T37] audit: type=1326 audit(1762128447.235:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.494139][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1060.605524][ T37] audit: type=1326 audit(1762128447.355:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.624717][ T37] audit: type=1326 audit(1762128447.375:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.624777][ T37] audit: type=1326 audit(1762128447.375:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.631778][ T37] audit: type=1326 audit(1762128447.375:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.631831][ T37] audit: type=1326 audit(1762128447.375:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.9.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43985efc9 code=0x7ffc0000 [ 1060.633782][ T31] usb 8-1: device descriptor read/64, error -71 [ 1061.013915][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1061.415290][ T31] usb 8-1: device descriptor read/64, error -71 [ 1061.687298][ T31] usb usb8-port1: attempt power cycle [ 1062.500438][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 1064.437709][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1064.470916][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1064.491279][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1064.493271][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1064.511057][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1064.977412][T10871] evm: overlay not supported [ 1066.524409][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1066.524496][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.653716][ T61] Bluetooth: hci0: command tx timeout [ 1068.370255][T10894] fuse: Unknown parameter 'u0xffffffffffffffff0000000000000000000700000000000000000000' [ 1069.463576][ T61] Bluetooth: hci0: command tx timeout [ 1071.534044][ T61] Bluetooth: hci0: command tx timeout [ 1073.618639][ T61] Bluetooth: hci0: command tx timeout [ 1074.977877][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1074.977899][ T37] audit: type=1400 audit(1762128461.725:209): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=10918 comm="syz.8.1110" daddr=::ffff:172.20.20.187 [ 1077.158786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.326209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.638679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.963801][T10932] overlayfs: missing 'lowerdir' [ 1077.965602][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.128549][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.443546][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1078.496577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.630679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.035268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.877939][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.135415][T10839] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.177719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.464235][T10872] chnl_net:caif_netlink_parms(): no params data found [ 1081.543209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.844733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.308618][T10839] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.397537][T10959] loop7: detected capacity change from 0 to 16384 [ 1085.040041][T10965] loop7: detected capacity change from 16384 to 0 [ 1085.872366][T10839] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.852109][ T6011] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1087.169450][ T6011] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1087.169487][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.169509][ T6011] usb 8-1: Product: syz [ 1087.169525][ T6011] usb 8-1: Manufacturer: syz [ 1087.169541][ T6011] usb 8-1: SerialNumber: syz [ 1087.222496][ T6011] usb 8-1: config 0 descriptor?? [ 1087.443325][ T6011] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1089.341385][T10839] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.748063][ T6011] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1089.798403][ T6011] usb 8-1: USB disconnect, device number 5 [ 1091.994659][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.995521][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.348131][T10872] bridge_slave_0: entered allmulticast mode [ 1092.402157][T10872] bridge_slave_0: entered promiscuous mode [ 1092.440395][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.440602][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.440893][T10872] bridge_slave_1: entered allmulticast mode [ 1092.467635][T10872] bridge_slave_1: entered promiscuous mode [ 1092.534617][T11004] Bluetooth: MGMT ver 1.23 [ 1098.351826][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1133'. [ 1098.598569][T11031] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1099.087661][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.916238][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.956442][T10872] team0: Port device team_slave_0 added [ 1104.156268][T10872] team0: Port device team_slave_1 added [ 1104.295231][T11068] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1104.297240][T11068] cramfs: wrong magic [ 1107.164017][T10839] bridge_slave_1: left allmulticast mode [ 1107.164056][T10839] bridge_slave_1: left promiscuous mode [ 1107.164354][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.015961][T10839] bridge_slave_0: left allmulticast mode [ 1108.016012][T10839] bridge_slave_0: left promiscuous mode [ 1108.016312][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.766133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.134397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.306584][T11158] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1165'. [ 1120.395198][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.559272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.633172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.703763][T11159] usb usb5: usbfs: process 11159 (syz.8.1165) did not claim interface 0 before use [ 1121.439021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.540485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.581817][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1121.628598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.644048][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1121.646344][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1121.648329][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1121.649125][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.885134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.954674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.052773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.124254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.191502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.261154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.442969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.527856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.612889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.786406][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.009799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.259289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.421102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.478854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.605207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.696029][ T61] Bluetooth: hci1: command tx timeout [ 1123.754857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.831030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.917462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.079976][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.175067][T10839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.208616][T11176] MTD: Couldn't look up '/dev/nullb0': -15 [ 1124.208724][T11176] /dev/nullb0: Can't lookup blockdev [ 1124.364357][T10839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.391084][T10839] bond0 (unregistering): Released all slaves [ 1124.586907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.764344][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.764366][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.764398][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.259824][ T61] Bluetooth: hci1: command tx timeout [ 1127.062259][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.062356][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.334008][T10655] Bluetooth: hci1: command tx timeout [ 1128.963671][ T6531] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1129.443689][ T6531] usb 8-1: device descriptor read/64, error -71 [ 1129.720168][ T6531] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1130.184634][ T6531] usb 8-1: device descriptor read/64, error -71 [ 1130.205343][T11188] mkiss: ax0: crc mode is auto. [ 1130.438790][ T6531] usb usb8-port1: attempt power cycle [ 1131.184634][ T61] Bluetooth: hci1: command tx timeout [ 1133.215164][ T61] Bluetooth: hci1: command 0x0405 tx timeout [ 1133.323759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.969059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.239282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.659575][T11217] ceph: No mds server is up or the cluster is laggy [ 1135.661770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.694583][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1135.695937][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1136.210659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.213163][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1136.230581][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1136.316325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1137.424351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.093612][T10839] hsr_slave_0: left promiscuous mode [ 1142.490862][T10839] hsr_slave_1: left promiscuous mode [ 1142.492033][T10839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.492063][T10839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.640350][T10839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.640394][T10839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.753556][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1142.927720][T10839] veth1_macvtap: left promiscuous mode [ 1142.927848][T10839] veth0_macvtap: left promiscuous mode [ 1142.928180][T10839] veth1_vlan: left promiscuous mode [ 1142.928411][T10839] veth0_vlan: left promiscuous mode [ 1142.931399][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.931431][ T9] usb 10-1: config 0 has no interfaces? [ 1142.931471][ T9] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1142.931499][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.019469][ T9] usb 10-1: config 0 descriptor?? [ 1143.063593][ T5844] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1143.213567][ T5844] usb 8-1: Using ep0 maxpacket: 8 [ 1143.216434][ T5844] usb 8-1: config 0 has an invalid interface number: 145 but max is 0 [ 1143.216469][ T5844] usb 8-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1143.216552][ T5844] usb 8-1: config 0 has no interface number 0 [ 1143.216629][ T5844] usb 8-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1143.235840][ T5844] usb 8-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 1143.235878][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.235901][ T5844] usb 8-1: Product: syz [ 1143.235917][ T5844] usb 8-1: Manufacturer: syz [ 1143.235934][ T5844] usb 8-1: SerialNumber: syz [ 1143.278240][ T5844] usb 8-1: config 0 descriptor?? [ 1143.318452][T11245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.320334][T11245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.349054][T11245] tmpfs: Bad value for 'mpol' [ 1145.666783][T10655] Bluetooth: hci5: command 0x0405 tx timeout [ 1147.273517][ T5844] usb 8-1: bad CDC descriptors [ 1147.414330][ T5844] usb 8-1: USB disconnect, device number 9 [ 1148.368482][ T31] usb 10-1: USB disconnect, device number 2 [ 1156.620097][T11319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.116985][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1157.137172][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1157.205915][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1157.215907][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1157.253432][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1157.264330][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1157.291058][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1157.294952][T11323] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1157.295007][T11323] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1157.327873][ T37] audit: type=1400 audit(1762128543.705:210): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=11321 comm="syz.8.1202" dest=2 [ 1157.668321][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 1157.904203][T11325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1157.904218][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 1157.904296][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 1157.904317][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 1159.103583][ T6011] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1159.292666][ T6011] usb 9-1: device descriptor read/64, error -71 [ 1159.533985][ T6011] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1159.670191][ T6011] usb 9-1: device descriptor read/64, error -71 [ 1159.778935][ T6011] usb usb9-port1: attempt power cycle [ 1161.457644][T11350] No control pipe specified [ 1162.801780][T11351] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1210'. [ 1171.545475][T11390] No control pipe specified [ 1173.657750][T11404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.983169][T10839] team0 (unregistering): Port device team_slave_1 removed [ 1175.291725][T10839] team0 (unregistering): Port device team_slave_0 removed [ 1175.439688][T11414] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1175.440073][T11414] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1176.603245][ T61] Bluetooth: hci1: command 0x0405 tx timeout [ 1179.222327][T10655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.244376][T10655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.246138][T10655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.247021][T10655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.247934][T10655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.847111][T11434] program syz.7.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1181.445853][T10655] Bluetooth: hci0: command tx timeout [ 1183.468984][T10655] Bluetooth: hci0: command tx timeout [ 1186.219084][ T61] Bluetooth: hci0: command tx timeout [ 1187.054014][T11450] No control pipe specified [ 1188.135402][T11454] binder: BINDER_SET_CONTEXT_MGR already set [ 1188.135425][T11454] binder: 11451:11454 ioctl 4018620d 200000000040 returned -16 [ 1188.262705][ T61] Bluetooth: hci0: command tx timeout [ 1188.343036][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.343125][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.444261][T11466] syz.4.1236 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1189.493550][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1189.729222][ T9] usb 10-1: device descriptor read/64, error -71 [ 1189.995670][ T37] audit: type=1326 audit(1762128576.725:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1189.995737][ T37] audit: type=1326 audit(1762128576.725:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1189.995789][ T37] audit: type=1326 audit(1762128576.735:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1189.997078][ T37] audit: type=1326 audit(1762128576.745:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1189.997134][ T37] audit: type=1326 audit(1762128576.745:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1189.997186][ T37] audit: type=1326 audit(1762128576.745:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1190.003473][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1190.024690][ T37] audit: type=1326 audit(1762128576.775:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1190.024753][ T37] audit: type=1326 audit(1762128576.775:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1190.026466][ T37] audit: type=1326 audit(1762128576.775:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1190.026522][ T37] audit: type=1326 audit(1762128576.775:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11473 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6156efc9 code=0x7ffc0000 [ 1190.343527][ T9] usb 10-1: device descriptor read/64, error -71 [ 1190.459573][ T9] usb usb10-port1: attempt power cycle [ 1190.465032][T11423] chnl_net:caif_netlink_parms(): no params data found [ 1190.803586][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1190.824606][ T9] usb 10-1: device descriptor read/8, error -71 [ 1192.243505][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1193.983481][ T9] usb 10-1: device descriptor read/8, error -71 [ 1194.106487][T11494] autofs: Bad value for 'fd' [ 1194.237786][ T9] usb usb10-port1: unable to enumerate USB device [ 1196.312536][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.312639][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.312840][T11423] bridge_slave_0: entered allmulticast mode [ 1196.316006][T11423] bridge_slave_0: entered promiscuous mode [ 1196.321477][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.321616][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.321842][T11423] bridge_slave_1: entered allmulticast mode [ 1196.331472][T11423] bridge_slave_1: entered promiscuous mode [ 1198.035016][T11519] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1248'. [ 1199.379424][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.537026][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.537314][T10839] bridge_slave_1: left allmulticast mode [ 1199.537330][T10839] bridge_slave_1: left promiscuous mode [ 1199.537522][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.245557][T10839] bridge_slave_0: left allmulticast mode [ 1200.245595][T10839] bridge_slave_0: left promiscuous mode [ 1200.245910][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.115583][T10839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.208070][T11549] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1203.233819][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1203.314385][T10839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.363762][ T9] usb 9-1: device descriptor read/64, error -71 [ 1203.461399][T10839] bond0 (unregistering): Released all slaves [ 1203.703434][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1203.971700][ T9] usb 9-1: device descriptor read/64, error -71 [ 1204.092897][ T9] usb usb9-port1: attempt power cycle [ 1205.397010][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1205.447425][ T9] usb 9-1: device descriptor read/8, error -71 [ 1207.066299][T11571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.095088][T11423] team0: Port device team_slave_0 added [ 1207.101985][T10839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.063522][T10655] Bluetooth: hci0: command 0x0405 tx timeout [ 1209.166485][T10839] team0 (unregistering): Port device team_slave_1 removed [ 1212.774335][T10839] team0 (unregistering): Port device team_slave_0 removed [ 1217.295618][T11423] team0: Port device team_slave_1 added [ 1220.687799][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.687819][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.687845][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.694122][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.694185][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.694257][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.317832][T11630] overlayfs: failed to clone upperpath [ 1224.149327][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 1224.149404][ T37] audit: type=1107 audit(1762128609.115:247): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1226.090769][T11423] hsr_slave_0: entered promiscuous mode [ 1226.092741][T11423] hsr_slave_1: entered promiscuous mode [ 1226.115998][T11423] debugfs: 'hsr0' already exists in 'hsr' [ 1226.116029][T11423] Cannot create hsr debugfs directory [ 1235.908531][ C0] ------------[ cut here ]------------ [ 1235.908551][ C0] refcount_t: addition on 0; use-after-free. [ 1235.909108][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1235.909270][ C0] Modules linked in: [ 1235.909293][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1235.909318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1235.909331][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1235.909357][ C0] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7 [ 1235.909376][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 1235.909396][ C0] RAX: 469c2c5a2e4acb00 RBX: 0000000000000002 RCX: ffff88801b2dda00 [ 1235.909413][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1235.909427][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1235.909441][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 1235.909457][ C0] R13: ffff88804bab6160 R14: ffff88804bab5d80 R15: dffffc0000000000 [ 1235.909474][ C0] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 1235.909491][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1235.909506][ C0] CR2: 00007fe9640c2a99 CR3: 000000003c9d6000 CR4: 00000000003526f0 [ 1235.909527][ C0] Call Trace: [ 1235.909537][ C0] [ 1235.909549][ C0] mptcp_schedule_work+0x164/0x1a0 [ 1235.909679][ C0] mptcp_tout_timer+0x21/0xa0 [ 1235.909705][ C0] call_timer_fn+0x17e/0x5f0 [ 1235.909803][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1235.909825][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1235.909849][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1235.909883][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1235.909971][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.910020][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1235.910050][ C0] __run_timer_base+0x648/0x970 [ 1235.910094][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1235.910144][ C0] run_timer_softirq+0xb7/0x180 [ 1235.910172][ C0] handle_softirqs+0x22f/0x710 [ 1235.910235][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1235.910277][ C0] run_ktimerd+0xcf/0x190 [ 1235.910309][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1235.910334][ C0] ? schedule+0x91/0x360 [ 1235.910369][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1235.910403][ C0] smpboot_thread_fn+0x542/0xa60 [ 1235.910433][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1235.910471][ C0] kthread+0x711/0x8a0 [ 1235.910505][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1235.910532][ C0] ? __pfx_kthread+0x10/0x10 [ 1235.910559][ C0] ? rt_spin_unlock+0x150/0x200 [ 1235.910588][ C0] ? rt_spin_unlock+0x161/0x200 [ 1235.910608][ C0] ? __pfx_kthread+0x10/0x10 [ 1235.910640][ C0] ret_from_fork+0x4bc/0x870 [ 1235.910693][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.910726][ C0] ? __switch_to_asm+0x39/0x70 [ 1235.910786][ C0] ? __switch_to_asm+0x33/0x70 [ 1235.910807][ C0] ? __pfx_kthread+0x10/0x10 [ 1235.910840][ C0] ret_from_fork_asm+0x1a/0x30 [ 1235.910884][ C0] [ 1235.910895][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1235.910914][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1235.910937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1235.910950][ C0] Call Trace: [ 1235.910959][ C0] [ 1235.910969][ C0] dump_stack_lvl+0x99/0x250 [ 1235.911003][ C0] ? __asan_memcpy+0x40/0x70 [ 1235.911060][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.911094][ C0] ? __pfx__printk+0x10/0x10 [ 1235.911140][ C0] vpanic+0x237/0x6d0 [ 1235.911164][ C0] ? __pfx_vpanic+0x10/0x10 [ 1235.911201][ C0] panic+0xb9/0xc0 [ 1235.911220][ C0] ? __pfx_panic+0x10/0x10 [ 1235.911259][ C0] __warn+0x31b/0x4b0 [ 1235.911277][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1235.911306][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1235.911330][ C0] report_bug+0x2be/0x4f0 [ 1235.911419][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1235.911491][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1235.911545][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 1235.911555][ C0] handle_bug+0x84/0x160 [ 1235.911619][ C0] exc_invalid_op+0x1a/0x50 [ 1235.911633][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1235.911661][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1235.911672][ C0] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7 [ 1235.911681][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 1235.911691][ C0] RAX: 469c2c5a2e4acb00 RBX: 0000000000000002 RCX: ffff88801b2dda00 [ 1235.911699][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1235.911705][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1235.911710][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 1235.911717][ C0] R13: ffff88804bab6160 R14: ffff88804bab5d80 R15: dffffc0000000000 [ 1235.911734][ C0] mptcp_schedule_work+0x164/0x1a0 [ 1235.911747][ C0] mptcp_tout_timer+0x21/0xa0 [ 1235.911761][ C0] call_timer_fn+0x17e/0x5f0 [ 1235.911776][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1235.911787][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1235.911799][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1235.911815][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1235.911828][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.911840][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1235.911852][ C0] __run_timer_base+0x648/0x970 [ 1235.911872][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1235.911891][ C0] run_timer_softirq+0xb7/0x180 [ 1235.911903][ C0] handle_softirqs+0x22f/0x710 [ 1235.911925][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1235.911942][ C0] run_ktimerd+0xcf/0x190 [ 1235.911955][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1235.911966][ C0] ? schedule+0x91/0x360 [ 1235.911982][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1235.911995][ C0] smpboot_thread_fn+0x542/0xa60 [ 1235.912007][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1235.912023][ C0] kthread+0x711/0x8a0 [ 1235.912039][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1235.912051][ C0] ? __pfx_kthread+0x10/0x10 [ 1235.912064][ C0] ? rt_spin_unlock+0x150/0x200 [ 1235.912076][ C0] ? rt_spin_unlock+0x161/0x200 [ 1235.912085][ C0] ? __pfx_kthread+0x10/0x10 [ 1235.912099][ C0] ret_from_fork+0x4bc/0x870 [ 1235.912112][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.912127][ C0] ? __switch_to_asm+0x39/0x70 [ 1235.912137][ C0] ? __switch_to_asm+0x33/0x70 [ 1235.912146][ C0] ? __pfx_kthread+0x10/0x10 [ 1235.912160][ C0] ret_from_fork_asm+0x1a/0x30 [ 1235.912184][ C0] [ 1235.912726][ C0] Kernel Offset: disabled