last executing test programs: 41.184114028s ago: executing program 4 (id=217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') r2 = socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x52aa, 0x400, 0x1, 0x8000087}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) getdents(0xffffffffffffffff, &(0x7f0000000a40)=""/178, 0x1a) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x94, &(0x7f0000000400)={0x2, 0x7fff, 0x13}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) socket$inet6(0xa, 0x2, 0x0) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 34.851586089s ago: executing program 4 (id=228): syz_io_uring_setup(0x5c2, &(0x7f0000000000)={0x0, 0x0, 0x22040, 0x4, 0xd6}, &(0x7f0000000300), &(0x7f0000000580)) eventfd2(0x8, 0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(0xffffffffffffffff, 0x51a9497) 26.070519545s ago: executing program 4 (id=237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x21f) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x74}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x0, 0x2, 0xa}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000dc0)={0x0, 0x18, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x401, 0x0, &(0x7f0000048000), 0x21000000) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000000c0)=0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x18, 0x3d, 0x701, 0x10, 0x0, {0x3}, [@nested={0x4, 0x140}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x880) 23.282292892s ago: executing program 2 (id=240): bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000070000000400000001", @ANYBLOB="00000094051e68a84aa581000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, 0x0, &(0x7f0000000a40)=@tcp6}, 0x20) shutdown(0xffffffffffffffff, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x1000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 23.036641171s ago: executing program 4 (id=241): socket(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x814) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 21.30104315s ago: executing program 3 (id=243): socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r2 = timerfd_create(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket(0x2b, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x250, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x220, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0x0, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x1ac, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x252}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xab}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x16}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8047}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="00000004c486fc025c6302b80000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$netlink(0x10, 0x3, 0x0) 19.763300216s ago: executing program 4 (id=245): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2a, 0xf0]) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 19.068515312s ago: executing program 2 (id=246): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r6, 0xffffffffffffffff, 0x0) 17.215245849s ago: executing program 2 (id=247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x14) setrlimit(0xb, &(0x7f00000001c0)={0xfffffffffffffff8, 0x17168abc}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 16.522452362s ago: executing program 1 (id=248): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 15.572394726s ago: executing program 2 (id=249): socket$l2tp6(0xa, 0x2, 0x73) getresgid(0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, 0x0, &(0x7f0000002180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) semget$private(0x0, 0x0, 0x40) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x5, 0xfffffffffffffffe, &(0x7f0000000300)) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r11, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.080977142s ago: executing program 1 (id=250): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) 13.160776736s ago: executing program 3 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xff, @mcast2, 0xa302}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r4, &(0x7f00000016c0)={0x8, {"d0eb0fa02914e1ba3cabeeb3ac3d3c2395a6f2fe5057ad16eb6a1a900b3e2650cc25e5ddc54b2581e014d96f465519376be8d479e360685ebbe6866227915bbf1d6daff9c739d84fbeaf29a7563338c3f705ccfb80aaf12799054dca607a3f1dec3d83d7012709f2e6105a8f9b62aff5b172444261efb3edae64cb1560efb80cca8ea56a854263afdddae2b21a87021f0c3760694172e5d97f2248f37553104ea934a3ef711da4be7b6a481233cf620d7b6d588a7f86c2ae3bb9512b5069c9340b36001d0aef4a6d360c4422b07e32b5f7c8d627d83d17a0a5d37d8654fb1e409e42a2194a587172697b2d973ce30d5079b938f02e0b6e6657bd527c05593f1a3a86dcd383dd474472e5b3596b8536987bdc68d9a694a3d8ddfbc9590d49624ada40ed71b93f66ed96a35b5d453c99f456994fb02397f1374fa6d6e1b52084aace6214fd71e6c629bf3684c996ee23f354fb131857538cd2d06f963d2476feb5909a3ecc6287f0e3ec560dc89ddddc8cebdd14d6c938756eff1d20d47c96c61fe242962288be4424f4c3ec91e1f6380c9af25ccc63e8ae57c99010ea622d24cea944e6a81553d3eb46383b54763fb79c17ac2c9c0b2f915f53dc0578d734632b46139b35eaf651d0b519c18137bc012bde232b43ac41084b498d2a85fd2c6cc7c0167f467cff253a1d119f6c63be9369901adcb0bd6806df76427064bec86c577b10029e46c47d79aec339c84bf2255a0f3215d34a26e757da988724b366c72b09d74c80e8ee4057c5f257f30826f301f4187bea919c9ecd406f1b5c1b2aaea0a717799a305b2739ab49fdde12cb756adb53fff52367915b07fd0a0af40369f4df649b3c2c390ec87dbe23437a609a935c82988e24109ddc4e06e61907c42da8b2d0bbd921efba5682d88d672996cd3208b7bb7982f01dff0a7b2614233cb5567a49eb23063c386c07f237671e9bf01cd376406652077b6cf193029cceb55da3da9a842ec414217770ad6ba1db872a159d8b56fc249ee30034802f2171f0c9cbb9848eb18510f0e5252b40450d004c78ff2080c1b862d9a55c660415bf740d3d9d340a4ece6227814abf55a43421d5e8c4d49b82240972b832ffef89311426319110501fc395931e641ebb37a3e61cbef4e0fe25bd008ee62b4378acee266691449631c542020f07486e065840287a2859e007a8a59ec27ff6fdc5033852e5aff0b72783d26bac0441bb57768f2b9ce4d1483d41d1d011ecc44717308cddaa74d449f351ce8afd347fa9642c55a0b884420280df71122709fc59ba4287ad409c941cb42d60481adc368f44bc0246300a518d614377930e08dc9d2f5cdd1c5080b61143a2ed43ea67c3ff5ca079aa424881ee704e66398220959182e838a1a70c5734addebb69c3d7c321121018aafd63be1650f19a3368ba763616a27231cef5bde5c995158c4e1fde98bb7b54761024eacad0157d5fc27a5d50372dd9974d1bfb6009857876d928d1f3812745323f0554bc54fd61cbe0ddac8fa4b9640faddcd574267b24e33aacf7caafdc6a8190f7ac2046ee2e48e1854ab9d2c520ad7ff6395b7e4d6c231871432fc510f55dacf5e2058a71a9bac3869cc8df0add5657a6bb1ec826301228d7de1c3a205680de9e8c503484ee6c583ea39b067f560440609bbc9cb13a994cd253f938cc0efc181bef9412d795f2a421d9409939bf6c3a106fedca8e7c855b8cc7ffe1aabc78b0ac034fa067b38b1f386daa186364a753f5183cc7923d209005f922f9ac7e06d3afc412ad30ced868ce52e935354cce0077acaa39572dd2a06fadad9d343d624da26bfd4b1c9d90f83fb3e0348931b119eabe6ef994299fd73228c9f213b403aceba6525d2d245b770da90015f3180ffef989e36dda0d52b10609ecd4b1b9b088acfd5535dedefd899713fce06f5077bf2e2bb66f145056c92c449f5e07e7f69544cad4dda357dfdb4b7032b9f7241b8f3d0632254d063cd927a5580082f0f9154b86ba438626bff8531a56c82847bd112335be157686fd74a0acaaf447a7d12c9a40a364424ffd1843cf18fc701ef4ac09d31717e54241f6e5dd31b728645b500c58ac2f9b5e8e7120d3df2f6e8767ec85f6f7a16ff2b1bf9fe2d2d66d041d2c96f7991b38a5642a8c5eb465805abea268cc78400d78e8b49e5d97a6387c7dd852040eedb1ea3cdb7c0ddd0a7b518ee304b4aea0395f87f7bc3f0f81ae3473f99bd82fbc60ceacc06cc4abb12ab55c10031f54301896e7333a2fbc112e9d1572bd0fdad4070d760c273c1f8f46e287a64591c7eb4a6b2c1d672fce7834e5619ba9f9fccbec7413d1277c7ccc379f351191a4d35a561a3008ad3ff25aff2a6420e4f95b2f8619e71a86b74a1164919dd6ebc0ac36676a616bf01eca3232aad8b5be447bac44be6883be5a7f7015f427c765f5bef1d165686e5c739529f1cdcbe98e0f5e88c0a005c893aebc3b957fbb010c2a20d25fad87654f3c0dff86ee660579d52a7c8fdb4aef633be9512d72457dc852944b56d1f2367d869781737c72da92fdde50d5ff1d0a8edff6d065a4b78d4740cf9d6a3646c8a37cef87c6f3013be653541553c47ec065665773e555886912d7a0c2fa815eb1b98fbd572f30880cd416cd84fff1ffb5852465f25efc9e8d1f67493102daaee5bad5da53cda930291142dde388db636cd0486358a9e5ff4c5a17f290f58b4b45f9f06e90813a4b20b8e301007eb1913eb1ae54e5720e295daac767353dd8caed23738bfbcb15194ad441f68b1465f3f87eedfe3982aa6906e175b390fd9b8895c85eb887580b8a6b913ad36248b041b3df8f2c8c4e0d5d08f0c134ab8ffd792d6debae3f2b8f940787c76da7f91fa5da80a50435464300893b37eba1038d50eb9c0e2f30f9ff9edfbd6bb6d79a54ea3606968207a067287cada914c39317f602e7bf971e35c1f5c3e6f46f6afbf8a8669b82ab5d0f2ee08732def4c30704841da3373dc57702811e60acf3d8675eabea106ef43eb1eed3f1d84d57dbfce8a69e131cca9d6edbd5f1922e55fa1b3eb62bf397df55a55c8c34ddc0e2174210d220abdfc9118c1ddf9a2589d4525ea14cb80aa5a19945de4a4f400c141a9766e4cc6d6ebf83838781e66c849b6e43b4e5f1294302d2de52bb5fdc9b2d41f641825a284c65321fe4461200dd41a004106cb012452bef268d1c1b106494297c78b8eff2d2e92cb6b22e41024bf1bbc5761700e5b7fd13d1c96680c834fed5115a8a96f84bd737df1ef9bfceb6e430606c100f451c7e442520c604d57c5c873d03c347aa9bbf74d56b51b78c0b32d56398df89b1a4fb2c9df1c201ed07c7cf17835ef7a2a882324b7534595d5c5a849f52f4e7598d896a37bd7f4970f5f749aa5a942971a7ef67ba24c965eeb69d2ddb1af2347d09ed304225691d3161cbbf30620659a7e21fa649a697738832d636dcc1d138860353ae671586f272c54cced3bc520547c8fcd1c9ceea1f660e90130b961c6af0d2601d7f2215a14db5b69d48f19a9fc70497cf7b0e7ccda1ba7eb51c5aad52a38ca50e181e30a12af36d362b505666a181d5ad2a72aed4ff126512db0db76a9d47b85b3adf0fd90869802e938f643b7370b3c829eb143ac1bebf133a05530983f6845ae24825da348147e2cbe801d96dfea3d64faf8c583ea9dfa5387eb6a3d6d7270d8232744278c0b7c2d3ddc64d745fe326bb32f94ac95baec0eebd5ddf9da7ddc9764cff6f9049fe5d11ef3d91f588bd8269d69d3db527cc929e95909bbff4ae8fcfe3a1760e037a3044d11ddaf4152822f138e94f11a1cbc7b8d8c8a1dc53402ed4292eca517cf6de3b60de756fc3c8cbb0e933e69f659eb42c7fa763743c06adbf9dc0c36cbde98dfcb2342f87bb70cff95413a7cfa3afd2dcfe1d8d36a6593c2b08435a8d84d1c1c6ef7a58326c9e322bf8b9552bfe45ccd87709610b431a1b8b74c1efe1132cfd79c0d924d85dca3be3bbc57c5da3d7c3e379818d7e7543911be44af0d6efffb554bd607b56e828a33e285b26b875214bf23799131e99edc9646ccb9cbdd3d25b1ef06da975bf03debfb173768d697c7d38eaddab057173b4f021b3c17ec730c01b7954552a75debde86f0bcd2575795ec922fe83ad74cde2a330db72ba12ae099661dc3a367e6983fb219b2d8241d8ddc9245ace7eef42c614b43ad756d971e34a17d06b4a5f858ba408838b27ac0196302f483702f82e00883032a4dc97af480ec1a9180a63a4c1d28802ae7909eac4a7eee6b23974ecb3f4637145089a62e034e258c470554ca3e2c37bcb8d64baae829827005b851b0547b1eb2b1a77cd19892a7d502a0714e4e9769328fd71273894952acaf7397b4a5ef85c1331144120b57d1848921545bea098b2ecaa55a51b10010f0307fbf641c26fc9851926ac4d9c499e3a94f446173c1341caaf23e6ae69d55b0bf12d1a3dbdcf8a7be00e980f0d9d26501cb9399c9f045c747f3eda6bc66e82d74cafd0c0060e4a404f6c574546cbfc6c81514b1d923088191c99b7e7874c04b2125d8bebb56f6313ed3a03abba8f72cf2d6216fdf90dff0332059a60a1a7f66e122728fbd8a37714d4250a12866dc03ec0c07b98d6256ee8cba82a4dde9f5d680cb9f373a573ff11b2f3392f96c4c9dbc86197ddebdeb383e7d4611bb9fc843517b08320cd118ecd488342f50e610d97c42450cbee7b988a90b82bfa99308df28c30b5d481a93a00e5e6fe23eac9c4b1866808759e72a02bb6e1e61d1fd20a4eefeb5171c7e4f240707c166b0b8a5a4270a62d21397bc4f4845ff284c5a5aba97dae0fd28cfd0222dedb205f6e43f93469bc69fdf9834be81fb7d27b898e2ba4c6604a5581eaf533647ff42e2826ead8bf75520fe9613402b670b8497de0de1a056f1bb0895dcd46edeff4d5d8f5f67a71153c4b9d28e6f17d69b83c96973b7740a017071facce7ecb63c6b5d9f5fd21e3f0e5116ae3719d894e83d33584f06eb28da31ec8b19828fa7ab1c0afbada93e7753cee9540a082528ad10353f09248cb0a28ac9225b50a5d59b7ac338a68ce949c3b2829509cb579491a722557990f90f324d9fc211f7421400139bb4249985630f2875d8358b409d0aba612d17cfe26721bfdd810b8a8c619c21a0078977aa43b8f343542b080a42b2a9903328bb6c88bab74d324a6df6c51797baf43f6d5b09293f8492026ff940614b5f4980ef16de406c8f656977dfc61d887f8a1d7bdb90c1eebed33d6a088099b0430382af1d3b5b6157eb3e74e2862be55931b1a730e4b8757c3cb277c69d39d5eab3301e7a88c52f91a27a4c6001679c5d9bce858317a3cb70c7c214dbca5ce8c245ccc49d0b4b1eb1fb423c10ae094ca9f31f172bffeaa354f51cbb4c1b261390cb46decf17361f25ef8548ebd56368b93c6bfc0abe10821b99129e70ff7ba595329f87af5bd9814cca06571da845ca0e0e69559cf0b8bfbff6a09eb1c4b8edfd919aa565149a498fb5d950aa84300416adcac445fbe5007db8b949f7d28357b1784adae2a285c5c45c310f804e62139fa10ca50db18579af06caf3798974b12ac3d358306666714a283200ce6922afe7eb94a94597559a53a96824e5fe27ff75a03f0c6a90b7de6d0df74471c9f74a68f8b7b9a9701d7f09042a86bad1ae783fb3fc498211d1e1355c5ee06578a320ba1a4686aa4118a4c7d6610c37ed29202540461aeb87bcfbda101af85cdb1d4f7b30e358cbe23c39b4d54b7da31c32a11aa7d4cf6e1daae34921c97b8a4", 0x1000}}, 0x1006) pwritev2(r4, &(0x7f00000002c0)=[{&(0x7f0000000180)="8c", 0x1}], 0x1, 0x8, 0x5, 0x12) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000440)={0xffffffff, {{0xa, 0x4e24, 0x4ef5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa5}}, {{0xa, 0x4e23, 0x71b, @loopback, 0x401}}}, 0x108) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 11.739051786s ago: executing program 3 (id=252): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) r4 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 11.209200801s ago: executing program 0 (id=254): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) 10.445778883s ago: executing program 4 (id=255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xa1, 0x1, 0xfffffff7, 0x0, 0xfe}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000240)=0x1ff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000700)=@buf={0x69, &(0x7f0000000680)="42222e3d8cbec2cca1b61c29aa470a4389f0e0c74d257cf4a56f41a82a4c2986bb3081994aa16243edd288dcc1e6f19380bb3874681285a4f76d3257e22d48bcbead91fd5ac1f92b9fc9b0bbe60c08b7d9ecb969b423c8b17154ab689c9b007926c64dd5b33cdfb096"}) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.451373286s ago: executing program 1 (id=256): r0 = syz_io_uring_setup(0x71fd, 0x0, 0x0, 0x0) io_uring_setup(0x51d0, &(0x7f00000004c0)={0x0, 0x8dce, 0x10, 0xfffffffd, 0xf2, 0x0, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 8.324538318s ago: executing program 1 (id=257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) 8.001172337s ago: executing program 2 (id=258): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x7, 0x0, 0x0, 0x1, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 7.426876049s ago: executing program 1 (id=259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x14) setrlimit(0xb, &(0x7f00000001c0)={0xfffffffffffffff8, 0x17168abc}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 7.335286442s ago: executing program 3 (id=260): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 7.193194192s ago: executing program 0 (id=261): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) 6.05507372s ago: executing program 1 (id=262): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000011c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f000000a3c0)={0x2020}, 0x1266) getdents64(r3, &(0x7f0000001f00)=""/4093, 0xffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) 5.755416274s ago: executing program 0 (id=263): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x401) 4.873285301s ago: executing program 3 (id=264): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) 3.624828613s ago: executing program 3 (id=265): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x2a, 0xf0]) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.489139989s ago: executing program 0 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) 2.11329592s ago: executing program 0 (id=267): r0 = syz_io_uring_setup(0x71fd, 0x0, 0x0, 0x0) io_uring_setup(0x51d0, &(0x7f00000004c0)={0x0, 0x8dce, 0x10, 0xfffffffd, 0xf2, 0x0, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 802.664905ms ago: executing program 0 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000004c0)={@phonet={0x23, 0x10, 0x69, 0x8d}, {&(0x7f00000002c0)=""/252, 0xfc}, &(0x7f0000000040), 0x3a}, 0xa0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r5, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82112008}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) 0s ago: executing program 2 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 80.478201][ T5829] cgroup: Unknown subsys name 'net' [ 80.713805][ T5829] cgroup: Unknown subsys name 'cpuset' [ 80.749883][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.601658][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.264666][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.267339][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.269407][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.270123][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.279313][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.279483][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.281933][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.282704][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.288486][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.357241][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.396760][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.398889][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.414002][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.418617][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.422875][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.423686][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.424904][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.425716][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.468058][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.477050][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.510564][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.514538][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.515271][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.516492][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.518356][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.326677][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 86.408999][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.450324][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.607861][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 86.764418][ T31] cfg80211: failed to load regulatory.db [ 86.869872][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 87.391665][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.392390][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.392793][ T5850] bridge_slave_0: entered allmulticast mode [ 87.394652][ T5850] bridge_slave_0: entered promiscuous mode [ 87.481512][ T5157] Bluetooth: hci1: command tx timeout [ 87.481517][ T5849] Bluetooth: hci2: command tx timeout [ 87.481659][ T5157] Bluetooth: hci0: command tx timeout [ 87.559336][ T59] Bluetooth: hci3: command tx timeout [ 87.578352][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.578442][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.578555][ T5850] bridge_slave_1: entered allmulticast mode [ 87.581731][ T5850] bridge_slave_1: entered promiscuous mode [ 87.639341][ T59] Bluetooth: hci4: command tx timeout [ 87.752967][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.753101][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.753319][ T5846] bridge_slave_0: entered allmulticast mode [ 87.755168][ T5846] bridge_slave_0: entered promiscuous mode [ 87.830726][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.830865][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.831034][ T5842] bridge_slave_0: entered allmulticast mode [ 87.833818][ T5842] bridge_slave_0: entered promiscuous mode [ 87.941559][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.941694][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.941944][ T5846] bridge_slave_1: entered allmulticast mode [ 87.944761][ T5846] bridge_slave_1: entered promiscuous mode [ 88.051579][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.051800][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.051986][ T5842] bridge_slave_1: entered allmulticast mode [ 88.054952][ T5842] bridge_slave_1: entered promiscuous mode [ 88.056846][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.056926][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.057037][ T5855] bridge_slave_0: entered allmulticast mode [ 88.058537][ T5855] bridge_slave_0: entered promiscuous mode [ 88.225976][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.290640][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.290797][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.290968][ T5855] bridge_slave_1: entered allmulticast mode [ 88.293686][ T5855] bridge_slave_1: entered promiscuous mode [ 88.454837][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.584045][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.687120][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.687339][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.687528][ T5853] bridge_slave_0: entered allmulticast mode [ 88.705494][ T5853] bridge_slave_0: entered promiscuous mode [ 88.794188][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.862655][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.863924][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.864012][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.864131][ T5853] bridge_slave_1: entered allmulticast mode [ 88.865605][ T5853] bridge_slave_1: entered promiscuous mode [ 88.964615][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.967433][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.108577][ T5850] team0: Port device team_slave_0 added [ 89.187577][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.314443][ T5850] team0: Port device team_slave_1 added [ 89.474039][ T5846] team0: Port device team_slave_0 added [ 89.481321][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.552732][ T5842] team0: Port device team_slave_0 added [ 89.560282][ T59] Bluetooth: hci0: command tx timeout [ 89.560303][ T5157] Bluetooth: hci1: command tx timeout [ 89.573862][ T59] Bluetooth: hci2: command tx timeout [ 89.633061][ T5846] team0: Port device team_slave_1 added [ 89.635421][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.639450][ T59] Bluetooth: hci3: command tx timeout [ 89.711721][ T5842] team0: Port device team_slave_1 added [ 89.714068][ T5855] team0: Port device team_slave_0 added [ 89.719345][ T59] Bluetooth: hci4: command tx timeout [ 90.128554][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.128571][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.128595][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.271519][ T5855] team0: Port device team_slave_1 added [ 90.403601][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.403617][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.403639][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.544173][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.544188][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.544212][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.548241][ T5853] team0: Port device team_slave_0 added [ 90.567450][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.567465][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.567488][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.670167][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.670183][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.670206][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.673249][ T5853] team0: Port device team_slave_1 added [ 90.678568][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.678582][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.678605][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.775893][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.775908][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.775931][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.901756][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.901771][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.901784][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.107913][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.107927][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.107941][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.272835][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.272859][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.272884][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.284133][ T5850] hsr_slave_0: entered promiscuous mode [ 91.285573][ T5850] hsr_slave_1: entered promiscuous mode [ 91.639428][ T5157] Bluetooth: hci0: command tx timeout [ 91.639459][ T5157] Bluetooth: hci1: command tx timeout [ 91.639576][ T59] Bluetooth: hci2: command tx timeout [ 91.658378][ T5846] hsr_slave_0: entered promiscuous mode [ 91.660170][ T5846] hsr_slave_1: entered promiscuous mode [ 91.661110][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 91.661221][ T5846] Cannot create hsr debugfs directory [ 91.689760][ T5842] hsr_slave_0: entered promiscuous mode [ 91.691052][ T5842] hsr_slave_1: entered promiscuous mode [ 91.691936][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.691958][ T5842] Cannot create hsr debugfs directory [ 91.719609][ T59] Bluetooth: hci3: command tx timeout [ 91.799255][ T59] Bluetooth: hci4: command tx timeout [ 91.916080][ T5855] hsr_slave_0: entered promiscuous mode [ 91.916809][ T5855] hsr_slave_1: entered promiscuous mode [ 91.917362][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 91.917380][ T5855] Cannot create hsr debugfs directory [ 92.194637][ T5853] hsr_slave_0: entered promiscuous mode [ 92.195918][ T5853] hsr_slave_1: entered promiscuous mode [ 92.196752][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 92.196773][ T5853] Cannot create hsr debugfs directory [ 93.691457][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.719512][ T59] Bluetooth: hci2: command tx timeout [ 93.719545][ T59] Bluetooth: hci1: command tx timeout [ 93.719564][ T59] Bluetooth: hci0: command tx timeout [ 93.750518][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.775571][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.799707][ T5849] Bluetooth: hci3: command tx timeout [ 93.832720][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.879430][ T5849] Bluetooth: hci4: command tx timeout [ 93.987136][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.023738][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.068825][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.132514][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.253448][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.305339][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.345121][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.404801][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.574147][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.635607][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.667552][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.727989][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.898106][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.907227][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.954629][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.992135][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.027059][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.152730][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.203199][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.204065][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.260154][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.275940][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.276186][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.398169][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.421065][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.451475][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.451688][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.498970][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.499249][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.565047][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.590074][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.645281][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.645864][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.704087][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.704264][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.756273][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.850566][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.861522][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.861673][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.915350][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.915614][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.014599][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.098021][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.098234][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.197963][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.198121][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.229013][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.441362][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.673460][ T5850] veth0_vlan: entered promiscuous mode [ 96.717973][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.750525][ T5850] veth1_vlan: entered promiscuous mode [ 96.866383][ T5842] veth0_vlan: entered promiscuous mode [ 96.977645][ T5842] veth1_vlan: entered promiscuous mode [ 97.065465][ T5850] veth0_macvtap: entered promiscuous mode [ 97.121961][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.127727][ T5850] veth1_macvtap: entered promiscuous mode [ 97.254359][ T5842] veth0_macvtap: entered promiscuous mode [ 97.331692][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.332825][ T5842] veth1_macvtap: entered promiscuous mode [ 97.375217][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.399032][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.441411][ T85] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.455553][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.475066][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.475164][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507709][ T85] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.534179][ T5855] veth0_vlan: entered promiscuous mode [ 97.537699][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.653516][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.665293][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.679295][ T5855] veth1_vlan: entered promiscuous mode [ 97.686614][ T3574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.756036][ T3574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.882073][ T5846] veth0_vlan: entered promiscuous mode [ 97.978118][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.978143][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.046606][ T5853] veth0_vlan: entered promiscuous mode [ 98.062371][ T5846] veth1_vlan: entered promiscuous mode [ 98.160062][ T5853] veth1_vlan: entered promiscuous mode [ 98.166541][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.166559][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.185712][ T5855] veth0_macvtap: entered promiscuous mode [ 98.238817][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.238835][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.254839][ T5855] veth1_macvtap: entered promiscuous mode [ 98.427106][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.427127][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.427658][ T5846] veth0_macvtap: entered promiscuous mode [ 98.480029][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.502156][ T5846] veth1_macvtap: entered promiscuous mode [ 98.528569][ T5853] veth0_macvtap: entered promiscuous mode [ 98.553301][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.600404][ T5853] veth1_macvtap: entered promiscuous mode [ 98.680760][ T85] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.684436][ T85] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691993][ T85] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.697404][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.697474][ T85] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801931][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.867020][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.915826][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.929637][ T1372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.931473][ T1372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.979149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.984515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.990496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.009196][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.011132][ T1372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.038974][ T1232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.135050][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.161951][ T85] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.208356][ T1232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 99.208385][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.208398][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.208409][ T1232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 99.254942][ T1232] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 99.254961][ T1232] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 99.254971][ T1232] usb 4-1: Manufacturer: syz [ 99.260715][ T85] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.267201][ T85] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.307799][ T1232] usb 4-1: config 0 descriptor?? [ 99.766987][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.767008][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.888248][ T1232] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 100.001335][ T1232] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 100.130974][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.130994][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.321752][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.321771][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.499335][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.506404][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.534076][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.534092][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.657797][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.657817][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.866255][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.866276][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.001646][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.301213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.304834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.329274][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 101.359112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.389124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.449116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.449403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.450007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.973269][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.973301][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.973343][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.973365][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.910226][ T10] usb 3-1: usb_control_msg returned -71 [ 102.910273][ T10] usbtmc 3-1:16.0: can't read capabilities [ 103.202567][ T10] usb 3-1: USB disconnect, device number 2 [ 103.229807][ T5916] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 105.403497][ T5994] usb 4-1: USB disconnect, device number 2 [ 107.997644][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.062746][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 108.286368][ T6041] bridge_slave_1: left allmulticast mode [ 108.286401][ T6041] bridge_slave_1: left promiscuous mode [ 108.287933][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.914030][ T6041] bridge_slave_0: left allmulticast mode [ 108.914091][ T6041] bridge_slave_0: left promiscuous mode [ 108.914645][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.631711][ T6067] process 'syz.3.25' launched './file0' with NULL argv: empty string added [ 114.549653][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 119.031959][ T6109] tipc: Started in network mode [ 119.032001][ T6109] tipc: Node identity 7f000001, cluster identity 4711 [ 119.156639][ T6116] Zero length message leads to an empty skb [ 119.857174][ T6109] tipc: Enabled bearer , priority 10 [ 120.284736][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.331366][ T5988] tipc: Node number set to 2130706433 [ 121.749273][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 125.648841][ T5857] usb 1-1: device descriptor read/all, error -71 [ 132.847621][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847686][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.053086][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 133.927255][ T6235] vlan2: entered allmulticast mode [ 133.927278][ T6235] veth0_to_hsr: entered allmulticast mode [ 135.187164][ T6242] tipc: Started in network mode [ 135.187195][ T6242] tipc: Node identity 7f000001, cluster identity 4711 [ 135.191668][ T6242] tipc: Enabled bearer , priority 10 [ 135.421141][ T1232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.438183][ T6250] overlay: Unknown parameter 'euid' [ 135.619463][ T1232] usb 5-1: Using ep0 maxpacket: 8 [ 135.625525][ T1232] usb 5-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 135.625554][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.699329][ T1232] usb 5-1: config 0 descriptor?? [ 135.979482][ T1232] usblcd 5-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 136.508470][ T1232] tipc: Node number set to 2130706433 [ 139.600011][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 139.721812][ T6286] bridge_slave_1: left allmulticast mode [ 139.721842][ T6286] bridge_slave_1: left promiscuous mode [ 139.722086][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.862039][ T10] usb 5-1: USB disconnect, device number 2 [ 140.081079][ T6286] bridge_slave_0: left allmulticast mode [ 140.081110][ T6286] bridge_slave_0: left promiscuous mode [ 140.081264][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.764287][ T5857] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 141.702990][ T5857] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 141.703017][ T5857] usb 3-1: config 0 has no interface number 0 [ 141.703063][ T5857] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 141.739787][ T5857] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 141.739807][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.739816][ T5857] usb 3-1: Product: syz [ 141.739823][ T5857] usb 3-1: Manufacturer: syz [ 141.739831][ T5857] usb 3-1: SerialNumber: syz [ 141.744062][ T5857] usb 3-1: config 0 descriptor?? [ 141.746534][ T6291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.793384][ T5857] usb-storage 3-1:0.20: USB Mass Storage device detected [ 141.878520][ T5857] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 146.396892][ T5857] scsi host1: usb-storage 3-1:0.20 [ 146.551909][ T5857] usb 3-1: USB disconnect, device number 3 [ 148.988151][ T6319] overlay: Unknown parameter 'euid' [ 151.909544][ T6373] tipc: Started in network mode [ 151.909693][ T6373] tipc: Node identity 7f000001, cluster identity 4711 [ 151.949536][ T6373] tipc: Enabled bearer , priority 10 [ 152.809312][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.929250][ T5929] tipc: Node number set to 2130706433 [ 152.989217][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 152.992493][ T9] usb 2-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 152.992521][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.127265][ T9] usb 2-1: config 0 descriptor?? [ 153.192888][ T9] usblcd 2-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 154.862164][ T5929] usb 2-1: USB disconnect, device number 2 [ 155.899853][ T6398] overlay: Unknown parameter 'euid' [ 159.491758][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 159.631351][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.801925][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 159.801983][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.803659][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 159.803696][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 159.803726][ T9] usb 2-1: Manufacturer: syz [ 159.852709][ T9] usb 2-1: config 0 descriptor?? [ 160.299805][ T6422] bridge_slave_1: left allmulticast mode [ 160.299843][ T6422] bridge_slave_1: left promiscuous mode [ 160.300727][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.425508][ T9] rc_core: IR keymap rc-hauppauge not found [ 160.425529][ T9] Registered IR keymap rc-empty [ 160.445742][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 160.485450][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 160.633823][ T6422] bridge_slave_0: left allmulticast mode [ 160.641906][ T6422] bridge_slave_0: left promiscuous mode [ 160.694255][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.177627][ T6374] usb 2-1: USB disconnect, device number 3 [ 165.034572][ T6443] tipc: Enabling of bearer rejected, already enabled [ 170.077224][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.98'. [ 170.100687][ T6445] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 170.100713][ T6445] CIFS mount error: No usable UNC path provided in device string! [ 170.100713][ T6445] [ 170.100927][ T6445] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.112190][ T6445] binder: 6440:6445 ioctl c0046209 9999999999999999 returned -22 [ 171.664647][ T6447] overlay: Unknown parameter 'euid' [ 172.819908][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 174.364932][ T6468] bridge0: port 1(veth3) entered blocking state [ 174.365100][ T6468] bridge0: port 1(veth3) entered disabled state [ 174.365324][ T6468] veth3: entered allmulticast mode [ 174.390398][ T6468] veth3: entered promiscuous mode [ 174.519590][ T6466] vlan2: entered allmulticast mode [ 174.519612][ T6466] veth0_to_hsr: entered allmulticast mode [ 174.519999][ T6466] bridge0: port 2(vlan2) entered blocking state [ 174.553885][ T6466] bridge0: port 2(vlan2) entered disabled state [ 174.662071][ T6466] vlan2: entered promiscuous mode [ 174.662096][ T6466] veth0_to_hsr: entered promiscuous mode [ 176.149325][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 176.149452][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 177.680001][ T6494] syz.4.106 uses obsolete (PF_INET,SOCK_PACKET) [ 177.707959][ T6494] netdevsim netdevsim4: Direct firmware load for lookup_extent_enter failed with error -2 [ 177.707976][ T6494] netdevsim netdevsim4: Falling back to sysfs fallback for: lookup_extent_enter [ 178.068006][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.507693][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.040315][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.135112][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.269960][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.916269][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.551350][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 183.036386][ T6529] netlink: 136 bytes leftover after parsing attributes in process `syz.3.117'. [ 183.036609][ T6529] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 183.095631][ T6529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.216301][ T6542] ufs: You didn't specify the type of your ufs filesystem [ 184.216301][ T6542] [ 184.216301][ T6542] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 184.216301][ T6542] [ 184.216301][ T6542] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 184.216346][ T6542] ufs: ufstype=old is supported read-only [ 184.218814][ T6542] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.583240][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583342][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.794413][ T6607] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 195.823589][ T6602] ceph: No mds server is up or the cluster is laggy [ 195.917679][ T6374] libceph: connect (1)[c::]:6789 error -101 [ 195.932892][ T6374] libceph: mon0 (1)[c::]:6789 connect error [ 196.191760][ T990] libceph: connect (1)[c::]:6789 error -101 [ 196.191975][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 200.643375][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 201.140497][ T6648] bridge0: port 1(veth3) entered blocking state [ 201.161659][ T6648] bridge0: port 1(veth3) entered disabled state [ 201.161917][ T6648] veth3: entered allmulticast mode [ 201.185882][ T6648] veth3: entered promiscuous mode [ 201.409814][ T6647] vlan2: entered allmulticast mode [ 201.409835][ T6647] veth0_to_hsr: entered allmulticast mode [ 201.410148][ T6647] bridge0: port 2(vlan2) entered blocking state [ 201.410225][ T6647] bridge0: port 2(vlan2) entered disabled state [ 201.554945][ T6647] vlan2: entered promiscuous mode [ 201.554967][ T6647] veth0_to_hsr: entered promiscuous mode [ 202.977068][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.064756][ T6374] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 203.341044][ T6374] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.341059][ T6374] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.341070][ T6374] usb 1-1: config 1 has no interface number 0 [ 203.341096][ T6374] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.341109][ T6374] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 203.343512][ T6374] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.343528][ T6374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.343538][ T6374] usb 1-1: Product: syz [ 203.343545][ T6374] usb 1-1: Manufacturer: syz [ 203.343552][ T6374] usb 1-1: SerialNumber: syz [ 203.468538][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.223427][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.671711][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.189293][ T56] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 206.348778][ T56] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.348835][ T56] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.348858][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.416397][ T56] usb 4-1: config 0 descriptor?? [ 206.552595][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 206.699897][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 206.703413][ T5834] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 206.703429][ T5834] usb 5-1: config 0 has no interface number 0 [ 206.703462][ T5834] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.703487][ T5834] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 206.705974][ T5834] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 206.705991][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 206.706001][ T5834] usb 5-1: Product: syz [ 206.706008][ T5834] usb 5-1: SerialNumber: syz [ 206.840011][ T6374] cdc_ncm 1-1:1.1: bind() failure [ 206.847540][ T6374] usb 1-1: USB disconnect, device number 4 [ 206.921014][ T5834] usb 5-1: config 0 descriptor?? [ 206.945358][ T5857] usb 4-1: USB disconnect, device number 3 [ 208.496782][ T6706] mmap: syz.4.162 (6706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 208.648013][ T5834] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 209.074653][ T5834] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 211.343031][ T6723] vivid-000: kernel_thread() failed [ 211.719473][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 211.721333][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 211.724601][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 211.724680][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 214.654826][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 214.914626][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.916411][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.916679][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.916930][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.917439][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.918716][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.919027][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.919286][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.919521][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 214.919775][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.009903][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 215.010046][ T990] usb 5-1: USB disconnect, device number 3 [ 215.348545][ T990] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 216.492248][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.483475][ T9] usb 3-1: device descriptor read/64, error -110 [ 220.919678][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 222.335664][ T9] usb 3-1: device descriptor read/64, error -32 [ 222.440621][ T9] usb usb3-port1: attempt power cycle [ 222.870844][ T5988] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.839264][ T5988] usb 1-1: Using ep0 maxpacket: 16 [ 223.847074][ T5988] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 223.847091][ T5988] usb 1-1: config 0 has no interface number 0 [ 223.847117][ T5988] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.847130][ T5988] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.919356][ T5988] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 223.919375][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 223.919385][ T5988] usb 1-1: Product: syz [ 223.919393][ T5988] usb 1-1: SerialNumber: syz [ 224.115085][ T5988] usb 1-1: config 0 descriptor?? [ 225.183611][ T5988] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 225.191467][ T5988] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 227.168667][ C1] cm109_urb_ctl_callback: 341 callbacks suppressed [ 227.168693][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.168948][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.169308][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.169542][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.169770][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.170004][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.170246][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.170860][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.171111][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.171341][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.370691][ T56] usb 1-1: USB disconnect, device number 5 [ 227.370789][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 227.679575][ T56] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 230.899345][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 231.059396][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 231.166249][ T5857] usb 1-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 231.166279][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.226019][ T5857] usb 1-1: config 0 descriptor?? [ 231.303026][ T5857] usblcd 1-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 231.931048][ T6832] netlink: 136 bytes leftover after parsing attributes in process `syz.3.198'. [ 231.931102][ T6832] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 234.269565][ T990] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 234.397385][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 234.429192][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 234.446641][ T990] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 234.446656][ T990] usb 5-1: config 0 has no interface number 0 [ 234.446682][ T990] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.446695][ T990] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.448517][ T990] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 234.448540][ T990] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 234.448551][ T990] usb 5-1: Product: syz [ 234.448558][ T990] usb 5-1: SerialNumber: syz [ 234.593629][ T990] usb 5-1: config 0 descriptor?? [ 234.598052][ T990] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 234.621482][ T990] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input9 [ 236.426384][ T990] usb 1-1: USB disconnect, device number 6 [ 237.152577][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 237.389297][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 237.391579][ T5930] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 237.391599][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.391611][ T5930] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 237.391626][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 237.391638][ T5930] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.391702][ T5930] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.391714][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.537194][ T5930] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 240.165390][ T5930] usb 1-1: USB disconnect, device number 7 [ 241.549248][ T5930] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 241.769333][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 244.575015][ T6896] netlink: 216 bytes leftover after parsing attributes in process `syz.2.215'. [ 244.575195][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 244.976372][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.977367][ T5930] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 244.977389][ T5930] usb 2-1: can't read configurations, error -71 [ 245.106694][ C0] cm109_urb_ctl_callback: 785 callbacks suppressed [ 245.106713][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.107747][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.108004][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.110018][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.110221][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.110415][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.110609][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.110799][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.110998][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.111191][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 245.190375][ T5929] usb 5-1: USB disconnect, device number 4 [ 245.190434][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 245.287427][ T5929] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 247.353828][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.694443][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.829492][ T56] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 247.979220][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 247.982417][ T56] usb 1-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 247.982445][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.036072][ T56] usb 1-1: config 0 descriptor?? [ 248.066114][ T56] usblcd 1-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 248.862518][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.001329][ T6927] program syz.1.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.027164][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 249.612481][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.737481][ T56] usb 1-1: USB disconnect, device number 8 [ 250.332253][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 250.929391][ T6944] netlink: 136 bytes leftover after parsing attributes in process `syz.1.226'. [ 250.929415][ T6944] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 251.029264][ T6374] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.219195][ T6374] usb 1-1: Using ep0 maxpacket: 16 [ 251.224765][ T6374] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 251.224791][ T6374] usb 1-1: config 0 has no interface number 0 [ 251.224830][ T6374] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.224848][ T6374] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.259897][ T6374] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 251.259926][ T6374] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 251.259952][ T6374] usb 1-1: Product: syz [ 251.259965][ T6374] usb 1-1: SerialNumber: syz [ 251.363001][ T6374] usb 1-1: config 0 descriptor?? [ 251.422778][ T6374] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 251.574936][ T6374] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 256.455024][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.455105][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.533455][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 259.414710][ C0] cm109_urb_ctl_callback: 429 callbacks suppressed [ 259.414729][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.414971][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.415206][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.415490][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.415759][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.415939][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.416177][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.416266][ T9] usb 1-1: USB disconnect, device number 9 [ 259.416371][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.416383][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 259.596320][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 260.677547][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 260.677629][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.238'. [ 262.414767][ T6998] tipc: Enabling of bearer rejected, already enabled [ 262.739291][ T56] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.920291][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 262.924143][ T56] usb 2-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 262.924172][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.940285][ T56] usb 2-1: config 0 descriptor?? [ 263.158152][ T56] usblcd 2-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 264.919309][ T5857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 265.128998][ T5857] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 265.129223][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.160644][ T5857] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 265.160674][ T5857] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 265.160694][ T5857] usb 5-1: Manufacturer: syz [ 265.275281][ T5857] usb 5-1: config 0 descriptor?? [ 266.149189][ T5857] rc_core: IR keymap rc-hauppauge not found [ 266.149209][ T5857] Registered IR keymap rc-empty [ 266.151110][ T5857] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 266.198930][ T5857] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 266.585763][ T9] usb 5-1: USB disconnect, device number 5 [ 266.765291][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 266.986694][ T56] usb 2-1: USB disconnect, device number 6 [ 267.229228][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 267.379306][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 267.381598][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 267.381612][ T9] usb 5-1: config 0 has no interface number 0 [ 267.381638][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.381651][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.384009][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 267.384025][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 267.384035][ T9] usb 5-1: Product: syz [ 267.384043][ T9] usb 5-1: SerialNumber: syz [ 267.388396][ T9] usb 5-1: config 0 descriptor?? [ 267.396721][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 267.399740][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input13 [ 269.962611][ T7034] lo speed is unknown, defaulting to 1000 [ 269.964927][ T7034] lo speed is unknown, defaulting to 1000 [ 270.017060][ T7034] lo speed is unknown, defaulting to 1000 [ 270.143785][ T7034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 270.440796][ T7034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 270.600200][ T7034] lo speed is unknown, defaulting to 1000 [ 270.603390][ T7034] lo speed is unknown, defaulting to 1000 [ 270.606701][ T7034] lo speed is unknown, defaulting to 1000 [ 270.609710][ T7034] lo speed is unknown, defaulting to 1000 [ 270.612604][ T7034] lo speed is unknown, defaulting to 1000 [ 271.599724][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 274.491565][ T7050] syz.3.251 (7050) used greatest stack depth: 18488 bytes left [ 275.831645][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.831906][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.834189][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.834457][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.834517][ T5857] usb 5-1: USB disconnect, device number 6 [ 275.834695][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.834717][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 275.979379][ T5857] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 278.992977][ T7073] netlink: 136 bytes leftover after parsing attributes in process `syz.2.258'. [ 278.993002][ T7073] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 279.478529][ T7079] siw: device registration error -23 [ 282.035607][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 283.209231][ T5915] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 284.289206][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 284.291164][ T5915] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 284.291178][ T5915] usb 4-1: config 0 has no interface number 0 [ 284.291204][ T5915] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.291216][ T5915] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.295259][ T5915] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 284.295275][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 284.295285][ T5915] usb 4-1: Product: syz [ 284.295292][ T5915] usb 4-1: SerialNumber: syz [ 284.298424][ T5915] usb 4-1: config 0 descriptor?? [ 284.380124][ T5915] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 284.428655][ T5915] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input14 [ 286.853968][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.117728][ T7118] ------------[ cut here ]------------ [ 287.117744][ T7118] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 287.118361][ T7118] WARNING: CPU: 1 PID: 7118 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 287.118411][ T7118] Modules linked in: [ 287.118449][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.118472][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.118488][ T7118] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 287.118514][ T7118] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 49 48 be fc 4d 8b 2c 24 48 c7 c7 20 a3 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 10 d1 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 287.118531][ T7118] RSP: 0018:ffffc9001c81fae0 EFLAGS: 00010246 [ 287.118549][ T7118] RAX: 67c935070970df00 RBX: 1ffff1102856e001 RCX: 0000000000080000 [ 287.118564][ T7118] RDX: ffffc9001134d000 RSI: 0000000000001844 RDI: 0000000000001845 [ 287.118578][ T7118] RBP: ffffc9001c81fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 287.118591][ T7118] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888142b5b000 [ 287.118607][ T7118] R13: ffffffff8b7852e0 R14: 0000000000000000 R15: ffffffff8b79ef20 [ 287.118621][ T7118] FS: 00007fe3cafc46c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 287.118645][ T7118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.118660][ T7118] CR2: 000000110c2be748 CR3: 0000000024c02000 CR4: 00000000003526f0 [ 287.118677][ T7118] Call Trace: [ 287.118685][ T7118] [ 287.118699][ T7118] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 287.118727][ T7118] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.118757][ T7118] ? __rcu_read_unlock+0x84/0xe0 [ 287.118786][ T7118] ? drm_vblank_get+0x148/0x260 [ 287.118810][ T7118] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 287.118838][ T7118] drm_fb_helper_ioctl+0x116/0x140 [ 287.118866][ T7118] do_fb_ioctl+0x45c/0x750 [ 287.118895][ T7118] ? __pfx_do_fb_ioctl+0x10/0x10 [ 287.118934][ T7118] ? smk_tskacc+0x2fc/0x370 [ 287.118977][ T7118] ? __pfx_smack_file_ioctl+0x10/0x10 [ 287.119013][ T7118] ? __fget_files+0x3a6/0x420 [ 287.119040][ T7118] ? __fget_files+0x2a/0x420 [ 287.119137][ T7118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 287.119162][ T7118] ? __pfx_fb_ioctl+0x10/0x10 [ 287.119185][ T7118] __se_sys_ioctl+0xfc/0x170 [ 287.119211][ T7118] do_syscall_64+0xfa/0x3b0 [ 287.119233][ T7118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.119252][ T7118] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 287.119271][ T7118] ? clear_bhb_loop+0x60/0xb0 [ 287.119295][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.119314][ T7118] RIP: 0033:0x7fe3ccd9eec9 [ 287.119337][ T7118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.119353][ T7118] RSP: 002b:00007fe3cafc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.119373][ T7118] RAX: ffffffffffffffda RBX: 00007fe3ccff6180 RCX: 00007fe3ccd9eec9 [ 287.119388][ T7118] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 287.119400][ T7118] RBP: 00007fe3cce21f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.119413][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.119425][ T7118] R13: 00007fe3ccff6218 R14: 00007fe3ccff6180 R15: 00007ffcb2407258 [ 287.119458][ T7118] [ 287.119471][ T7118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.119486][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.119508][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.119519][ T7118] Call Trace: [ 287.119527][ T7118] [ 287.119535][ T7118] dump_stack_lvl+0x99/0x250 [ 287.119565][ T7118] ? __asan_memcpy+0x40/0x70 [ 287.119587][ T7118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.119615][ T7118] ? __pfx__printk+0x10/0x10 [ 287.119657][ T7118] vpanic+0x281/0x750 [ 287.119684][ T7118] ? __pfx__printk+0x10/0x10 [ 287.119705][ T7118] ? __pfx_vpanic+0x10/0x10 [ 287.119733][ T7118] ? is_bpf_text_address+0x26/0x2b0 [ 287.119773][ T7118] panic+0xb9/0xc0 [ 287.119800][ T7118] ? __pfx_panic+0x10/0x10 [ 287.119844][ T7118] __warn+0x31b/0x4b0 [ 287.119872][ T7118] ? drm_wait_one_vblank+0x571/0x5b0 [ 287.119899][ T7118] ? drm_wait_one_vblank+0x571/0x5b0 [ 287.119924][ T7118] report_bug+0x2be/0x4f0 [ 287.119951][ T7118] ? drm_wait_one_vblank+0x571/0x5b0 [ 287.119977][ T7118] ? drm_wait_one_vblank+0x571/0x5b0 [ 287.120001][ T7118] ? drm_wait_one_vblank+0x573/0x5b0 [ 287.120026][ T7118] handle_bug+0x84/0x160 [ 287.120048][ T7118] exc_invalid_op+0x1a/0x50 [ 287.120069][ T7118] asm_exc_invalid_op+0x1a/0x20 [ 287.120087][ T7118] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 287.120111][ T7118] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 49 48 be fc 4d 8b 2c 24 48 c7 c7 20 a3 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 10 d1 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 287.120127][ T7118] RSP: 0018:ffffc9001c81fae0 EFLAGS: 00010246 [ 287.120143][ T7118] RAX: 67c935070970df00 RBX: 1ffff1102856e001 RCX: 0000000000080000 [ 287.120158][ T7118] RDX: ffffc9001134d000 RSI: 0000000000001844 RDI: 0000000000001845 [ 287.120172][ T7118] RBP: ffffc9001c81fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 287.120184][ T7118] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888142b5b000 [ 287.120200][ T7118] R13: ffffffff8b7852e0 R14: 0000000000000000 R15: ffffffff8b79ef20 [ 287.120237][ T7118] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 287.120263][ T7118] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.120292][ T7118] ? __rcu_read_unlock+0x84/0xe0 [ 287.120320][ T7118] ? drm_vblank_get+0x148/0x260 [ 287.120343][ T7118] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 287.120375][ T7118] drm_fb_helper_ioctl+0x116/0x140 [ 287.120403][ T7118] do_fb_ioctl+0x45c/0x750 [ 287.120430][ T7118] ? __pfx_do_fb_ioctl+0x10/0x10 [ 287.120470][ T7118] ? smk_tskacc+0x2fc/0x370 [ 287.120512][ T7118] ? __pfx_smack_file_ioctl+0x10/0x10 [ 287.120548][ T7118] ? __fget_files+0x3a6/0x420 [ 287.120573][ T7118] ? __fget_files+0x2a/0x420 [ 287.120605][ T7118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 287.120634][ T7118] ? __pfx_fb_ioctl+0x10/0x10 [ 287.120656][ T7118] __se_sys_ioctl+0xfc/0x170 [ 287.120682][ T7118] do_syscall_64+0xfa/0x3b0 [ 287.120703][ T7118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.120722][ T7118] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 287.120741][ T7118] ? clear_bhb_loop+0x60/0xb0 [ 287.120766][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.120785][ T7118] RIP: 0033:0x7fe3ccd9eec9 [ 287.120801][ T7118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.120817][ T7118] RSP: 002b:00007fe3cafc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.120835][ T7118] RAX: ffffffffffffffda RBX: 00007fe3ccff6180 RCX: 00007fe3ccd9eec9 [ 287.120850][ T7118] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 287.120862][ T7118] RBP: 00007fe3cce21f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.120874][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.120886][ T7118] R13: 00007fe3ccff6218 R14: 00007fe3ccff6180 R15: 00007ffcb2407258 [ 287.120919][ T7118] [ 287.121177][ T7118] Kernel Offset: disabled