last executing test programs: 1m38.872952069s ago: executing program 0 (id=13): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000700)={0x5, 0x2, 0x80, 0x0, 0x11}) 1m37.383668197s ago: executing program 0 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 1m36.33137806s ago: executing program 0 (id=24): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0xe) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000190a0102000d00"/20], 0x14}}, 0x20000000) ioctl$VT_DISALLOCATE(r0, 0x5608) 1m33.103940901s ago: executing program 0 (id=33): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x700, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x77, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) umount2(&(0x7f00000003c0)='./file0\x00', 0x1) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x7, 0x2, 0x38}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0xee92f361111e5ff1}], 0x0, 0x100000000000000, 0x0}) 1m31.499173685s ago: executing program 0 (id=36): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept$inet6(r0, 0x0, 0x0) 1m31.337904965s ago: executing program 0 (id=38): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) 1m16.184127014s ago: executing program 32 (id=38): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) 19.064062978s ago: executing program 6 (id=194): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0xe) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}], 0x1}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000190a0102000d00"/20], 0x14}}, 0x20000000) ioctl$VT_DISALLOCATE(r0, 0x5608) 16.814307559s ago: executing program 5 (id=196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x10, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b7227", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r0, 0x4, r2}, 0x10) 16.81362267s ago: executing program 6 (id=197): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000003c0)=0x5) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) 15.988625128s ago: executing program 5 (id=200): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 15.553982913s ago: executing program 1 (id=203): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15.404444244s ago: executing program 6 (id=204): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x200000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe7, &(0x7f0000000500)) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='ext4_sync_file_enter\x00', r3, 0x0, 0xfffffd}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) 13.732734837s ago: executing program 1 (id=206): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) read(r1, &(0x7f00000001c0)=""/252, 0xfc) syz_usb_disconnect(r0) socket$inet6_udplite(0xa, 0x2, 0x88) 13.732110915s ago: executing program 4 (id=207): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x3000)=nil) 13.56278641s ago: executing program 5 (id=208): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "e9111498e1131d8b797ce07a6b346721da7937b921b98e4e2980a8939879ef76682da43ac1b8fa1b5fdbf11c0ad4f1d7f35c64f4f88ccaf640f8f354c0188f1b", 0x1c}, 0x48, 0xfffffffffffffffd) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) keyctl$chown(0x4, r4, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)="14f9e4d6b7e2e4f37dac562c5a2688844627a416a965580210c50a5772faab026a535aea4d872ffc6619af3868d17b9a0cbf2dae988480c5f837880e8d8d19f64d2338df25e10096445506bf99c0e377265959d93021a9ad371438bf5b3335b57b16aa85d867ac0a4a18689f6eabc2e5e08d6c0bd75c6db7f8f4d4dd1c444a74a48fb3c75596fd5e96804d7f", 0x8c, 0xfffffffffffffffb) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0xc880) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x3, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x0, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0xffff, 0x7, 0x8, 0x0, 0x8, 0x100, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x33df7cc6, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x4, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) 13.526916669s ago: executing program 3 (id=209): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 9.882063054s ago: executing program 2 (id=210): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x2, 0x862b01) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rcu_utilization\x00'}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 9.881515526s ago: executing program 5 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getrandom(0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 8.27424683s ago: executing program 4 (id=212): r0 = memfd_create(0x0, 0x6) fcntl$addseals(r0, 0x409, 0x7) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0x48000001}, {}, {0x40000000}], 0x0, 0x0, 0x0, 0x2, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.077354395s ago: executing program 4 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) setsockopt$sock_int(r3, 0x1, 0x2c, 0x0, 0x0) r4 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xf84c, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r4, 0x8, &(0x7f0000000400)=[{0x0}], 0x1, 0x1d}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.075834879s ago: executing program 3 (id=214): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) memfd_create(&(0x7f0000000200)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 7.456292435s ago: executing program 6 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x66b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x0, 0x400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x4004550e, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) 7.409102729s ago: executing program 2 (id=216): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000003c0)=0x5) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) 7.330188423s ago: executing program 3 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000060000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4000) 7.07007462s ago: executing program 5 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000400)="4c8d93", 0x3, 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x80009) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @private=0xa010102}, 0xc) keyctl$setperm(0x5, r6, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21400}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000000c0)={r0, 0x5, 0xfff9}) 6.212589217s ago: executing program 3 (id=219): timer_create(0x3, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) r1 = msgget(0x1, 0x2b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) msgrcv(r1, 0x0, 0x0, 0x2, 0x0) msgsnd(r1, &(0x7f0000000280)={0x2}, 0x8, 0x800) 6.193708234s ago: executing program 1 (id=220): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 6.193261348s ago: executing program 4 (id=221): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000140)={0x2, 0x1, &(0x7f0000000040)=[0xffff], 0x0, &(0x7f00000000c0), 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x2}}, 0x26) io_setup(0x3fe, &(0x7f0000000100)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}}, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000180)=0x9c) 5.093823244s ago: executing program 2 (id=222): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x400, 0x0, 0x576, 0xfffffffe, 0x0, 0x0, {0x80000}, {0x4, 0x20000000}, {0x400}, {0x0, 0x0, 0x2}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0x100, 0x0, 0x1}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 5.060508997s ago: executing program 5 (id=223): socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x124000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x3c, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES16], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xd4}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) alarm(0xb95) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) inotify_init1(0x0) fcntl$setstatus(r6, 0x4, 0x2c00) 3.880524603s ago: executing program 1 (id=224): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x3000)=nil) 3.877412051s ago: executing program 2 (id=225): r0 = memfd_create(0x0, 0x6) fcntl$addseals(r0, 0x409, 0x7) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0x48000001}, {}, {0x40000000}], 0x0, 0x0, 0x0, 0x2, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.828648222s ago: executing program 3 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$RTC_EPOCH_SET(r5, 0x8008700b, 0xfffffffffffff788) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.681366101s ago: executing program 3 (id=227): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet6(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)=ANY=[@ANYBLOB='X\x00'], 0x68}}], 0x2, 0x1) 2.525755009s ago: executing program 6 (id=228): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x2, 0x862b01) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rcu_utilization\x00'}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 2.222565119s ago: executing program 1 (id=229): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) memfd_create(&(0x7f0000000200)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 2.205415549s ago: executing program 2 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, &(0x7f0000003d40)=""/175) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioperm(0x7, 0x81, 0x2) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDFONTOP_GET(r5, 0x560f, &(0x7f0000000000)={0x1, 0x2, 0x12, 0x2001e, 0x4, 0x0}) ioctl$TCFLSH(r5, 0x40384708, 0x20000000) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 2.107900229s ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000060000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4000) 1.799100888s ago: executing program 4 (id=232): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) read(r1, &(0x7f00000001c0)=""/252, 0xfc) syz_usb_disconnect(r0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.563961152s ago: executing program 6 (id=233): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 472.587136ms ago: executing program 1 (id=234): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil) mkdir(0x0, 0x21) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x141980, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) listen(r2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 69.474851][ T5815] cgroup: Unknown subsys name 'net' [ 69.598216][ T5815] cgroup: Unknown subsys name 'cpuset' [ 69.606560][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.984866][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.148177][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.154778][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.725719][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.747625][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.757492][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.768218][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.776652][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.785377][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.793724][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.794558][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.808833][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.809521][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.824362][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.825670][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.839777][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.844394][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.847735][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.861676][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.862176][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.870773][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.877209][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.891016][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.891105][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.899347][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.906460][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.913695][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.920341][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.927100][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.934401][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.947369][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.950429][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.955905][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.972384][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.981329][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.999283][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.009711][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.017316][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.025584][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.462494][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.499388][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 74.715100][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 74.738770][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 74.770666][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.782410][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.790695][ T5834] bridge_slave_0: entered allmulticast mode [ 74.798766][ T5834] bridge_slave_0: entered promiscuous mode [ 74.813145][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 74.857245][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.864934][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.872233][ T5834] bridge_slave_1: entered allmulticast mode [ 74.879491][ T5834] bridge_slave_1: entered promiscuous mode [ 74.896804][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.903999][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.911390][ T5828] bridge_slave_0: entered allmulticast mode [ 74.918455][ T5828] bridge_slave_0: entered promiscuous mode [ 74.928840][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.936264][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.943556][ T5828] bridge_slave_1: entered allmulticast mode [ 74.950769][ T5828] bridge_slave_1: entered promiscuous mode [ 75.004371][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.099753][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.109387][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.116754][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.124010][ T5829] bridge_slave_0: entered allmulticast mode [ 75.131375][ T5829] bridge_slave_0: entered promiscuous mode [ 75.139575][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.147123][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.154643][ T5829] bridge_slave_1: entered allmulticast mode [ 75.161581][ T5829] bridge_slave_1: entered promiscuous mode [ 75.170770][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.205417][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.236475][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.307758][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.319772][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.355593][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.362890][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.370484][ T5831] bridge_slave_0: entered allmulticast mode [ 75.377972][ T5831] bridge_slave_0: entered promiscuous mode [ 75.386071][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.393451][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.400786][ T5831] bridge_slave_1: entered allmulticast mode [ 75.407787][ T5831] bridge_slave_1: entered promiscuous mode [ 75.422111][ T5828] team0: Port device team_slave_0 added [ 75.450146][ T5834] team0: Port device team_slave_0 added [ 75.499258][ T5828] team0: Port device team_slave_1 added [ 75.512986][ T5829] team0: Port device team_slave_0 added [ 75.520732][ T5834] team0: Port device team_slave_1 added [ 75.546323][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.553615][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.561259][ T5830] bridge_slave_0: entered allmulticast mode [ 75.568534][ T5830] bridge_slave_0: entered promiscuous mode [ 75.591323][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.621251][ T5829] team0: Port device team_slave_1 added [ 75.652219][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.659734][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.686389][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.699639][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.711427][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.719432][ T5827] bridge_slave_0: entered allmulticast mode [ 75.726823][ T5827] bridge_slave_0: entered promiscuous mode [ 75.734982][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.742221][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.749795][ T5827] bridge_slave_1: entered allmulticast mode [ 75.757001][ T5827] bridge_slave_1: entered promiscuous mode [ 75.763777][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.771326][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.778775][ T5830] bridge_slave_1: entered allmulticast mode [ 75.786196][ T5830] bridge_slave_1: entered promiscuous mode [ 75.795690][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.816783][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.823797][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.849892][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.871974][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.879431][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.906440][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.963495][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.970982][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.997555][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.009944][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.017025][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.025846][ T5846] Bluetooth: hci2: command tx timeout [ 76.043197][ T5847] Bluetooth: hci0: command tx timeout [ 76.043786][ T5847] Bluetooth: hci4: command tx timeout [ 76.049641][ T5846] Bluetooth: hci1: command tx timeout [ 76.055666][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.080335][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.087873][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.114573][ T5841] Bluetooth: hci5: command tx timeout [ 76.114609][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.130878][ T5846] Bluetooth: hci3: command tx timeout [ 76.149193][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.161380][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.174116][ T5831] team0: Port device team_slave_0 added [ 76.207071][ T5834] hsr_slave_0: entered promiscuous mode [ 76.213700][ T5834] hsr_slave_1: entered promiscuous mode [ 76.223420][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.245862][ T5831] team0: Port device team_slave_1 added [ 76.283111][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.313289][ T5830] team0: Port device team_slave_0 added [ 76.350786][ T5829] hsr_slave_0: entered promiscuous mode [ 76.357873][ T5829] hsr_slave_1: entered promiscuous mode [ 76.363991][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.372097][ T5829] Cannot create hsr debugfs directory [ 76.381613][ T5828] hsr_slave_0: entered promiscuous mode [ 76.388415][ T5828] hsr_slave_1: entered promiscuous mode [ 76.395121][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.402703][ T5828] Cannot create hsr debugfs directory [ 76.422225][ T5827] team0: Port device team_slave_0 added [ 76.430069][ T5830] team0: Port device team_slave_1 added [ 76.446090][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.453142][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.479596][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.524910][ T5827] team0: Port device team_slave_1 added [ 76.541548][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.548801][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.575402][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.631580][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.638890][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.666143][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.679443][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.686658][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.712948][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.769037][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.776522][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.803422][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.850706][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.858034][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.885071][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.916131][ T5831] hsr_slave_0: entered promiscuous mode [ 76.922728][ T5831] hsr_slave_1: entered promiscuous mode [ 76.929324][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.937087][ T5831] Cannot create hsr debugfs directory [ 77.026940][ T5830] hsr_slave_0: entered promiscuous mode [ 77.033653][ T5830] hsr_slave_1: entered promiscuous mode [ 77.040279][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.048214][ T5830] Cannot create hsr debugfs directory [ 77.110549][ T5827] hsr_slave_0: entered promiscuous mode [ 77.117429][ T5827] hsr_slave_1: entered promiscuous mode [ 77.123793][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.152832][ T5827] Cannot create hsr debugfs directory [ 77.438422][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.470385][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.481172][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.513258][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.603908][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.615725][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.628569][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.638746][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.713086][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.740719][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.751732][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.763759][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.873516][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.884040][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.912426][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.926931][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.991278][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.002812][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.034776][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.059304][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.076589][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.105062][ T5846] Bluetooth: hci1: command tx timeout [ 78.109851][ T5847] Bluetooth: hci2: command tx timeout [ 78.110541][ T5846] Bluetooth: hci0: command tx timeout [ 78.117237][ T5841] Bluetooth: hci4: command tx timeout [ 78.183162][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.191859][ T5841] Bluetooth: hci3: command tx timeout [ 78.195138][ T5846] Bluetooth: hci5: command tx timeout [ 78.200006][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.212692][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.229123][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.236511][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.260614][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.297842][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.307165][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.326697][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.333973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.382184][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.428673][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.449257][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.456545][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.490950][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.511838][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.519045][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.558213][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.565407][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.598135][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.639539][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.646712][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.708024][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.791230][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.822042][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.829259][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.869553][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.876764][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.967969][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.021189][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.071347][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.078541][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.119633][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.126869][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.152308][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.172776][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.210819][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.262328][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.269515][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.308287][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.315566][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.403083][ T5829] veth0_vlan: entered promiscuous mode [ 79.453612][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.551007][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.574681][ T5829] veth1_vlan: entered promiscuous mode [ 79.627286][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.834021][ T5829] veth0_macvtap: entered promiscuous mode [ 79.860152][ T5829] veth1_macvtap: entered promiscuous mode [ 79.927884][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.955649][ T5831] veth0_vlan: entered promiscuous mode [ 79.988153][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.009731][ T5831] veth1_vlan: entered promiscuous mode [ 80.023779][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.072964][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.092371][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.102037][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.112846][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.145774][ T5831] veth0_macvtap: entered promiscuous mode [ 80.156015][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.173227][ T5828] veth0_vlan: entered promiscuous mode [ 80.185251][ T5846] Bluetooth: hci0: command tx timeout [ 80.195036][ T5846] Bluetooth: hci4: command tx timeout [ 80.196946][ T5841] Bluetooth: hci2: command tx timeout [ 80.200485][ T5846] Bluetooth: hci1: command tx timeout [ 80.235592][ T5831] veth1_macvtap: entered promiscuous mode [ 80.249775][ T5828] veth1_vlan: entered promiscuous mode [ 80.267511][ T5846] Bluetooth: hci5: command tx timeout [ 80.274545][ T5846] Bluetooth: hci3: command tx timeout [ 80.336336][ T5830] veth0_vlan: entered promiscuous mode [ 80.375496][ T5834] veth0_vlan: entered promiscuous mode [ 80.390612][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.401550][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.416860][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.429397][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.440113][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.451273][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.473616][ T5827] veth0_vlan: entered promiscuous mode [ 80.482058][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.494491][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.510342][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.519655][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528922][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.537915][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.550120][ T5830] veth1_vlan: entered promiscuous mode [ 80.577400][ T5834] veth1_vlan: entered promiscuous mode [ 80.603092][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.611685][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.612539][ T5828] veth0_macvtap: entered promiscuous mode [ 80.630098][ T5827] veth1_vlan: entered promiscuous mode [ 80.672579][ T5828] veth1_macvtap: entered promiscuous mode [ 80.714057][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.731433][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.747793][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.761633][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.772268][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.783605][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.791491][ T5830] veth0_macvtap: entered promiscuous mode [ 80.818898][ T5830] veth1_macvtap: entered promiscuous mode [ 80.832652][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.844126][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.867548][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.887056][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.899999][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.913927][ T5834] veth0_macvtap: entered promiscuous mode [ 81.343727][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.357070][ T5834] veth1_macvtap: entered promiscuous mode [ 81.377145][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.433337][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.461240][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.470298][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.479636][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.709255][ T5827] veth0_macvtap: entered promiscuous mode [ 81.753883][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.765354][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.775343][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.786332][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.796642][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.807506][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.819631][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.828612][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.852406][ T5827] veth1_macvtap: entered promiscuous mode [ 81.861118][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.305675][ T5846] Bluetooth: hci1: command tx timeout [ 82.305695][ T5847] Bluetooth: hci0: command tx timeout [ 82.305814][ T5846] Bluetooth: hci2: command tx timeout [ 82.311260][ T5847] Bluetooth: hci4: command tx timeout [ 82.350710][ T5847] Bluetooth: hci3: command tx timeout [ 82.350741][ T5846] Bluetooth: hci5: command tx timeout [ 82.529471][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.553964][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.570521][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.585154][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.595149][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.605699][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.617594][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.628756][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.637753][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.646613][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.655923][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.714143][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.729393][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.731133][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.745909][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.760773][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.771584][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.791004][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.801875][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.812028][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.822601][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.837423][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.848164][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.861691][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.872267][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.883332][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.908127][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.926669][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.941712][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.962128][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.981596][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.087770][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.104613][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.136254][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.378447][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.828040][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.853673][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.885608][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.916886][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.953380][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.969046][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.989642][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.000399][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.010394][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.021440][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.033481][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.107780][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.124420][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.152825][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.197639][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.207606][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.220314][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.237736][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.253125][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.266543][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.290134][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.308651][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.319627][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.331634][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.345474][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.358520][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.223321][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.236722][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.248597][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.257599][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300245][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.404064][ T5961] infiniband syz2: set active [ 85.409019][ T5961] infiniband syz2: added team_slave_1 [ 85.416118][ T5961] syz2: rxe_create_cq: returned err = -12 [ 85.422119][ T5961] infiniband syz2: Couldn't create ib_mad CQ [ 85.428767][ T5961] infiniband syz2: Couldn't open port 1 [ 85.447469][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.461805][ T5961] RDS/IB: syz2: added [ 85.466124][ T5961] smc: adding ib device syz2 with port count 1 [ 85.472365][ T5961] smc: ib device syz2 port 1 has pnetid [ 85.744662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.834330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.844486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.890327][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.898283][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.302771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.321910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.368458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.394689][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.484814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.585778][ T5895] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.115360][ T967] cfg80211: failed to load regulatory.db [ 87.266125][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.394609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.463803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 87.542130][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.618076][ T5959] overlayfs: missing 'lowerdir' [ 87.744372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.956497][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 88.025134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.452672][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.786397][ T5895] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 88.887537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.034449][ T5897] IPVS: starting estimator thread 0... [ 89.053663][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.150430][ T5986] IPVS: using max 25 ests per chain, 60000 per kthread [ 90.271503][ T5895] usb 5-1: config 0 descriptor?? [ 90.292382][ T5895] usb 5-1: can't set config #0, error -71 [ 90.323655][ T5895] usb 5-1: USB disconnect, device number 2 [ 90.385234][ T5997] binder: 5993:5997 ioctl c0306201 20000680 returned -14 [ 91.145577][ T6008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18'. [ 91.660802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.527854][ T6052] binder: 6050:6052 ioctl c0306201 20000680 returned -14 [ 96.156310][ T6055] dccp_invalid_packet: P.Data Offset(68) too large [ 99.588469][ T29] audit: type=1326 audit(1736429654.083:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.39" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ba0385d29 code=0x0 [ 103.518144][ T6106] binder: 6104:6106 ioctl c0306201 20000680 returned -14 [ 105.218075][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.52'. [ 106.318334][ T29] audit: type=1326 audit(1736429661.493:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc848185d29 code=0x0 [ 110.564455][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.582620][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 110.594755][ T6160] syz.1.61 (6160): /proc/6152/oom_adj is deprecated, please use /proc/6152/oom_score_adj instead. [ 110.794492][ T6163] binder: 6161:6163 ioctl c0306201 20000680 returned -14 [ 112.660370][ T29] audit: type=1326 audit(1736429667.053:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.5.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f56985d29 code=0x0 [ 113.144598][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.253758][ T5913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.265380][ T5913] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.275696][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.432892][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.508923][ T6174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.510369][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.610236][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.754840][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.763063][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.799144][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.824365][ T5847] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 114.831829][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.945761][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.965707][ T5895] usb 4-1: USB disconnect, device number 3 [ 116.177403][ T6224] binder: 6222:6224 ioctl c0306201 20000680 returned -14 [ 116.233087][ T5913] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.247205][ T5913] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.259287][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.660211][ T6229] process 'syz.2.78' launched './file1' with NULL argv: empty string added [ 116.720730][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.763020][ T6214] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 117.079390][ T5847] Bluetooth: hci6: command tx timeout [ 117.149490][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.278716][ T6190] chnl_net:caif_netlink_parms(): no params data found [ 118.814907][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 119.708541][ T5847] Bluetooth: hci6: command tx timeout [ 121.280170][ T29] audit: type=1326 audit(1736429676.373:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.5.83" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f56985d29 code=0x0 [ 121.944810][ T5913] usb 5-1: USB disconnect, device number 3 [ 122.021858][ T5847] Bluetooth: hci6: command tx timeout [ 123.764580][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.808951][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.051561][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.075415][ T5913] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.103879][ T6190] bridge_slave_0: entered allmulticast mode [ 124.110126][ T5847] Bluetooth: hci6: command tx timeout [ 124.131657][ T6190] bridge_slave_0: entered promiscuous mode [ 124.175162][ T5913] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 124.185572][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.196011][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.435859][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.811894][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.813469][ T6269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.909749][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.944644][ T6190] bridge_slave_1: entered allmulticast mode [ 124.951908][ T6190] bridge_slave_1: entered promiscuous mode [ 125.353778][ T6290] binder: 6285:6290 ioctl c0306201 20000680 returned -14 [ 125.738760][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 127.683772][ T6305] syz.2.96[6305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.683856][ T6305] syz.2.96[6305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.729903][ T6305] syz.2.96[6305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.754006][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.802664][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.968553][ T3436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.004682][ T6190] team0: Port device team_slave_0 added [ 128.015497][ T6190] team0: Port device team_slave_1 added [ 128.046577][ T6305] warning: `syz.2.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.124405][ T5967] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.136181][ T3436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.176374][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.191765][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.222681][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.237696][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.245028][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.288494][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.316113][ T5967] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.316369][ T3436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.328864][ T5967] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.442402][ T5967] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.451778][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.470104][ T967] usb 5-1: USB disconnect, device number 4 [ 128.493447][ T6303] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 129.070532][ T5967] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.202344][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.97'. [ 129.858585][ T3436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.581815][ T5967] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.974902][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 131.982203][ T5967] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.991239][ T5967] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.100998][ T5967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.113592][ T5967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.123859][ T5967] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.137062][ T5967] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.146333][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.234886][ T5922] usb 6-1: USB disconnect, device number 2 [ 132.265427][ T6340] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.329741][ T6190] hsr_slave_0: entered promiscuous mode [ 132.350091][ T6190] hsr_slave_1: entered promiscuous mode [ 132.383744][ T6190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.420407][ T6346] binder: 6343:6346 ioctl c0306201 20000680 returned -14 [ 132.423563][ T6190] Cannot create hsr debugfs directory [ 132.600583][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.605474][ T5967] usb 5-1: GET_CAPABILITIES returned 0 [ 132.607849][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.614468][ T5967] usbtmc 5-1:16.0: can't read capabilities [ 133.699477][ T5967] usb 5-1: USB disconnect, device number 5 [ 137.343910][ T3436] bridge_slave_1: left allmulticast mode [ 137.350007][ T3436] bridge_slave_1: left promiscuous mode [ 137.368324][ T3436] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.431166][ T3436] bridge_slave_0: left allmulticast mode [ 137.437905][ T3436] bridge_slave_0: left promiscuous mode [ 137.443781][ T3436] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.656841][ T6385] binder: 6379:6385 ioctl c0306201 20000680 returned -14 [ 138.957910][ T3436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.016810][ T3436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.037969][ T3436] bond0 (unregistering): Released all slaves [ 139.244548][ T29] audit: type=1326 audit(1736429694.333:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ba0385d29 code=0x0 [ 141.515105][ T5967] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 141.762157][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.994299][ T5967] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.024136][ T5967] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 142.035993][ T6431] binder: 6428:6431 ioctl c0306201 20000680 returned -14 [ 142.237455][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.421780][ T5967] usb 2-1: config 0 descriptor?? [ 142.498135][ T5967] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 142.515042][ T5967] dvb-usb: bulk message failed: -22 (3/0) [ 142.689458][ T5967] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 142.743738][ T5967] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 142.756849][ T6190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.892181][ T5967] usb 2-1: media controller created [ 142.929833][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.965983][ T6190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.179115][ T5967] dvb-usb: bulk message failed: -22 (6/0) [ 143.201802][ T6190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.212455][ T5967] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.246949][ T6190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.296503][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 144.395485][ T5967] dvb-usb: schedule remote query interval to 150 msecs. [ 144.404924][ T5967] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 144.417980][ T5967] usb 2-1: USB disconnect, device number 2 [ 144.998307][ T3436] hsr_slave_0: left promiscuous mode [ 145.078996][ T5967] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.332618][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 145.412804][ T6452] ceph: No mds server is up or the cluster is laggy [ 145.438883][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 145.641838][ T3436] hsr_slave_1: left promiscuous mode [ 145.764577][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.824582][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.935843][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.943572][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.388036][ T3436] veth1_macvtap: left promiscuous mode [ 146.482775][ T3436] veth0_macvtap: left promiscuous mode [ 146.609183][ T3436] veth1_vlan: left promiscuous mode [ 146.709256][ T3436] veth0_vlan: left promiscuous mode [ 147.154576][ T29] audit: type=1326 audit(1736429702.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc848185d29 code=0x0 [ 148.014945][ T6473] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.022964][ T6473] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 148.032065][ T6473] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.040271][ T6473] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 148.181611][ T6480] binder: 6475:6480 ioctl c0306201 20000680 returned -14 [ 150.648567][ T6498] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 151.214476][ T5967] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.503575][ T3436] team0 (unregistering): Port device team_slave_1 removed [ 151.698820][ T3436] team0 (unregistering): Port device team_slave_0 removed [ 151.786760][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.786797][ T5967] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.786845][ T5967] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 151.786885][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.788882][ T5967] usb 2-1: config 0 descriptor?? [ 151.794729][ T5967] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 151.794770][ T5967] dvb-usb: bulk message failed: -22 (3/0) [ 151.811432][ T5967] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 151.812285][ T5967] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.056461][ T5967] usb 2-1: media controller created [ 152.058759][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.069161][ T5967] dvb-usb: bulk message failed: -22 (6/0) [ 152.131342][ T5967] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.150496][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 152.299862][ T29] audit: type=1326 audit(1736429707.463:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.5.158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f56985d29 code=0x0 [ 152.319323][ T5967] dvb-usb: schedule remote query interval to 150 msecs. [ 152.353066][ T5967] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 152.555000][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 152.562145][ T5922] dvb-usb: error while querying for an remote control event. [ 153.111736][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 153.137197][ T5922] dvb-usb: error while querying for an remote control event. [ 153.145597][ T8] usb 2-1: USB disconnect, device number 3 [ 153.198716][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 153.324804][ T5967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.533724][ T6531] binder: 6529:6531 ioctl c0306201 20000680 returned -14 [ 153.544031][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 153.559064][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 153.655861][ T5967] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 153.742202][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.128354][ T5967] usb 6-1: config 0 descriptor?? [ 154.153211][ T5967] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 155.419483][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.555029][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.618507][ T6190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.631439][ T6190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.805805][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.814008][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.976359][ T8] libceph: connect (1)[c::]:6789 error -101 [ 156.068249][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 156.426413][ T6548] ceph: No mds server is up or the cluster is laggy [ 156.456156][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.463352][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.687789][ T5967] bcm5974 6-1:0.0: could not read from device [ 157.290646][ T5185] bcm5974 6-1:0.0: could not read from device [ 157.614496][ T5967] input: failed to attach handler mousedev to device input7, error: -5 [ 157.885847][ T6569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.167'. [ 158.594195][ T5967] usb 6-1: USB disconnect, device number 3 [ 158.614691][ T5185] bcm5974 6-1:0.0: could not read from device [ 158.766234][ T6576] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 160.165637][ T29] audit: type=1326 audit(1736429715.243:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ba0385d29 code=0x0 [ 160.434354][ T967] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 160.770191][ T967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.921452][ T967] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.923708][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.042423][ T967] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 161.339328][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.349245][ T5967] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 161.475612][ T967] usb 4-1: config 0 descriptor?? [ 161.486458][ T967] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 161.493165][ T967] dvb-usb: bulk message failed: -22 (3/0) [ 161.498757][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.545948][ T967] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 161.784119][ T967] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 161.796998][ T967] usb 4-1: media controller created [ 161.804013][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.819870][ T967] dvb-usb: bulk message failed: -22 (6/0) [ 161.826523][ T967] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 161.836138][ T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 161.854992][ T5967] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.866372][ T5967] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.889498][ T967] dvb-usb: schedule remote query interval to 150 msecs. [ 161.925498][ T967] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 161.955512][ T5967] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.095418][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 162.130569][ T5922] dvb-usb: error while querying for an remote control event. [ 162.227720][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.661874][ T6585] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 162.673610][ T5967] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.814409][ T5967] dvb-usb: bulk message failed: -22 (1/0) [ 162.820313][ T5967] dvb-usb: error while querying for an remote control event. [ 162.825787][ T5984] usb 4-1: USB disconnect, device number 4 [ 163.697180][ T5984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 163.782405][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 164.503657][ T6190] veth0_vlan: entered promiscuous mode [ 164.558058][ T6190] veth1_vlan: entered promiscuous mode [ 164.595957][ T29] audit: type=1326 audit(1736429719.773:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.2.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa467185d29 code=0x0 [ 164.642188][ T6190] veth0_macvtap: entered promiscuous mode [ 164.652675][ T6190] veth1_macvtap: entered promiscuous mode [ 164.670502][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.682487][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.693530][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.704433][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.714776][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.725612][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.735708][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.746632][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.756731][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.767697][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.780678][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.795291][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.805945][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.816206][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.827227][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.837579][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.848446][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.858702][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.869522][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.881049][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.892746][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.906100][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.929895][ T6190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.938925][ T6190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.947923][ T6190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.957299][ T6190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.113877][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.150626][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.227585][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.237597][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.477250][ T25] usb 6-1: USB disconnect, device number 4 [ 170.214323][ T5922] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 170.515497][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.515556][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.515654][ T5922] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 170.515707][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.570851][ T5922] usb 2-1: config 0 descriptor?? [ 170.582042][ T5922] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 170.582129][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 170.605512][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 170.608409][ T5922] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 170.608518][ T5922] usb 2-1: media controller created [ 170.619600][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.440790][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 171.446873][ T5922] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 171.471443][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 171.557469][ T5922] dvb-usb: schedule remote query interval to 150 msecs. [ 171.584462][ T5922] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 171.622843][ T6679] netlink: 68 bytes leftover after parsing attributes in process `syz.4.198'. [ 171.966033][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 172.016808][ T5922] dvb-usb: error while querying for an remote control event. [ 172.085718][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 172.104638][ T5922] usb 2-1: USB disconnect, device number 4 [ 172.324745][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.383079][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.639966][ T5913] IPVS: starting estimator thread 0... [ 173.447816][ T5847] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 173.508082][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.517417][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.607449][ T5922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 173.645532][ T6701] IPVS: using max 18 ests per chain, 43200 per kthread [ 173.844696][ T6686] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.858412][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.504796][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 177.749269][ T967] usb 3-1: USB disconnect, device number 2 [ 177.777413][ T5847] Bluetooth: hci4: command tx timeout [ 177.791215][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.209'. [ 177.871816][ T6715] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.882116][ T6715] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.891499][ T6715] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.900447][ T6715] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.394927][ T6715] Zero length message leads to an empty skb [ 179.404410][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 179.644035][ T6732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.214'. [ 179.674354][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 179.905532][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 180.044362][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 180.314357][ T5922] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.329727][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 180.594300][ T5922] usb 2-1: Product: syz [ 180.598981][ T5922] usb 2-1: Manufacturer: syz [ 180.636848][ T5922] usb 2-1: SerialNumber: syz [ 181.204968][ T5922] usb 2-1: config 0 descriptor?? [ 181.602929][ T5922] usb 2-1: can't set config #0, error -71 [ 181.610631][ T5922] usb 2-1: USB disconnect, device number 5 [ 181.785207][ T29] audit: type=1326 audit(1736429736.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.5.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f56985d29 code=0x0 [ 182.694685][ T5913] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 182.904725][ T5922] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.018727][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.029289][ T5913] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.643658][ T5913] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 183.652893][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.685352][ T5913] usb 7-1: config 0 descriptor?? [ 183.706305][ T5913] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 183.731209][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 183.758942][ T5913] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 183.797082][ T5922] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.799224][ T5913] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 183.808246][ T5922] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.808301][ T5922] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.808338][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.943416][ T5913] usb 7-1: media controller created [ 183.960923][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.140066][ T6761] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 184.936537][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 184.942423][ T5913] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 184.953029][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 184.965778][ T5913] dvb-usb: schedule remote query interval to 150 msecs. [ 184.972817][ T5913] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 185.068804][ T5922] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.204651][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 185.210583][ T25] dvb-usb: error while querying for an remote control event. [ 185.242595][ T5913] usb 7-1: USB disconnect, device number 2 [ 185.706915][ T5913] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 186.048967][ T6791] netlink: 68 bytes leftover after parsing attributes in process `syz.1.229'. [ 186.425214][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.223'. [ 187.351654][ T967] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.001023][ T5913] BUG: unable to handle page fault for address: fffffbfff3f8171b [ 188.008806][ T5913] #PF: supervisor read access in kernel mode [ 188.014788][ T5913] #PF: error_code(0x0000) - not-present page [ 188.020771][ T5913] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 188.027327][ T5913] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 188.033581][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: kworker/1:7 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 188.044354][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.054463][ T5913] Workqueue: events_long est_reload_work_handler [ 188.060838][ T5913] RIP: 0010:kasan_check_range+0x82/0x290 [ 188.066515][ T5913] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 188.086145][ T5913] RSP: 0018:ffffc9000430f6a0 EFLAGS: 00010086 [ 188.092233][ T5913] RAX: 000000000172ce01 RBX: 1ffffffff3f8171b RCX: ffffffff817ad1b4 [ 188.100221][ T5913] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9fc0b8d8 [ 188.108203][ T5913] RBP: ffffffffffffffff R08: ffffffff9fc0b8df R09: 1ffffffff3f8171b [ 188.116189][ T5913] R10: dffffc0000000000 R11: fffffbfff3f8171b R12: ffff88802e4d0ac4 [ 188.124177][ T5913] R13: ffff88802e4d0000 R14: dffffc0000000001 R15: fffffbfff3f8171c [ 188.132251][ T5913] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 188.141278][ T5913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.147871][ T5913] CR2: fffffbfff3f8171b CR3: 0000000077c14000 CR4: 0000000000350ef0 [ 188.155860][ T5913] Call Trace: [ 188.159230][ T5913] [ 188.162166][ T5913] ? __die_body+0x5f/0xb0 [ 188.166525][ T5913] ? page_fault_oops+0x8e4/0xcc0 [ 188.171497][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.177319][ T5913] ? __pfx_page_fault_oops+0x10/0x10 [ 188.182634][ T5913] ? validate_chain+0x11e/0x5920 [ 188.187595][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.193245][ T5913] ? preempt_count_add+0x93/0x190 [ 188.198297][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.203948][ T5913] ? is_prefetch+0x4f6/0x780 [ 188.208564][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.214214][ T5913] ? unwind_next_frame+0x193b/0x22d0 [ 188.219519][ T5913] ? __pfx_is_prefetch+0x10/0x10 [ 188.224493][ T5913] ? __bad_area_nosemaphore+0x118/0x770 [ 188.230074][ T5913] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 188.236003][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.241764][ T5913] ? spurious_kernel_fault+0x119/0x5a0 [ 188.247257][ T5913] ? do_kern_addr_fault+0x30/0x80 [ 188.252321][ T5913] ? exc_page_fault+0x5c8/0x8b0 [ 188.257207][ T5913] ? asm_exc_page_fault+0x26/0x30 [ 188.262354][ T5913] ? __lock_acquire+0xc94/0x2100 [ 188.267318][ T5913] ? kasan_check_range+0x82/0x290 [ 188.272370][ T5913] __lock_acquire+0xc94/0x2100 [ 188.277168][ T5913] lock_acquire+0x1ed/0x550 [ 188.281690][ T5913] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 188.287361][ T5913] ? __pfx_lock_acquire+0x10/0x10 [ 188.292406][ T5913] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.297789][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.303442][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.309096][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.314751][ T5913] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 188.320234][ T5913] _raw_spin_lock_nested+0x31/0x40 [ 188.325374][ T5913] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 188.330960][ T5913] raw_spin_rq_lock_nested+0x2a/0x140 [ 188.336368][ T5913] task_rq_lock+0xc6/0x360 [ 188.340802][ T5913] set_cpus_allowed_ptr+0x109/0x2a0 [ 188.346011][ T5913] ? est_reload_work_handler+0x75/0x490 [ 188.351570][ T5913] ? __pfx_set_cpus_allowed_ptr+0x10/0x10 [ 188.357299][ T5913] ? __pfx_set_user_nice+0x10/0x10 [ 188.362426][ T5913] ip_vs_est_kthread_start+0x2a2/0x3b0 [ 188.367908][ T5913] est_reload_work_handler+0x294/0x490 [ 188.373403][ T5913] ? process_scheduled_works+0x976/0x1840 [ 188.379133][ T5913] process_scheduled_works+0xa68/0x1840 [ 188.384705][ T5913] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.390696][ T5913] ? assign_work+0x364/0x3d0 [ 188.395291][ T5913] worker_thread+0x870/0xd30 [ 188.399893][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.405538][ T5913] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.411173][ T5913] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 188.417082][ T5913] ? __kthread_parkme+0x169/0x1d0 [ 188.422156][ T5913] ? __pfx_worker_thread+0x10/0x10 [ 188.427278][ T5913] kthread+0x2f2/0x390 [ 188.431356][ T5913] ? __pfx_worker_thread+0x10/0x10 [ 188.436473][ T5913] ? __pfx_kthread+0x10/0x10 [ 188.441080][ T5913] ret_from_fork+0x4d/0x80 [ 188.445503][ T5913] ? __pfx_kthread+0x10/0x10 [ 188.450112][ T5913] ret_from_fork_asm+0x1a/0x30 [ 188.455019][ T5913] [ 188.458046][ T5913] Modules linked in: [ 188.461964][ T5913] CR2: fffffbfff3f8171b [ 188.466115][ T5913] ---[ end trace 0000000000000000 ]--- [ 188.471564][ T5913] RIP: 0010:kasan_check_range+0x82/0x290 [ 188.477212][ T5913] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 188.496820][ T5913] RSP: 0018:ffffc9000430f6a0 EFLAGS: 00010086 [ 188.502893][ T5913] RAX: 000000000172ce01 RBX: 1ffffffff3f8171b RCX: ffffffff817ad1b4 [ 188.510966][ T5913] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9fc0b8d8 [ 188.518952][ T5913] RBP: ffffffffffffffff R08: ffffffff9fc0b8df R09: 1ffffffff3f8171b [ 188.526937][ T5913] R10: dffffc0000000000 R11: fffffbfff3f8171b R12: ffff88802e4d0ac4 [ 188.534948][ T5913] R13: ffff88802e4d0000 R14: dffffc0000000001 R15: fffffbfff3f8171c [ 188.542934][ T5913] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 188.551869][ T5913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.558460][ T5913] CR2: fffffbfff3f8171b CR3: 0000000077c14000 CR4: 0000000000350ef0 [ 188.566480][ T5913] Kernel panic - not syncing: Fatal exception [ 188.572859][ T5913] Kernel Offset: disabled [ 188.577174][ T5913] Rebooting in 86400 seconds..