last executing test programs: 11m3.232124215s ago: executing program 3 (id=23): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) 10m52.492764397s ago: executing program 3 (id=35): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) 10m44.159974493s ago: executing program 3 (id=42): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') 10m40.270725309s ago: executing program 3 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) wait4(r4, 0x0, 0x40000000, 0x0) 10m38.549533859s ago: executing program 3 (id=47): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) inotify_init() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}]}, 0x88}}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 10m30.305004662s ago: executing program 3 (id=56): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x80) setrlimit(0xe, &(0x7f0000000000)={0x5, 0x26c}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000016c0)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001180)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x2, 0x8, 0x18, 0x0, "82aa54"}]}, 0x98}, 0x1, 0x7}, 0x0) 10m14.585637119s ago: executing program 32 (id=56): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x80) setrlimit(0xe, &(0x7f0000000000)={0x5, 0x26c}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000016c0)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001180)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x2, 0x8, 0x18, 0x0, "82aa54"}]}, 0x98}, 0x1, 0x7}, 0x0) 5m16.764405598s ago: executing program 0 (id=440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x0) 5m8.333985629s ago: executing program 0 (id=449): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, 0x0, &(0x7f0000000340)=@udp6=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 5m8.333210733s ago: executing program 1 (id=450): sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) inotify_init() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 5m6.882294025s ago: executing program 0 (id=452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5m6.525839406s ago: executing program 1 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="000000001dae0000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000080)=""/190, 0xbe, 0x2001, &(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x25dfdc03, 0x80000000}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002d80)='/proc/cgroups\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f00000000c0)=r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00 \x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000100"/28], 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$netlink(0x10, 0x3, 0x0) 5m5.062404904s ago: executing program 1 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0xa, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000500)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r8, &(0x7f00000016c0)={0x2020}, 0xfffffce3) sendmsg$nl_generic(r5, 0x0, 0x4010) 5m1.789398431s ago: executing program 0 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r4, @ANYBLOB="010300000000000000000100eb000800150014e6ffff0700"], 0x30}}, 0x44) 4m59.840540742s ago: executing program 0 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) epoll_create1(0x0) r7 = socket$inet(0x2, 0x3, 0x1) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xb060}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 4m59.614755826s ago: executing program 1 (id=461): eventfd(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2200000004001000ffff00000b000000010000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4m58.331942551s ago: executing program 1 (id=462): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000340)) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r5, 0x0) 4m55.531158461s ago: executing program 1 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) epoll_create1(0x0) r7 = socket$inet(0x2, 0x3, 0x1) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xb060}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 4m52.780559198s ago: executing program 0 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) epoll_create1(0x0) r7 = socket$inet(0x2, 0x3, 0x1) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xb060}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 4m39.943068007s ago: executing program 33 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) epoll_create1(0x0) r7 = socket$inet(0x2, 0x3, 0x1) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xb060}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 4m37.195090174s ago: executing program 34 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) epoll_create1(0x0) r7 = socket$inet(0x2, 0x3, 0x1) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xb060}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 3m56.146883541s ago: executing program 2 (id=522): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000001c0), 0x0, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000480)='incremental-fs\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xac}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc0000000000000000000000000000010800074000"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 3m53.425266999s ago: executing program 2 (id=524): mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x2000000, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@hash}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="b2051a5b24fd7c3b08f0f8293d13e2fa135aa1c50af30d33285b557debc142a9678e97357bc0522d6a2d995fd5c5c3b49fc49766d8b469abb389df4345f03183bcb61cf4bea06219d9ac19bd541118abd00f736e10e8d3916130a4ab790c560ad8a0a0fa15f9f621639a2789db0c0ab8f903bee35c0384dbbba9179bd58baffe5585896858b5b97fe4b915326bc97607315fee5b2321f0e04133adbfceac91ea0cb7a53e6239f8f0ca51f3361ba3c5c3f0e786851d59afaee5fbaa151ee2001590bfe679ca5e0451df39cffcbfd89c632c053d5a82925293d4ca23935a382522cef36f5e00a0be9b82bfab770c", 0xed, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r1, 0x93, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) 3m50.888239336s ago: executing program 2 (id=526): mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x2000000, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@hash}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="b2051a5b24fd7c3b08f0f8293d13e2fa135aa1c50af30d33285b557debc142a9678e97357bc0522d6a2d995fd5c5c3b49fc49766d8b469abb389df4345f03183bcb61cf4bea06219d9ac19bd541118abd00f736e10e8d3916130a4ab790c560ad8a0a0fa15f9f621639a2789db0c0ab8f903bee35c0384dbbba9179bd58baffe5585896858b5b97fe4b915326bc97607315fee5b2321f0e04133adbfceac91ea0cb7a53e6239f8f0ca51f3361ba3c5c3f0e786851d59afaee5fbaa151ee2001590bfe679ca5e0451df39cffcbfd89c63", 0xd0, 0x10, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r1, 0x93, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) 3m48.542079715s ago: executing program 2 (id=529): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@multicast2, 0x4e22, 0x8000, 0x4e23, 0x0, 0x0, 0x80, 0x20, 0x6c}, {0x1, 0xffd, 0x5, 0x9, 0x10001, 0x0, 0x9, 0x8001}, {0x2, 0x100000, 0x7, 0x6}, 0x2, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in=@multicast2, 0x3500, 0x2, 0x2, 0x9, 0x4, 0x1, 0x2868}}, 0xe8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m48.407807657s ago: executing program 2 (id=530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m46.967235216s ago: executing program 2 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3m31.167660437s ago: executing program 35 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 57.059643646s ago: executing program 5 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x192) socket$pppoe(0x18, 0x1, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x3a4, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$printer(r4, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x12, 0x33, {0x33, 0x2d, "21704c0cc5a323c140b6f1891b056a8b47e7617c53b5aeeed662f7d353eb6cb0a8a50daec4207b74fb1a8cc56a4aa76a6b"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000340)={0x0, 0x3, 0x82, "6c5591aa6dc9cd327ebfd873de9db070ab2635fe9a17ac4177a4b38bd609b36c1025a1856dfc8964f267208a6501e55b92bca92b7d991338a3409dd0bb21c71efc5ab183851eb9baf4f312d9b64fde55f78f12cc163054a8c54d755e4dce840f6f40eee88f4845aa0ca7975c4589258b23a9ddf5a40e826afac9f6654d3b63d92b90"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x63, {0x61, "49fe34bdb6d6e65492d2b383276b0348a4d944095850f84d0c70fe341ca0b2b265a361b3badc07df1b0dab5c0f4cd481cf15583089668833d5c89cfab391a3bef4b2245f492b83867bf8c5ea59071f1f33aa9f6f66a261aaf28d05270a86baa784"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xfd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "ead9b5fe", {0x3, 0x0, 0x0, 0x3, 0x5, 0x7, 0x2}}) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x80101) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$eventfd(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 54.74565003s ago: executing program 5 (id=644): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) listen(r4, 0x100101) r5 = accept4(r4, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) fcntl$lock(r3, 0x26, &(0x7f0000000100)={0x2, 0x3, 0x8, 0x8, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r7, 0x104, 0x6, 0x0, &(0x7f0000002e00)) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x3000000, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40800d4) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x20}}, 0x20008000) 53.642860145s ago: executing program 5 (id=646): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0801000000000000"], 0x108}}], 0x2, 0xc040) 53.582647555s ago: executing program 5 (id=647): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast2, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x56c}}, 0x8051) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000000c0)={0x400, 0x1, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x10, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000400006cbab0a97c7a4b780000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090800000000005509010080ffffff950000000000000085100000f5ffffffbd9800000000000056020000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.291663287s ago: executing program 5 (id=648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 50.851170454s ago: executing program 5 (id=652): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket(0x23, 0x80805, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)="a31853a67c07b71eb4b570abfe361ede0dbe0fb9c8efef56b956e289a34e5a3c1aef9d583d164f8c5b3c631a312f96cf48928813bf2c446887f5d9d9a3457e56c3d643815a0269de6632eab640d7fc0301a4f5814ce3261a0638240cc46d461fd753caf96439ac9281f83779d4c73b023d4745b120621f9212a7dad5e4e9ba4447192ef87a3a933b7672b93192a9220cad942e394b0b769a290fcd44ef948287294cae1b9c71062ba17c3009fedb50e0fe0ba952ce746a588aaee13fdd41a0370656a86788de3e2d689fbe0380960066a7978706", 0xd4}, {0x0, 0x28}, {&(0x7f0000000640)="24121da7e2c54beb6e09c6680160560ab3f7e1cd6e71dbac2e3829277a965b8eaf611c1fdb800296323a0471c2838f2ef9819f5a386776ffe250798ab35d4e1740d212c79a456285e074fa3797f7f4f838cb398adeb867dfafe7ea234dd31a41fb33cb3ebf5d2360fa4589d21bc4152cd5ce76ad0651b759867108694821904685281d4604e946213fb05ded97e9b871c14c33b7a4d575584790451c2c38f17e3b9b9831a2", 0xa5}], 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 50.156021991s ago: executing program 36 (id=652): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket(0x23, 0x80805, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)="a31853a67c07b71eb4b570abfe361ede0dbe0fb9c8efef56b956e289a34e5a3c1aef9d583d164f8c5b3c631a312f96cf48928813bf2c446887f5d9d9a3457e56c3d643815a0269de6632eab640d7fc0301a4f5814ce3261a0638240cc46d461fd753caf96439ac9281f83779d4c73b023d4745b120621f9212a7dad5e4e9ba4447192ef87a3a933b7672b93192a9220cad942e394b0b769a290fcd44ef948287294cae1b9c71062ba17c3009fedb50e0fe0ba952ce746a588aaee13fdd41a0370656a86788de3e2d689fbe0380960066a7978706", 0xd4}, {0x0, 0x28}, {&(0x7f0000000640)="24121da7e2c54beb6e09c6680160560ab3f7e1cd6e71dbac2e3829277a965b8eaf611c1fdb800296323a0471c2838f2ef9819f5a386776ffe250798ab35d4e1740d212c79a456285e074fa3797f7f4f838cb398adeb867dfafe7ea234dd31a41fb33cb3ebf5d2360fa4589d21bc4152cd5ce76ad0651b759867108694821904685281d4604e946213fb05ded97e9b871c14c33b7a4d575584790451c2c38f17e3b9b9831a2", 0xa5}], 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 21.592464662s ago: executing program 4 (id=715): r0 = socket$inet(0x2, 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18.443337399s ago: executing program 4 (id=726): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5) timer_create(0x0, 0x0, 0x0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xfe, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x22, 0x46, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x800) 13.83176455s ago: executing program 4 (id=732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10.059736146s ago: executing program 4 (id=738): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x400, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x3, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80800}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16=r9], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bind$unix(r8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01072bbd7000ffffffff579d00000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) io_uring_enter(r0, 0xb516, 0xc2de, 0x8, 0x0, 0x0) 8.575844242s ago: executing program 7 (id=740): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x40002, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x85, 0x6, 0x0, 0x0, 0xffffff01) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001080008400000000114000000110001"], 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x60f, {{0xa, 0x4e23, 0x3, @loopback, 0x9}}, {{0xa, 0x4e20, 0x7, @mcast2, 0x2}}}, 0x108) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x9, 0x2081) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r7, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {&(0x7f0000000540), r7}}, 0x18) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r9 = dup(r1) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000640)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x0, 0x1, 0x19b74765c33aa52a, 0x0, 0x0, {}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x180, 0x1, 0x0, 0xfffff15a, 0x80000000]}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_TUPLE_ORIG={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc64a}]}, 0x164}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 7.871208457s ago: executing program 8 (id=743): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5) timer_create(0x0, 0x0, 0x0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xfe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x22, 0x46, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000), 0x0, 0x0, 0x4}, 0x50) 7.683493494s ago: executing program 6 (id=744): r0 = socket$key(0xf, 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf2a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') getdents64(r6, &(0x7f0000000100)=""/237, 0xed) nanosleep(&(0x7f00000003c0), &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000940)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}}, 0x8000) 5.532186801s ago: executing program 4 (id=745): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x2000000, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@hash}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="b2051a5b24fd7c3b08f0f8293d13e2fa135aa1c50af30d33285b557debc142a9678e97357bc0522d6a2d995fd5c5c3b49fc49766d8b469abb389df4345f03183bcb61cf4bea06219d9ac19bd541118abd00f736e10e8d3916130a4ab790c560ad8a0a0fa15f9f621639a2789db0c0ab8f903bee35c0384dbbba9179bd58baffe5585896858b5b97fe4b915326bc97607315fee5b2321f0e04133adbfceac91ea0cb7a53e6239f8f0ca51f3361ba3c5c3f0e786851d59afaee5fbaa151ee2001590bfe679ca5e0451df39cffcbfd89c632c053d5a82925293d4ca23935a382522cef36f5e00a0be9b82bfab770c", 0xed, 0x10, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) 5.224791638s ago: executing program 7 (id=746): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 5.100152978s ago: executing program 6 (id=747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.809683977s ago: executing program 6 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000002c40)='big_key\x00', &(0x7f0000002c80)={'syz', 0x1}, &(0x7f0000002cc0)="b547f465129e5e7aeb8a1fbb4d3d917d2c80860f2f50b285c3aeae3b495963a558d3980295f671a1adcc7efe31430a88939c00931842cae1d8c943e639abf2c1a8042034aa880ca25d12b5e08c0492b0c2ff3ab3dcccbe63a4a8d42918f3faad36d2ddd1afa40e1220c254f7d06a520086154fdd5cd84252502edff012e669ffc7c674d8edea1c709c0be9c250891f09282710a25ac8b45d9b802e595ec209c514eef254d03acc05bb89fc144591c71787f5b7036451ff74e9abe27fe41b5541f6235492597fb5362b14d34ee63f4b4bd3b94c59ccbd72fcc1763b2f5cdab68e4c010e3122ed44766dca1f51b5e98135a64a58ffc54dc8b3fdda6537740a6bf34920646a8d994ff1c55b6808bd68253d0afbb7fb9050957e20fda29278f7efe149d45a20660bbcc49142164d91f908ef11f46ea3641a3a8068fc44c3e59dea420c62b01c8955af7c1e97240ebdb2858cea6b75e5c150a98922df6dcd1fc24d671bf3a003f144face8d3fbe35c5296cde97beb80fc68f4958999876284e3db48da22c45fa82298a8c0698d609e8b68f2586dedb0d59ccb2bf7bd680a190f15a69e0326301b26ce7a0fc9d8132e6f175515e0ba2351cb7547cdf52692085ba4273546b452f36788b0d7740c8710610f801620fb375bf3132ed69bbffc664bdfd4a31a1b0f64cf8b9298a5f4b586b6549af6031ef1d286a1f202c14399a201b49b22d32895b998143cc0206612fff92d69f62bb9c046f0e2df516ee027567da500d0f7b34dc22a45fae1c4ef4fcb0216f04da802ee84bfabbdd249d62877843571d69b1ad7a2ddbee65a3383afd97a92d9bf0d1a1475b9ef4b125142cf160545e3ad3ded1878420ca9514429aba0bb03f7ae8a203d054a4c9be7d3b7a088e28cec4b22fc14e053731f7251797a86b59c64729a2bf5d3d4c0b62564a7f10b4da78382aa6128695656e10d231b60da623a21c691be540cd70d08c48d0c79a26e09fab233cdc51d92ac9753e344a398ad8bac989a448a20779cadb3b5730da576f0fbfc7d6e7a060dca1cef8527d4f4f84c7257242430bbe005655aab8b8a91b742b5e9e5385c057f56fdba928297e2ce832d0a8e435eead98f52d78e486464b54d3ccc2b64df5832444590ae93de8b4b32524c75bd5019a94a12125577d50d667afbc06e9b250d5907128a744ee1770fa78fe67c2b172c8f58eec40086fae08039c76bc543b2fe1aa8fba0c8e1dea5a869168368bd961d8199eeb92b6d412b2fb92894e42c269db10685a0093890c019718e0b920d3256840b799f369db7c46569cd3aadabf49b3ecc829fa7a583cc23a6662a49f8bd4d63eef91ef3ffed6cff38abd10091ed684c83f5dcb07068dc392be366adc4ca3e12283630eb55c99773f655df5ce9fcbcb9205d17412601891e795959da2e3416d139b1da579f40d41a9eea857d643f577a6a153f22cea9e9b90c589694088a277ac714f2d1248af386f5c873ced146c6639a66d6d40558c56435536dc752c0d27b511ae1409afa1a6b2fe57c5775121f953be2b8070b0e9b6201610edf606dbbaf5b09d3de0de0f33baada630f11e4af30cc291f3a1386f40dea2ff325958ab3d0fa0a5a90e0485c4aa93a1e46b67fc0537c8ba3987b3853421ff6c0a7d2a0e6496ed8df7621b024f59b58292669a000056a65bd22d66722573f28ca44b211ae7a89dee3d266cb99021753a41752610f4a0d304d38afa0a860f6e725f13da727b4d86bc99450f95b6925770652b2a52da1219a87ba55dc8f23d878fffb52cdc17d6f55b1cf32215f30920bf3bb02978a7dc236e4e5c869a30e3c657c33c1611664832ea24bac6107e3a3ce9c6469262cc4121b083784cd388f338e52c848f1ce53115e2c59e1badfc65031d0cc3168ce9c9840a019259ff266dd87099098210224fa868e3391acb5de17fb46373b65dd02ad059c5665e0bf7658b558b", 0x571, 0xfffffffffffffffe) 3.810919298s ago: executing program 7 (id=749): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300}) bind$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 3.574812188s ago: executing program 6 (id=750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xd8}}, 0x0) 3.388560096s ago: executing program 8 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a05000000000000000000020000000900020073797a32000000000900010073797a30000000000c00034000000000000000021e0a2e5cef857bc700050000000000000000000a49d67c353360ccbf66bcf28b91393b66ed7ea05824c8797a1ae3b119747240992175c6d99c20abdb24605459974bb403ce9376bd01556a71c4ee449ccb5ce962edf238d96475b3f5"], 0x60}}, 0x0) 3.244188647s ago: executing program 6 (id=752): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x2000000, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@hash}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="b2051a5b24fd7c3b08f0f8293d13e2fa135aa1c50af30d33285b557debc142a9678e97357bc0522d6a2d995fd5c5c3b49fc49766d8b469abb389df4345f03183bcb61cf4bea06219d9ac19bd541118abd00f736e10e8d3916130a4ab790c560ad8a0a0fa15f9f621639a2789db0c0ab8f903bee35c0384dbbba9179bd58baffe5585896858b5b97fe4b915326bc97607315fee5b2321f0e04133adbfceac91ea0cb7a53e6239f8f0ca51f3361ba3c5c3f0e786851d59afaee5fbaa151ee2001590bfe679ca5e0451df39cffcbfd89c632c053d5a82925293d4ca23935a382522cef36f5e00a0be9b82bfab770c", 0xed, 0x10, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r1, 0x93, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) 2.095395491s ago: executing program 8 (id=753): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0xfe, 0x0, [{0x80000008, 0x0, 0x1, 0x4, 0xffffffff, 0x0, 0xeb}]}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$SOUND_MIXER_INFO(r6, 0x805c4d65, &(0x7f0000000000)) 2.040516702s ago: executing program 7 (id=754): set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 1.953429095s ago: executing program 4 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x4c}}, 0x0) 1.431686128s ago: executing program 7 (id=756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) (fail_nth: 1) 1.431290062s ago: executing program 8 (id=757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.381671763s ago: executing program 6 (id=758): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b04000000000000fdc598ae0000180004"], 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c0001"], 0x28}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x8, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r10, 0x20, 0x70bd28, 0xfffffffd, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x40801) socket$nl_audit(0x10, 0x3, 0x9) 1.162346136s ago: executing program 8 (id=759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000002c40)='big_key\x00', &(0x7f0000002c80)={'syz', 0x1}, &(0x7f0000002cc0)="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", 0x576, 0xfffffffffffffffe) 64.503157ms ago: executing program 8 (id=760): r0 = socket$inet(0x2, 0x3, 0xb8) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000080)=[@code={0xa, 0x45, {"0f20e035800000000f22e0c4a151153a460f01d18f2818cfce4c0f23228f294801312ef2a445d8aa00000000c4c27d18d30f01df"}}, @code={0xa, 0x47, {"0fc76a0243da5700430f1016410f01c4c4e2d93a83bc241be9642e3e3636400f01c5450f01c5430ffc2e660f3822be6de4f02d0f01df"}}, @rdmsr={0x32, 0x18, {0x1ae}}, @wrmsr={0x1e, 0x20, {0x3b4, 0x6}}, @wrmsr={0x1e, 0x20, {0x24a, 0x4}}, @uexit={0x0, 0x18, 0x3}, @in_dx={0x82, 0x20, {0x27e7, 0x1}}, @rdmsr={0x32, 0x18, {0x20a}}, @wrmsr={0x1e, 0x20, {0x9d3, 0x94}}, @in_dx={0x82, 0x20, {0x26e2, 0x4}}, @cpuid={0x14, 0x18, {0x8, 0x3}}, @rdmsr={0x32, 0x18, {0x9fd}}, @code={0xa, 0x76, {"430f08b9900a00000f32c4c14d650348b800800000000000000f23d00f21f8350000000d0f23f8c7442400b8000000c74424028f390000ff2c240f20e035010000000f22e00f01f5460f579500000080b9800000c00f3235000100000f30c4026d9164fa00"}}, @out_dx={0xaa, 0x28, {0x6bdf, 0x5, 0x200}}, @uexit={0x0, 0x18, 0x6}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @cpuid={0x14, 0x18, {0x2, 0xffffffff}}, @rdmsr={0x32, 0x18, {0x9f9}}, @out_dx={0xaa, 0x28, {0x70a6, 0x3, 0xb1}}, @out_dx={0xaa, 0x28, {0x7bad, 0x5, 0x9}}, @cpuid={0x14, 0x18, {0x0, 0x100}}, @code={0xa, 0x77, {"c461f852ab53000000440fc774eb140f20d835200000000f22d8b97a080000b8b8950000ba000000000f3048b800000000008000000f23c00f21f835030008000f23f866baf80cb8a608a982ef66bafc0c66b8105e66ef0f35400f01c93ef30f09f236420f32"}}, @code={0xa, 0x54, {"8f49e09497fdffffffc4417d109cc000000080670f01c9c402fd22990e000000dec7c48209bf94a000900000c44299a80366ba4200edc422213b7000b9c50b00000f32"}}, @wr_drn={0x6e, 0x20, {0x5, 0x2}}, @code={0xa, 0x5c, {"66baf80cb88e765086ef66bafc0c66ed8f0878ef40003fb9100200000f32c442fd9e1fc4c3fd5cc4e266420f5aa800180000c423495d3309ffa600a00000c4219dec1dee000000670f01c9"}}], 0x459}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000540)={0x4, 0x0, [{0x80000007, 0x4, 0x1, 0x5, 0xbc, 0xd5b5, 0x800}, {0x80000001, 0x9, 0x2, 0xd8, 0x8, 0xce, 0x7ff}, {0xd, 0x8001, 0x1, 0x2, 0x7fffffff, 0x0, 0x81}, {0x0, 0x5, 0x6, 0x7, 0xa, 0x1, 0x9}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', r3, 0x29, 0x6, 0x7, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, 0x700, 0x7, 0x1, 0x1ff}}) 0s ago: executing program 7 (id=761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xd8}}, 0x0) kernel console output (not intermixed with test programs): backup interface [ 431.158523][ T7383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.178620][ T7383] bond0 (unregistering): Released all slaves [ 431.289289][ T7878] team0: Port device team_slave_0 added [ 431.472927][ T7878] team0: Port device team_slave_1 added [ 436.101749][ T8080] netlink: del zone limit has 4 unknown bytes [ 436.258713][ T7878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.258729][ T7878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.258751][ T7878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.320578][ T7878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.320593][ T7878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.320616][ T7878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.675293][ T8092] netlink: 256 bytes leftover after parsing attributes in process `syz.4.415'. [ 438.031991][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.093922][ T8093] netlink: 256 bytes leftover after parsing attributes in process `syz.1.416'. [ 438.097230][ T7878] hsr_slave_0: entered promiscuous mode [ 438.099115][ T7878] hsr_slave_1: entered promiscuous mode [ 438.606207][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.026482][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.064553][ T7878] debugfs: 'hsr0' already exists in 'hsr' [ 439.064579][ T7878] Cannot create hsr debugfs directory [ 439.172134][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.416207][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.825047][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.446274][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.498648][ T7383] hsr_slave_0: left promiscuous mode [ 440.584632][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.584703][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.667315][ T7383] hsr_slave_1: left promiscuous mode [ 440.668291][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.668319][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.729676][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.729696][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.976024][ T7383] veth1_macvtap: left promiscuous mode [ 440.976097][ T7383] veth0_macvtap: left promiscuous mode [ 440.976255][ T7383] veth1_vlan: left promiscuous mode [ 440.976367][ T7383] veth0_vlan: left promiscuous mode [ 444.805934][ T7383] team0 (unregistering): Port device team_slave_1 removed [ 445.045509][ T7383] team0 (unregistering): Port device team_slave_0 removed [ 449.304140][ T8143] netlink: 256 bytes leftover after parsing attributes in process `syz.2.426'. [ 455.323070][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 457.972271][ T7878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.178609][ T7878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.595968][ T7878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 459.834132][ T8235] netlink: 256 bytes leftover after parsing attributes in process `syz.1.438'. [ 459.853537][ T7878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.030313][ T8260] netlink: 256 bytes leftover after parsing attributes in process `syz.1.441'. [ 461.249597][ T7878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.998345][ T7878] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.505653][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.505857][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.608519][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.609892][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.425100][ T8346] netlink: 256 bytes leftover after parsing attributes in process `syz.4.454'. [ 473.044720][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.048117][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.049358][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.053368][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.055423][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.153805][ T5156] Bluetooth: hci4: command tx timeout [ 475.362585][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.652588][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.557140][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.752930][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.236451][ T5156] Bluetooth: hci4: command tx timeout [ 478.485595][ T8380] netlink: 256 bytes leftover after parsing attributes in process `syz.0.459'. [ 479.313934][ T5156] Bluetooth: hci4: command tx timeout [ 480.315977][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 481.440540][ T5156] Bluetooth: hci4: command tx timeout [ 481.476554][ T7396] bridge_slave_1: left allmulticast mode [ 481.476583][ T7396] bridge_slave_1: left promiscuous mode [ 481.477521][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.535385][ T7396] bridge_slave_0: left allmulticast mode [ 482.535417][ T7396] bridge_slave_0: left promiscuous mode [ 482.535698][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.947284][ T8410] netlink: 256 bytes leftover after parsing attributes in process `syz.1.465'. [ 489.469808][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.521659][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.559695][ T7396] bond0 (unregistering): Released all slaves [ 490.135203][ T8447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.473'. [ 491.040963][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.041126][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.041368][ T8348] bridge_slave_0: entered allmulticast mode [ 491.077441][ T8348] bridge_slave_0: entered promiscuous mode [ 491.263848][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.264020][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.264260][ T8348] bridge_slave_1: entered allmulticast mode [ 491.267026][ T8348] bridge_slave_1: entered promiscuous mode [ 492.403902][ T7396] hsr_slave_0: left promiscuous mode [ 492.590216][ T7396] hsr_slave_1: left promiscuous mode [ 492.591189][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.634970][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.960638][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 495.482524][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 497.726390][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.766445][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.773608][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.829084][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.831112][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 499.114234][ T8421] netlink: 256 bytes leftover after parsing attributes in process `syz.0.469'. [ 499.319445][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.408524][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.801762][ T8472] netlink: 256 bytes leftover after parsing attributes in process `syz.2.478'. [ 499.953953][ T5156] Bluetooth: hci5: command tx timeout [ 500.568038][ T8348] team0: Port device team_slave_0 added [ 500.915015][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.964015][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.981440][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.983066][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.985671][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.121810][ T8348] team0: Port device team_slave_1 added [ 501.211723][ T8490] netlink: 256 bytes leftover after parsing attributes in process `syz.4.483'. [ 502.450754][ T5156] Bluetooth: hci5: command tx timeout [ 502.454970][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.455047][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.721312][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.721360][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.721381][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.800429][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.800445][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.800468][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.862274][ T8501] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.485'. [ 503.078915][ T5156] Bluetooth: hci2: command tx timeout [ 504.036704][ T8348] hsr_slave_0: entered promiscuous mode [ 504.054374][ T8348] hsr_slave_1: entered promiscuous mode [ 504.055345][ T8348] debugfs: 'hsr0' already exists in 'hsr' [ 504.055369][ T8348] Cannot create hsr debugfs directory [ 504.516527][ T5156] Bluetooth: hci5: command tx timeout [ 505.164020][ T5156] Bluetooth: hci2: command tx timeout [ 506.593962][ T5156] Bluetooth: hci5: command tx timeout [ 506.669726][ T8535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.490'. [ 507.241697][ T5156] Bluetooth: hci2: command tx timeout [ 507.792132][ T8541] netlink: 256 bytes leftover after parsing attributes in process `syz.4.491'. [ 508.297226][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 509.330294][ T5156] Bluetooth: hci2: command tx timeout [ 509.737783][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 509.970389][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.707566][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.788091][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.873242][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.306313][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.406007][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.495'. [ 512.741262][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.010485][ T8575] tmpfs: Unknown parameter 'hash' [ 513.275077][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.275434][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.275603][ T8475] bridge_slave_0: entered allmulticast mode [ 513.505899][ T8475] bridge_slave_0: entered promiscuous mode [ 513.936653][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.936796][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.937033][ T8475] bridge_slave_1: entered allmulticast mode [ 513.972606][ T8475] bridge_slave_1: entered promiscuous mode [ 515.050963][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.094376][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.407285][ T7396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.530007][ T7396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.575381][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.575564][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.575742][ T8492] bridge_slave_0: entered allmulticast mode [ 516.579355][ T8492] bridge_slave_0: entered promiscuous mode [ 516.644356][ T8475] team0: Port device team_slave_0 added [ 516.645705][ T8602] netlink: 256 bytes leftover after parsing attributes in process `syz.4.500'. [ 516.752079][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.752223][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.752467][ T8492] bridge_slave_1: entered allmulticast mode [ 516.776975][ T8492] bridge_slave_1: entered promiscuous mode [ 516.784450][ T8475] team0: Port device team_slave_1 added [ 517.287851][ T7396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.896644][ T8606] overlayfs: failed to clone upperpath [ 518.438140][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.533239][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.698471][ T7396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.747589][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.747600][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.747613][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.820102][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.841256][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.841267][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.841281][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.511374][ T8492] team0: Port device team_slave_0 added [ 519.521557][ T8348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.946080][ T8492] team0: Port device team_slave_1 added [ 519.949377][ T8348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.276048][ T8348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.355873][ T8475] hsr_slave_0: entered promiscuous mode [ 520.384343][ T8475] hsr_slave_1: entered promiscuous mode [ 520.385094][ T8475] debugfs: 'hsr0' already exists in 'hsr' [ 520.385110][ T8475] Cannot create hsr debugfs directory [ 520.652698][ T8348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 520.745185][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.745201][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.745225][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.865078][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.865093][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.865118][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.181457][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.476737][ T8492] hsr_slave_0: entered promiscuous mode [ 522.497208][ T8492] hsr_slave_1: entered promiscuous mode [ 522.500679][ T8492] debugfs: 'hsr0' already exists in 'hsr' [ 522.500705][ T8492] Cannot create hsr debugfs directory [ 522.583393][ T7396] bridge_slave_1: left allmulticast mode [ 522.583414][ T7396] bridge_slave_1: left promiscuous mode [ 522.589046][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.805428][ T7396] bridge_slave_0: left allmulticast mode [ 522.805456][ T7396] bridge_slave_0: left promiscuous mode [ 522.805843][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.049659][ T7396] bridge_slave_1: left allmulticast mode [ 523.049683][ T7396] bridge_slave_1: left promiscuous mode [ 523.049843][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.104941][ T7396] bridge_slave_0: left allmulticast mode [ 523.104962][ T7396] bridge_slave_0: left promiscuous mode [ 523.105128][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.196776][ T8655] tmpfs: Unknown parameter 'hash' [ 526.941378][ T8665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.509'. [ 527.702165][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.794759][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.877707][ T7396] bond0 (unregistering): Released all slaves [ 529.047697][ T8672] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 529.049719][ T8672] Error validating options; rc = [-22] [ 531.668306][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.703804][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.756182][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.758017][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.759184][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.607843][ T8692] netlink: 44 bytes leftover after parsing attributes in process `syz.4.512'. [ 533.490703][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.654199][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.688375][ T7396] bond0 (unregistering): Released all slaves [ 533.873950][ T5156] Bluetooth: hci3: command tx timeout [ 535.955914][ T5156] Bluetooth: hci3: command tx timeout [ 537.191699][ T8714] tmpfs: Unknown parameter 'hash' [ 538.033802][ T5156] Bluetooth: hci3: command tx timeout [ 538.993351][ T8475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.241204][ T8724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'. [ 539.310044][ T8475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.505026][ T8475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 540.123913][ T5156] Bluetooth: hci3: command tx timeout [ 540.131435][ T8475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 540.247528][ T8734] netfs: Couldn't get user pages (rc=-14) [ 541.253257][ T8756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 541.925246][ T8492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.011101][ T8682] chnl_net:caif_netlink_parms(): no params data found [ 542.194016][ T8492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.518021][ T8492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.765736][ T8492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.743463][ T8788] tmpfs: Unknown parameter 'hash' [ 544.300009][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.300135][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.300314][ T8682] bridge_slave_0: entered allmulticast mode [ 544.301943][ T8682] bridge_slave_0: entered promiscuous mode [ 544.337676][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.337755][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.337893][ T8682] bridge_slave_1: entered allmulticast mode [ 544.339412][ T8682] bridge_slave_1: entered promiscuous mode [ 545.102097][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.577000][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.799149][ T8682] team0: Port device team_slave_0 added [ 546.934248][ T8682] team0: Port device team_slave_1 added [ 547.494566][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.494581][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.494605][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.550837][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.550852][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.550876][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.913936][ T7396] hsr_slave_0: left promiscuous mode [ 548.003854][ T7396] hsr_slave_1: left promiscuous mode [ 548.014152][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.034447][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.258874][ T7396] hsr_slave_0: left promiscuous mode [ 548.296850][ T7396] hsr_slave_1: left promiscuous mode [ 548.297767][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.297794][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.344996][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.345026][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.512007][ T7396] veth1_macvtap: left promiscuous mode [ 548.512141][ T7396] veth0_macvtap: left promiscuous mode [ 548.512439][ T7396] veth1_vlan: left promiscuous mode [ 548.512651][ T7396] veth0_vlan: left promiscuous mode [ 549.677955][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 549.875332][ T8821] netlink: 84 bytes leftover after parsing attributes in process `syz.2.532'. [ 550.931129][ T7396] pim6reg (unregistering): left allmulticast mode [ 552.476590][ T37] audit: type=1326 audit(1758490559.919:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.218308][ T6096] IPVS: starting estimator thread 0... [ 553.219578][ T37] audit: type=1326 audit(1758490559.919:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.219621][ T37] audit: type=1326 audit(1758490559.919:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.219652][ T37] audit: type=1326 audit(1758490559.919:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.219682][ T37] audit: type=1326 audit(1758490559.919:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.219718][ T37] audit: type=1326 audit(1758490559.919:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.219753][ T37] audit: type=1326 audit(1758490560.619:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.219789][ T37] audit: type=1326 audit(1758490560.619:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8835 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 553.335302][ T8840] IPVS: using max 7 ests per chain, 16800 per kthread [ 555.637989][ T37] audit: type=1326 audit(1758490563.079:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8850 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 555.638041][ T37] audit: type=1326 audit(1758490563.079:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8850 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 556.898626][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 557.772536][ T8861] tmpfs: Unknown parameter 'hash' [ 557.826616][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 558.271783][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.308227][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.312959][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.315172][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.318159][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.347147][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 560.398162][ T5857] Bluetooth: hci4: command tx timeout [ 560.437919][ T8875] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 560.437987][ T8875] Error validating options; rc = [-22] [ 561.081875][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 561.108450][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 561.110448][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 561.111836][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 561.113005][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 562.433945][ T5156] Bluetooth: hci4: command tx timeout [ 563.506786][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.506862][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.511372][ T5156] Bluetooth: hci6: command tx timeout [ 564.054584][ T993] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 564.213906][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 564.215951][ T993] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 564.215977][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.222921][ T993] usb 5-1: config 0 descriptor?? [ 564.238999][ T993] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 564.254515][ T993] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 564.713728][ T5156] Bluetooth: hci4: command tx timeout [ 565.555930][ T5156] Bluetooth: hci6: command tx timeout [ 566.046583][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 566.068459][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 566.070362][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 566.084856][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 566.087331][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 566.395418][ T7396] pim6reg (unregistering): left allmulticast mode [ 566.753851][ T5156] Bluetooth: hci4: command tx timeout [ 566.920619][ T5928] usb 5-1: USB disconnect, device number 4 [ 566.969031][ T8896] tmpfs: Unknown parameter 'hash' [ 567.635317][ T5156] Bluetooth: hci6: command tx timeout [ 568.193957][ T5156] Bluetooth: hci7: command tx timeout [ 568.657309][ T8901] tmpfs: Unknown parameter 'hash' [ 569.640049][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 569.714126][ T5156] Bluetooth: hci6: command tx timeout [ 570.055413][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 570.273764][ T5156] Bluetooth: hci7: command tx timeout [ 572.358317][ T5156] Bluetooth: hci7: command tx timeout [ 574.433879][ T5156] Bluetooth: hci7: command tx timeout [ 576.382894][ T8682] hsr_slave_0: entered promiscuous mode [ 576.404323][ T8682] hsr_slave_1: entered promiscuous mode [ 576.694357][ T8941] tmpfs: Unknown parameter 'hash' [ 581.104116][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 581.253741][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 581.261586][ T5928] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 581.261619][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.277439][ T5928] usb 5-1: config 0 descriptor?? [ 581.289403][ T5928] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 581.316674][ T5928] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 583.766426][ T8893] chnl_net:caif_netlink_parms(): no params data found [ 584.025552][ T8930] usb 5-1: USB disconnect, device number 5 [ 584.475703][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 584.523910][ T8876] chnl_net:caif_netlink_parms(): no params data found [ 585.018828][ T8986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.560'. [ 588.475498][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 588.475514][ T37] audit: type=1326 audit(1758490595.919:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 588.475558][ T37] audit: type=1326 audit(1758490595.919:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 588.476314][ T37] audit: type=1326 audit(1758490595.919:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 588.476410][ T37] audit: type=1326 audit(1758490595.919:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 588.476454][ T37] audit: type=1326 audit(1758490595.919:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 588.476493][ T37] audit: type=1326 audit(1758490595.919:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9001 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 589.374333][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.374487][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.374743][ T8893] bridge_slave_0: entered allmulticast mode [ 589.377713][ T8893] bridge_slave_0: entered promiscuous mode [ 589.585509][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.585650][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.585853][ T8893] bridge_slave_1: entered allmulticast mode [ 589.588538][ T8893] bridge_slave_1: entered promiscuous mode [ 590.252728][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.252866][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.253038][ T8863] bridge_slave_0: entered allmulticast mode [ 590.285275][ T8863] bridge_slave_0: entered promiscuous mode [ 590.321699][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.321837][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.322058][ T8876] bridge_slave_0: entered allmulticast mode [ 590.326457][ T8876] bridge_slave_0: entered promiscuous mode [ 590.572918][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.573076][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.573310][ T8863] bridge_slave_1: entered allmulticast mode [ 590.601076][ T8863] bridge_slave_1: entered promiscuous mode [ 590.602933][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.603069][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.603246][ T8876] bridge_slave_1: entered allmulticast mode [ 590.634017][ T8876] bridge_slave_1: entered promiscuous mode [ 590.646334][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.035190][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.279559][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.282271][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.285505][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.287100][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.287901][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.314618][ T5857] Bluetooth: hci0: command tx timeout [ 593.613394][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.636743][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.740266][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.744655][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.795063][ T8893] team0: Port device team_slave_0 added [ 593.965914][ T8893] team0: Port device team_slave_1 added [ 594.390421][ T8876] team0: Port device team_slave_0 added [ 594.396663][ T8863] team0: Port device team_slave_0 added [ 594.575576][ T8876] team0: Port device team_slave_1 added [ 594.583908][ T5928] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 594.620126][ T8863] team0: Port device team_slave_1 added [ 594.621400][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.621411][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.621434][ T8893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.739038][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.739053][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.739076][ T8893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.745602][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 594.789913][ T5928] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 594.789943][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.837562][ T5928] usb 5-1: config 0 descriptor?? [ 594.859019][ T5928] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 594.898849][ T5928] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 595.394179][ T5857] Bluetooth: hci0: command tx timeout [ 596.060993][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.061008][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.061032][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.074987][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.075002][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.075025][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.176118][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.176133][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.176156][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.511795][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.511810][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.511835][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.070830][ T8893] hsr_slave_0: entered promiscuous mode [ 597.072467][ T8893] hsr_slave_1: entered promiscuous mode [ 597.073511][ T8893] debugfs: 'hsr0' already exists in 'hsr' [ 597.073535][ T8893] Cannot create hsr debugfs directory [ 597.452129][ T5845] usb 5-1: USB disconnect, device number 6 [ 597.474243][ T5857] Bluetooth: hci0: command tx timeout [ 597.926637][ T8876] hsr_slave_0: entered promiscuous mode [ 597.944726][ T8876] hsr_slave_1: entered promiscuous mode [ 597.945684][ T8876] debugfs: 'hsr0' already exists in 'hsr' [ 597.945707][ T8876] Cannot create hsr debugfs directory [ 597.995392][ T8863] hsr_slave_0: entered promiscuous mode [ 597.997250][ T8863] hsr_slave_1: entered promiscuous mode [ 597.998871][ T8863] debugfs: 'hsr0' already exists in 'hsr' [ 597.998895][ T8863] Cannot create hsr debugfs directory [ 599.034528][ T9066] tmpfs: Unknown parameter 'hash' [ 599.554826][ T5857] Bluetooth: hci0: command tx timeout [ 600.590525][ T9015] chnl_net:caif_netlink_parms(): no params data found [ 600.853475][ T7396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.652461][ T7396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.005432][ T7396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.258343][ T7396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.514009][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.514158][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.514412][ T9015] bridge_slave_0: entered allmulticast mode [ 602.547167][ T9015] bridge_slave_0: entered promiscuous mode [ 602.562414][ T8893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 602.602589][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.602807][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.603018][ T9015] bridge_slave_1: entered allmulticast mode [ 602.628403][ T9015] bridge_slave_1: entered promiscuous mode [ 602.649542][ T8893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 603.141506][ T8893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 603.295889][ T8893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 603.491944][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.624036][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.625678][ T9015] team0: Port device team_slave_0 added [ 604.633260][ T9015] team0: Port device team_slave_1 added [ 604.764928][ T7396] bridge_slave_1: left allmulticast mode [ 604.764959][ T7396] bridge_slave_1: left promiscuous mode [ 604.765191][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.335388][ T7396] bridge_slave_0: left allmulticast mode [ 605.335411][ T7396] bridge_slave_0: left promiscuous mode [ 605.335599][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.432951][ T7396] bridge_slave_1: left allmulticast mode [ 605.432974][ T7396] bridge_slave_1: left promiscuous mode [ 605.433118][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.494987][ T7396] bridge_slave_0: left allmulticast mode [ 605.495008][ T7396] bridge_slave_0: left promiscuous mode [ 605.495164][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.578204][ T9095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.573'. [ 605.615988][ T7396] bridge_slave_1: left allmulticast mode [ 605.616011][ T7396] bridge_slave_1: left promiscuous mode [ 605.616167][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.735369][ T7396] bridge_slave_0: left allmulticast mode [ 605.735401][ T7396] bridge_slave_0: left promiscuous mode [ 605.735669][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.880502][ T7396] bridge_slave_1: left allmulticast mode [ 605.880529][ T7396] bridge_slave_1: left promiscuous mode [ 605.882286][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.924938][ T7396] bridge_slave_0: left allmulticast mode [ 605.924963][ T7396] bridge_slave_0: left promiscuous mode [ 605.925132][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.104294][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.238441][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.456065][ T7396] bond0 (unregistering): Released all slaves [ 607.896914][ T9102] netlink: 44 bytes leftover after parsing attributes in process `syz.4.574'. [ 608.855640][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.087931][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.156004][ T7396] bond0 (unregistering): Released all slaves [ 611.296066][ T9109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.575'. [ 612.389962][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.434314][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.478917][ T7396] bond0 (unregistering): Released all slaves [ 612.824551][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.956008][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.297763][ T7396] bond0 (unregistering): Released all slaves [ 613.392846][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 615.444753][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.444769][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.444793][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.470110][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.470138][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.470161][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.584623][ T9015] hsr_slave_0: entered promiscuous mode [ 618.432629][ T9015] hsr_slave_1: entered promiscuous mode [ 618.453665][ T9015] debugfs: 'hsr0' already exists in 'hsr' [ 618.453693][ T9015] Cannot create hsr debugfs directory [ 619.770474][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 619.785112][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 619.786209][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 619.787750][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 619.788544][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.822028][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 620.833179][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 620.838994][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 620.840109][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 620.841202][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 621.794442][ T5156] Bluetooth: hci2: command tx timeout [ 622.317955][ T993] libceph: connect (1)[c::]:6789 error -101 [ 622.318181][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 622.331651][ T993] libceph: connect (1)[c::]:6789 error -101 [ 622.331857][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 622.344172][ T9189] ceph: No mds server is up or the cluster is laggy [ 622.596423][ T993] libceph: connect (1)[c::]:6789 error -101 [ 622.596652][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 622.921286][ T5156] Bluetooth: hci3: command tx timeout [ 623.364565][ T7396] hsr_slave_0: left promiscuous mode [ 623.403701][ T7396] hsr_slave_1: left promiscuous mode [ 623.404655][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.445515][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.623745][ T7396] hsr_slave_0: left promiscuous mode [ 623.663870][ T7396] hsr_slave_1: left promiscuous mode [ 623.668519][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.953888][ T5156] Bluetooth: hci2: command tx timeout [ 623.961360][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.522453][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.524982][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.112766][ T5156] Bluetooth: hci3: command tx timeout [ 625.675341][ T7396] hsr_slave_0: left promiscuous mode [ 625.694558][ T7396] hsr_slave_1: left promiscuous mode [ 625.695653][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.695680][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.804312][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.804343][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.013852][ T7396] hsr_slave_0: left promiscuous mode [ 626.033827][ T5156] Bluetooth: hci2: command tx timeout [ 626.049225][ T7396] hsr_slave_1: left promiscuous mode [ 626.050351][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.098426][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.222246][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.244569][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.246630][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.249683][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.252477][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.315045][ T7396] veth1_macvtap: left promiscuous mode [ 626.315170][ T7396] veth0_macvtap: left promiscuous mode [ 626.315459][ T7396] veth1_vlan: left promiscuous mode [ 626.315667][ T7396] veth0_vlan: left promiscuous mode [ 627.153702][ T5156] Bluetooth: hci3: command tx timeout [ 627.994454][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 628.113762][ T5156] Bluetooth: hci2: command tx timeout [ 628.114691][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 628.373799][ T5156] Bluetooth: hci4: command tx timeout [ 629.242186][ T5156] Bluetooth: hci3: command tx timeout [ 629.504568][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 629.629763][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 630.395932][ T7396] pim6reg (unregistering): left allmulticast mode [ 630.433842][ T5156] Bluetooth: hci4: command tx timeout [ 632.356130][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 632.513868][ T5156] Bluetooth: hci4: command tx timeout [ 632.604579][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 634.593763][ T5156] Bluetooth: hci4: command tx timeout [ 635.484554][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 635.614709][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 636.358234][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.589531][ T993] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 637.743926][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 637.761977][ T993] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 637.762004][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.845283][ T993] usb 5-1: config 0 descriptor?? [ 637.860740][ T993] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 637.887322][ T993] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 640.339359][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 640.682094][ T8929] usb 5-1: USB disconnect, device number 7 [ 642.181464][ T9174] chnl_net:caif_netlink_parms(): no params data found [ 643.546171][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.546395][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.546615][ T9159] bridge_slave_0: entered allmulticast mode [ 643.549462][ T9159] bridge_slave_0: entered promiscuous mode [ 643.580150][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.580331][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.580548][ T9159] bridge_slave_1: entered allmulticast mode [ 643.583467][ T9159] bridge_slave_1: entered promiscuous mode [ 643.583780][ T8929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 643.783837][ T8929] usb 5-1: Using ep0 maxpacket: 32 [ 643.792534][ T8929] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 643.792563][ T8929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.840741][ T8929] usb 5-1: config 0 descriptor?? [ 643.877474][ T8929] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 643.894051][ T8929] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 643.998655][ T9015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.308784][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.323380][ T9015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.530679][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.530831][ T9015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.579916][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.580145][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.580420][ T9174] bridge_slave_0: entered allmulticast mode [ 645.583318][ T9174] bridge_slave_0: entered promiscuous mode [ 645.694761][ T9015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.747261][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.747506][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.747748][ T9174] bridge_slave_1: entered allmulticast mode [ 645.750754][ T9174] bridge_slave_1: entered promiscuous mode [ 645.816841][ T9205] chnl_net:caif_netlink_parms(): no params data found [ 645.952594][ T9159] team0: Port device team_slave_0 added [ 646.071931][ T9159] team0: Port device team_slave_1 added [ 646.124276][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.312037][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.550441][ T5920] usb 5-1: USB disconnect, device number 8 [ 646.995944][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.595'. [ 647.817599][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.817610][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.817623][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.043964][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.043980][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.044005][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.118154][ T9174] team0: Port device team_slave_0 added [ 649.039721][ T9174] team0: Port device team_slave_1 added [ 649.267595][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.267806][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.268080][ T9205] bridge_slave_0: entered allmulticast mode [ 649.270846][ T9205] bridge_slave_0: entered promiscuous mode [ 649.466339][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.466509][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.466739][ T9205] bridge_slave_1: entered allmulticast mode [ 649.471770][ T9205] bridge_slave_1: entered promiscuous mode [ 649.635779][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.635794][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.635817][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.834450][ T9159] hsr_slave_0: entered promiscuous mode [ 649.835941][ T9159] hsr_slave_1: entered promiscuous mode [ 649.841454][ T9159] debugfs: 'hsr0' already exists in 'hsr' [ 649.841479][ T9159] Cannot create hsr debugfs directory [ 649.843444][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.843456][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.843479][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.369580][ T9205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.297487][ T9205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.861447][ T9205] team0: Port device team_slave_0 added [ 652.376104][ T9205] team0: Port device team_slave_1 added [ 652.408188][ T9174] hsr_slave_0: entered promiscuous mode [ 652.409675][ T9174] hsr_slave_1: entered promiscuous mode [ 652.410581][ T9174] debugfs: 'hsr0' already exists in 'hsr' [ 652.410603][ T9174] Cannot create hsr debugfs directory [ 652.538969][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.544905][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 652.560324][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 652.563063][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 652.582379][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.770934][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 652.984760][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.984776][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.984801][ T9205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.060074][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.060089][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.060113][ T9205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.683989][ T5156] Bluetooth: hci0: command tx timeout [ 654.878440][ T9205] hsr_slave_0: entered promiscuous mode [ 654.879982][ T9205] hsr_slave_1: entered promiscuous mode [ 654.880921][ T9205] debugfs: 'hsr0' already exists in 'hsr' [ 654.880944][ T9205] Cannot create hsr debugfs directory [ 656.253821][ T37] audit: type=1326 audit(1758490663.689:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9343 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 656.253877][ T37] audit: type=1326 audit(1758490663.689:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9343 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 656.772108][ T5156] Bluetooth: hci0: command tx timeout [ 656.869320][ T37] audit: type=1326 audit(1758490663.699:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9343 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 656.870173][ T37] audit: type=1326 audit(1758490663.699:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9343 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 656.870774][ T37] audit: type=1326 audit(1758490663.699:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9343 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 656.871752][ T37] audit: type=1326 audit(1758490663.699:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9343 comm="syz.4.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdd7d01ec29 code=0x7ffc0000 [ 657.822819][ T9159] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 658.007930][ T9159] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 658.112672][ T9159] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 658.244363][ T9159] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 658.704339][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 658.923668][ T5156] Bluetooth: hci0: command tx timeout [ 659.523508][ T9327] chnl_net:caif_netlink_parms(): no params data found [ 660.822522][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.822747][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.822968][ T9327] bridge_slave_0: entered allmulticast mode [ 660.846772][ T9327] bridge_slave_0: entered promiscuous mode [ 660.863711][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.863879][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.864101][ T9327] bridge_slave_1: entered allmulticast mode [ 660.868060][ T9327] bridge_slave_1: entered promiscuous mode [ 660.993906][ T5156] Bluetooth: hci0: command tx timeout [ 661.331902][ T9327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.353300][ T9327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.606623][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.615095][ T9327] team0: Port device team_slave_0 added [ 661.646209][ T9327] team0: Port device team_slave_1 added [ 662.098152][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.098168][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.098195][ T9327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.106902][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.106917][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.106942][ T9327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.218389][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.411880][ T7396] bridge_slave_1: left allmulticast mode [ 662.411911][ T7396] bridge_slave_1: left promiscuous mode [ 662.412154][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.465467][ T7396] bridge_slave_0: left allmulticast mode [ 662.465500][ T7396] bridge_slave_0: left promiscuous mode [ 662.465773][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.548491][ T7396] bridge_slave_1: left allmulticast mode [ 662.548523][ T7396] bridge_slave_1: left promiscuous mode [ 662.548771][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.605687][ T7396] bridge_slave_0: left allmulticast mode [ 662.605719][ T7396] bridge_slave_0: left promiscuous mode [ 662.605969][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.687713][ T7396] bridge_slave_1: left allmulticast mode [ 662.687745][ T7396] bridge_slave_1: left promiscuous mode [ 662.687995][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.775363][ T7396] bridge_slave_0: left allmulticast mode [ 662.775397][ T7396] bridge_slave_0: left promiscuous mode [ 662.775671][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.848895][ T7396] bridge_slave_1: left allmulticast mode [ 662.848927][ T7396] bridge_slave_1: left promiscuous mode [ 662.849183][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.914619][ T7396] bridge_slave_0: left allmulticast mode [ 662.914641][ T7396] bridge_slave_0: left promiscuous mode [ 662.914809][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.990698][ T7396] bridge_slave_1: left allmulticast mode [ 662.990733][ T7396] bridge_slave_1: left promiscuous mode [ 662.990981][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.055641][ T7396] bridge_slave_0: left allmulticast mode [ 663.055674][ T7396] bridge_slave_0: left promiscuous mode [ 663.055935][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.664758][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.755547][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.828954][ T7396] bond0 (unregistering): Released all slaves [ 664.105279][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.184828][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.258044][ T7396] bond0 (unregistering): Released all slaves [ 665.864537][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.946816][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.018023][ T7396] bond0 (unregistering): Released all slaves [ 666.271233][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.344591][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.408033][ T7396] bond0 (unregistering): Released all slaves [ 666.717555][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.804589][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.887724][ T7396] bond0 (unregistering): Released all slaves [ 666.955733][ T9327] hsr_slave_0: entered promiscuous mode [ 666.957122][ T9327] hsr_slave_1: entered promiscuous mode [ 666.958080][ T9327] debugfs: 'hsr0' already exists in 'hsr' [ 666.958105][ T9327] Cannot create hsr debugfs directory [ 667.110573][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.113795][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.405014][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.405236][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.223944][ T7396] hsr_slave_0: left promiscuous mode [ 668.244066][ T7396] hsr_slave_1: left promiscuous mode [ 668.245051][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.284751][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.443845][ T7396] hsr_slave_0: left promiscuous mode [ 668.463800][ T7396] hsr_slave_1: left promiscuous mode [ 668.465609][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.516987][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.683742][ T7396] hsr_slave_0: left promiscuous mode [ 668.706784][ T7396] hsr_slave_1: left promiscuous mode [ 668.707709][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.761093][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.929576][ T7396] hsr_slave_0: left promiscuous mode [ 668.943862][ T7396] hsr_slave_1: left promiscuous mode [ 668.944766][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.994897][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.133914][ T7396] hsr_slave_0: left promiscuous mode [ 669.173804][ T7396] hsr_slave_1: left promiscuous mode [ 669.174736][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.197290][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.051040][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 670.174563][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 671.524635][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 671.642297][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 672.874731][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 673.034230][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 674.434726][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 674.564718][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 675.794776][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 675.956352][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 676.981700][ T9174] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 677.016727][ T9174] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 677.202042][ T9174] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 677.243015][ T9174] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 677.457879][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.990365][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.148713][ T9174] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.179628][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.179899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.217646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.217773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.556107][ T9205] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 678.597730][ T9205] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 678.655814][ T9205] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 678.770433][ T9205] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 678.934249][ T9159] veth0_vlan: entered promiscuous mode [ 679.042981][ T9327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 679.116628][ T9159] veth1_vlan: entered promiscuous mode [ 679.126685][ T9327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 679.239283][ T9327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 679.326870][ T9327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 679.772136][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.138906][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 680.156064][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 680.179619][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 680.203224][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 680.246408][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 680.380572][ T9205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.632717][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.636250][ T9205] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.709381][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.709606][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.837361][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.837516][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.948570][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.137107][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.137329][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.269253][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.271511][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.293415][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.307621][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.310144][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.311402][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.313437][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.044011][ T9461] chnl_net:caif_netlink_parms(): no params data found [ 682.353770][ T5857] Bluetooth: hci2: command tx timeout [ 682.670802][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.671042][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.671241][ T9461] bridge_slave_0: entered allmulticast mode [ 682.690056][ T9461] bridge_slave_0: entered promiscuous mode [ 682.715453][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.715602][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.715823][ T9461] bridge_slave_1: entered allmulticast mode [ 682.725972][ T9461] bridge_slave_1: entered promiscuous mode [ 683.066127][ T9461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.091672][ T9461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.393881][ T5857] Bluetooth: hci5: command tx timeout [ 683.773238][ T9461] team0: Port device team_slave_0 added [ 683.790197][ T9461] team0: Port device team_slave_1 added [ 683.919843][ T9205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.232708][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.232725][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.232748][ T9461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.243179][ T9468] chnl_net:caif_netlink_parms(): no params data found [ 684.252225][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.252239][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.252264][ T9461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.434111][ T5857] Bluetooth: hci2: command tx timeout [ 684.909734][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.964203][ T9461] hsr_slave_0: entered promiscuous mode [ 684.965530][ T9461] hsr_slave_1: entered promiscuous mode [ 685.370951][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.371093][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.371314][ T9468] bridge_slave_0: entered allmulticast mode [ 685.396896][ T9468] bridge_slave_0: entered promiscuous mode [ 685.474309][ T5857] Bluetooth: hci5: command tx timeout [ 685.483921][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.484052][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.484278][ T9468] bridge_slave_1: entered allmulticast mode [ 685.487621][ T9468] bridge_slave_1: entered promiscuous mode [ 685.838545][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.880768][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.880837][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.899705][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.179749][ T9468] team0: Port device team_slave_0 added [ 686.342218][ T9468] team0: Port device team_slave_1 added [ 686.514179][ T5857] Bluetooth: hci2: command tx timeout [ 686.658067][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.660657][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.662138][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.663270][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.670677][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 687.375122][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.375140][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.375165][ T9468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.434331][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.434347][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.434372][ T9468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.553852][ T5857] Bluetooth: hci5: command tx timeout [ 688.060835][ T9468] hsr_slave_0: entered promiscuous mode [ 688.061682][ T9468] hsr_slave_1: entered promiscuous mode [ 688.062207][ T9468] debugfs: 'hsr0' already exists in 'hsr' [ 688.062225][ T9468] Cannot create hsr debugfs directory [ 688.098828][ T9327] veth0_vlan: entered promiscuous mode [ 688.390034][ T9327] veth1_vlan: entered promiscuous mode [ 688.593909][ T5857] Bluetooth: hci2: command tx timeout [ 688.753971][ T5857] Bluetooth: hci3: command tx timeout [ 688.874003][ T7396] bridge_slave_1: left allmulticast mode [ 688.874035][ T7396] bridge_slave_1: left promiscuous mode [ 688.874290][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.955016][ T7396] bridge_slave_0: left allmulticast mode [ 688.955038][ T7396] bridge_slave_0: left promiscuous mode [ 688.955198][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.018186][ T7396] bridge_slave_1: left allmulticast mode [ 689.018219][ T7396] bridge_slave_1: left promiscuous mode [ 689.018476][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.091544][ T7396] bridge_slave_0: left allmulticast mode [ 689.091576][ T7396] bridge_slave_0: left promiscuous mode [ 689.091735][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.633802][ T5857] Bluetooth: hci5: command tx timeout [ 690.714654][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.795929][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.818380][ T7396] bond0 (unregistering): Released all slaves [ 690.852139][ T5857] Bluetooth: hci3: command tx timeout [ 692.275293][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.341875][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.378986][ T7396] bond0 (unregistering): Released all slaves [ 692.662208][ T9327] veth0_macvtap: entered promiscuous mode [ 692.685902][ T9327] veth1_macvtap: entered promiscuous mode [ 692.914062][ T5857] Bluetooth: hci3: command tx timeout [ 692.979433][ T7396] hsr_slave_0: left promiscuous mode [ 693.023721][ T7396] hsr_slave_1: left promiscuous mode [ 693.024827][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.050699][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.203873][ T7396] hsr_slave_0: left promiscuous mode [ 693.223761][ T7396] hsr_slave_1: left promiscuous mode [ 693.225770][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.274824][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.394417][ T7396] veth1_vlan: left promiscuous mode [ 693.394643][ T7396] veth0_vlan: left promiscuous mode [ 694.504534][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 694.734581][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 694.993858][ T5857] Bluetooth: hci3: command tx timeout [ 698.154608][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 698.391882][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 700.487248][ T9506] chnl_net:caif_netlink_parms(): no params data found [ 700.846059][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.088628][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.109830][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.110075][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.110309][ T9506] bridge_slave_0: entered allmulticast mode [ 701.136460][ T9506] bridge_slave_0: entered promiscuous mode [ 701.154149][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.154294][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.154519][ T9506] bridge_slave_1: entered allmulticast mode [ 701.157410][ T9506] bridge_slave_1: entered promiscuous mode [ 701.307504][ T1120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.658291][ T1120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.660401][ T1120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.690311][ T9506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.697132][ T1120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.769941][ T9506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.151530][ T9506] team0: Port device team_slave_0 added [ 702.158725][ T9506] team0: Port device team_slave_1 added [ 702.575079][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.575095][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.575120][ T9506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.672384][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.672399][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.672419][ T9506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.074522][ T9506] hsr_slave_0: entered promiscuous mode [ 703.076016][ T9506] hsr_slave_1: entered promiscuous mode [ 703.076933][ T9506] debugfs: 'hsr0' already exists in 'hsr' [ 703.076955][ T9506] Cannot create hsr debugfs directory [ 703.148479][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.148500][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.889711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.889731][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.909102][ T9461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 703.953321][ T9461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 704.217312][ T9461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 704.293914][ T9461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 705.692587][ T9531] openvswitch: netlink: Unknown key attributes 2 [ 706.355215][ T9468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 706.427766][ T9468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 706.482194][ T9468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 706.701326][ T9468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 707.599595][ T7396] bridge_slave_1: left allmulticast mode [ 707.599619][ T7396] bridge_slave_1: left promiscuous mode [ 707.599817][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.660929][ T7396] bridge_slave_0: left allmulticast mode [ 707.660951][ T7396] bridge_slave_0: left promiscuous mode [ 707.661120][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.145173][ T9566] FAULT_INJECTION: forcing a failure. [ 708.145173][ T9566] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 708.145280][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.5.628 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 708.145299][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.145315][ T9566] Call Trace: [ 708.145321][ T9566] [ 708.145329][ T9566] dump_stack_lvl+0x189/0x250 [ 708.145358][ T9566] ? __pfx____ratelimit+0x10/0x10 [ 708.145390][ T9566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.145411][ T9566] ? __pfx__printk+0x10/0x10 [ 708.145442][ T9566] should_fail_ex+0x46c/0x600 [ 708.145468][ T9566] _copy_to_user+0x31/0xb0 [ 708.145490][ T9566] simple_read_from_buffer+0xe1/0x170 [ 708.145515][ T9566] proc_fail_nth_read+0x1b6/0x220 [ 708.145534][ T9566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.145554][ T9566] ? rw_verify_area+0x2ac/0x4e0 [ 708.145572][ T9566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.145589][ T9566] vfs_read+0x206/0xa30 [ 708.145615][ T9566] ? __pfx_vfs_read+0x10/0x10 [ 708.145637][ T9566] ? tipc_setsockopt+0x230/0x970 [ 708.145657][ T9566] ? kmem_cache_free+0x195/0x510 [ 708.145681][ T9566] ? __pfx_tipc_setsockopt+0x10/0x10 [ 708.145707][ T9566] ksys_read+0x14b/0x260 [ 708.145728][ T9566] ? __pfx_ksys_read+0x10/0x10 [ 708.145751][ T9566] ? do_syscall_64+0xbe/0x3b0 [ 708.145770][ T9566] do_syscall_64+0xfa/0x3b0 [ 708.145784][ T9566] ? lockdep_hardirqs_on+0x9c/0x150 [ 708.145805][ T9566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.145822][ T9566] ? clear_bhb_loop+0x60/0xb0 [ 708.145841][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.145861][ T9566] RIP: 0033:0x7fbb32cbd63c [ 708.145876][ T9566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 708.145889][ T9566] RSP: 002b:00007fbb30f26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.145907][ T9566] RAX: ffffffffffffffda RBX: 00007fbb32f05fa0 RCX: 00007fbb32cbd63c [ 708.145919][ T9566] RDX: 000000000000000f RSI: 00007fbb30f260a0 RDI: 0000000000000004 [ 708.145929][ T9566] RBP: 00007fbb30f26090 R08: 0000000000000000 R09: 0000000000000000 [ 708.145939][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.145949][ T9566] R13: 00007fbb32f06038 R14: 00007fbb32f05fa0 R15: 00007fff2ee68738 [ 708.145975][ T9566] [ 708.863823][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 709.047882][ T5920] usb 6-1: config 0 has no interfaces? [ 709.049382][ T5920] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 709.049409][ T5920] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 709.049429][ T5920] usb 6-1: Manufacturer: syz [ 709.061415][ T5920] usb 6-1: config 0 descriptor?? [ 709.915576][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.974633][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.997560][ T7396] bond0 (unregistering): Released all slaves [ 710.057056][ T9570] netlink: 48 bytes leftover after parsing attributes in process `syz.5.630'. [ 710.062434][ T10] usb 6-1: USB disconnect, device number 2 [ 710.385535][ T7396] hsr_slave_0: left promiscuous mode [ 710.403885][ T7396] hsr_slave_1: left promiscuous mode [ 710.406248][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.465036][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.313918][ T8929] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 712.485660][ T8929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 712.485694][ T8929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 712.485720][ T8929] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 712.487775][ T8929] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.487817][ T8929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 712.487837][ T8929] usb 6-1: SerialNumber: syz [ 712.502497][ T9579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 712.506407][ T8929] hub 6-1:1.0: bad descriptor, ignoring hub [ 712.506442][ T8929] hub 6-1:1.0: probe with driver hub failed with error -5 [ 712.708303][ T9579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 712.808620][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 713.114710][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 713.734896][ T9582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.333472][ T8929] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 716.375175][ T8929] usb 6-1: USB disconnect, device number 3 [ 716.399483][ T8929] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 716.528972][ T9595] tmpfs: Unknown parameter 'hash' [ 717.300819][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.643135][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.881701][ T9461] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.913275][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.913488][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.093164][ T9468] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.135351][ T9506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 718.201138][ T9506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 718.244106][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.244269][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.255140][ T9506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 718.337275][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.337420][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.344778][ T9506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 718.463162][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.463748][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.270760][ T9506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.397058][ T9639] overlayfs: failed to resolve './file0': -2 [ 719.415592][ T9506] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.562782][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.562929][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.594652][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.594802][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.762220][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.902707][ T9461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.234292][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 720.435332][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.435363][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.435383][ T9] usb 6-1: Product: syz [ 720.435404][ T9] usb 6-1: Manufacturer: syz [ 720.435418][ T9] usb 6-1: SerialNumber: syz [ 720.516425][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 720.729207][ T8929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 720.902677][ T9506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.169431][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.169978][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.239706][ T9468] veth0_vlan: entered promiscuous mode [ 721.324327][ T9468] veth1_vlan: entered promiscuous mode [ 721.335703][ T9461] veth0_vlan: entered promiscuous mode [ 721.387202][ T9461] veth1_vlan: entered promiscuous mode [ 721.461312][ T9656] usb 6-1: USB disconnect, device number 4 [ 721.594288][ T9468] veth0_macvtap: entered promiscuous mode [ 721.655288][ T9468] veth1_macvtap: entered promiscuous mode [ 721.681335][ T9461] veth0_macvtap: entered promiscuous mode [ 721.712928][ T9461] veth1_macvtap: entered promiscuous mode [ 721.815674][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.850047][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.907335][ T9461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.909471][ T1107] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.921250][ T1107] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.937455][ T1107] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.962876][ T1107] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.977274][ T9461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.107164][ T1107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.115137][ T1107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.134310][ T1107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.193688][ T8929] usb 6-1: Service connection timeout for: 257 [ 722.193709][ T8929] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 722.195250][ T8929] ath9k_htc: Failed to initialize the device [ 722.203284][ T1107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.225058][ T9656] usb 6-1: ath9k_htc: USB layer deinitialized [ 722.539168][ T9506] veth0_vlan: entered promiscuous mode [ 722.832764][ T9506] veth1_vlan: entered promiscuous mode [ 722.847500][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.847521][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.081285][ T7383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.081305][ T7383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.193799][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.193820][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.418774][ T7385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.418796][ T7385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.506155][ T9506] veth0_macvtap: entered promiscuous mode [ 723.574656][ T9506] veth1_macvtap: entered promiscuous mode [ 723.642513][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.661414][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.727045][ T6516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.737879][ T6516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.737919][ T6516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.737946][ T6516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.951594][ T9734] tmpfs: Unknown parameter 'hash' [ 725.286176][ T9738] FAULT_INJECTION: forcing a failure. [ 725.286176][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.286210][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.7.649 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 725.286231][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.286242][ T9738] Call Trace: [ 725.286249][ T9738] [ 725.286256][ T9738] dump_stack_lvl+0x189/0x250 [ 725.286285][ T9738] ? __pfx____ratelimit+0x10/0x10 [ 725.286310][ T9738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.286332][ T9738] ? __pfx__printk+0x10/0x10 [ 725.286350][ T9738] ? __might_fault+0xb0/0x130 [ 725.286390][ T9738] should_fail_ex+0x46c/0x600 [ 725.286420][ T9738] _copy_from_user+0x2d/0xb0 [ 725.286442][ T9738] ___sys_sendmsg+0x158/0x2a0 [ 725.286463][ T9738] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.286536][ T9738] ? __fget_files+0x2a/0x420 [ 725.286559][ T9738] ? __fget_files+0x3a6/0x420 [ 725.286590][ T9738] __x64_sys_sendmsg+0x1a1/0x260 [ 725.286611][ T9738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.286639][ T9738] ? __pfx_ksys_write+0x10/0x10 [ 725.286658][ T9738] ? rcu_is_watching+0x15/0xb0 [ 725.286688][ T9738] ? do_syscall_64+0xbe/0x3b0 [ 725.286716][ T9738] do_syscall_64+0xfa/0x3b0 [ 725.286732][ T9738] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.286756][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.286774][ T9738] ? clear_bhb_loop+0x60/0xb0 [ 725.286795][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.286811][ T9738] RIP: 0033:0x7f722273ec29 [ 725.286828][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.286843][ T9738] RSP: 002b:00007f722099e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.286864][ T9738] RAX: ffffffffffffffda RBX: 00007f7222985fa0 RCX: 00007f722273ec29 [ 725.286878][ T9738] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 725.286893][ T9738] RBP: 00007f722099e090 R08: 0000000000000000 R09: 0000000000000000 [ 725.286905][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.286916][ T9738] R13: 00007f7222986038 R14: 00007f7222985fa0 R15: 00007fff23773db8 [ 725.286944][ T9738] [ 726.788135][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.420438][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.605971][ T7385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.605994][ T7385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.712975][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.713746][ T993] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 727.726664][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.734256][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.735432][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.736186][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.937724][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.943762][ T993] usb 7-1: Using ep0 maxpacket: 32 [ 727.960721][ T993] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.960749][ T993] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 727.960774][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 727.960805][ T993] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 727.960827][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.023931][ T993] usb 7-1: config 0 descriptor?? [ 728.347729][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.446388][ T993] hid (null): unknown global tag 0xc [ 728.446410][ T993] hid (null): global environment stack underflow [ 728.486731][ T993] corsair-cpro 0003:1B1C:0C10.0001: unknown global tag 0xc [ 728.486755][ T993] corsair-cpro 0003:1B1C:0C10.0001: item 0 1 1 12 parsing failed [ 728.487740][ T993] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -22 [ 728.585751][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.585772][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.539634][ T9] usb 7-1: USB disconnect, device number 2 [ 729.770106][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.657'. [ 729.770129][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.657'. [ 729.804166][ T5857] Bluetooth: hci0: command tx timeout [ 730.078983][ T9788] tmpfs: Unknown parameter 'hash' [ 730.926188][ T9802] C: renamed from team_slave_0 (while UP) [ 730.967745][ T9802] netlink: 'syz.6.660': attribute type 3 has an invalid length. [ 730.967767][ T9802] netlink: 152 bytes leftover after parsing attributes in process `syz.6.660'. [ 730.968765][ T9802] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 731.180458][ T57] bridge_slave_1: left allmulticast mode [ 731.180490][ T57] bridge_slave_1: left promiscuous mode [ 731.180749][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.355605][ T57] bridge_slave_0: left allmulticast mode [ 731.355637][ T57] bridge_slave_0: left promiscuous mode [ 731.355914][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.883689][ T5857] Bluetooth: hci0: command tx timeout [ 732.333144][ T9819] FAULT_INJECTION: forcing a failure. [ 732.333144][ T9819] name failslab, interval 1, probability 0, space 0, times 1 [ 732.333176][ T9819] CPU: 0 UID: 0 PID: 9819 Comm: syz.6.666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 732.333197][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 732.333209][ T9819] Call Trace: [ 732.333224][ T9819] [ 732.333233][ T9819] dump_stack_lvl+0x189/0x250 [ 732.333261][ T9819] ? __pfx____ratelimit+0x10/0x10 [ 732.333286][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.333309][ T9819] ? __pfx__printk+0x10/0x10 [ 732.333335][ T9819] ? __pfx___might_resched+0x10/0x10 [ 732.333354][ T9819] ? fs_reclaim_acquire+0x7d/0x100 [ 732.333375][ T9819] should_fail_ex+0x46c/0x600 [ 732.333405][ T9819] should_failslab+0xa8/0x100 [ 732.333429][ T9819] __kvmalloc_node_noprof+0x15a/0x550 [ 732.333451][ T9819] ? file_tty_write+0x2e8/0xa30 [ 732.333474][ T9819] ? file_tty_write+0x217/0xa30 [ 732.333506][ T9819] file_tty_write+0x2e8/0xa30 [ 732.333537][ T9819] vfs_write+0x5d5/0xb40 [ 732.333561][ T9819] ? __pfx_tty_write+0x10/0x10 [ 732.333585][ T9819] ? __pfx_vfs_write+0x10/0x10 [ 732.333615][ T9819] ? __fget_files+0x2a/0x420 [ 732.333647][ T9819] ksys_write+0x14b/0x260 [ 732.333671][ T9819] ? __pfx_ksys_write+0x10/0x10 [ 732.333690][ T9819] ? rcu_is_watching+0x15/0xb0 [ 732.333720][ T9819] ? do_syscall_64+0xbe/0x3b0 [ 732.333742][ T9819] do_syscall_64+0xfa/0x3b0 [ 732.333758][ T9819] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.333781][ T9819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.333806][ T9819] ? clear_bhb_loop+0x60/0xb0 [ 732.333829][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.333846][ T9819] RIP: 0033:0x7f617fd4ec29 [ 732.333863][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.333878][ T9819] RSP: 002b:00007f617dfae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.333897][ T9819] RAX: ffffffffffffffda RBX: 00007f617ff95fa0 RCX: 00007f617fd4ec29 [ 732.333911][ T9819] RDX: 0000000000001066 RSI: 0000200000001640 RDI: 0000000000000003 [ 732.333923][ T9819] RBP: 00007f617dfae090 R08: 0000000000000000 R09: 0000000000000000 [ 732.333934][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.333946][ T9819] R13: 00007f617ff96038 R14: 00007f617ff95fa0 R15: 00007ffde56e00f8 [ 732.333975][ T9819] [ 732.981385][ T9824] ======================================================= [ 732.981385][ T9824] WARNING: The mand mount option has been deprecated and [ 732.981385][ T9824] and is ignored by this kernel. Remove the mand [ 732.981385][ T9824] option from the mount to silence this warning. [ 732.981385][ T9824] ======================================================= [ 733.953679][ T5857] Bluetooth: hci0: command tx timeout [ 734.336921][ T9831] FAULT_INJECTION: forcing a failure. [ 734.336921][ T9831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.336955][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.8.671 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.336976][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.336987][ T9831] Call Trace: [ 734.336994][ T9831] [ 734.337002][ T9831] dump_stack_lvl+0x189/0x250 [ 734.337028][ T9831] ? __pfx____ratelimit+0x10/0x10 [ 734.337053][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.337076][ T9831] ? __pfx__printk+0x10/0x10 [ 734.337110][ T9831] should_fail_ex+0x46c/0x600 [ 734.337140][ T9831] _copy_to_user+0x31/0xb0 [ 734.337164][ T9831] simple_read_from_buffer+0xe1/0x170 [ 734.337192][ T9831] proc_fail_nth_read+0x1b6/0x220 [ 734.337214][ T9831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.337234][ T9831] ? rw_verify_area+0x2ac/0x4e0 [ 734.337253][ T9831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.337270][ T9831] vfs_read+0x206/0xa30 [ 734.337299][ T9831] ? __pfx_vfs_read+0x10/0x10 [ 734.337315][ T9831] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 734.337344][ T9831] ? mutex_lock_nested+0x154/0x1d0 [ 734.337363][ T9831] ? fdget_pos+0x253/0x320 [ 734.337394][ T9831] ksys_read+0x14b/0x260 [ 734.337417][ T9831] ? __pfx_ksys_read+0x10/0x10 [ 734.337434][ T9831] ? rcu_is_watching+0x15/0xb0 [ 734.337464][ T9831] ? do_syscall_64+0xbe/0x3b0 [ 734.337485][ T9831] do_syscall_64+0xfa/0x3b0 [ 734.337501][ T9831] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.337523][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.337541][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 734.337563][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.337580][ T9831] RIP: 0033:0x7f6190aad63c [ 734.337596][ T9831] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 734.337611][ T9831] RSP: 002b:00007f618ed16030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.337631][ T9831] RAX: ffffffffffffffda RBX: 00007f6190cf5fa0 RCX: 00007f6190aad63c [ 734.337644][ T9831] RDX: 000000000000000f RSI: 00007f618ed160a0 RDI: 0000000000000004 [ 734.337656][ T9831] RBP: 00007f618ed16090 R08: 0000000000000000 R09: 0000000000000000 [ 734.337668][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.337682][ T9831] R13: 00007f6190cf6038 R14: 00007f6190cf5fa0 R15: 00007ffdc4dc0f68 [ 734.337713][ T9831] [ 734.673165][ T9836] FAULT_INJECTION: forcing a failure. [ 734.673165][ T9836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.673196][ T9836] CPU: 0 UID: 0 PID: 9836 Comm: syz.8.673 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.673216][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.673226][ T9836] Call Trace: [ 734.673233][ T9836] [ 734.673240][ T9836] dump_stack_lvl+0x189/0x250 [ 734.673267][ T9836] ? __pfx____ratelimit+0x10/0x10 [ 734.673292][ T9836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.673314][ T9836] ? __pfx__printk+0x10/0x10 [ 734.673332][ T9836] ? __might_fault+0xb0/0x130 [ 734.673367][ T9836] should_fail_ex+0x46c/0x600 [ 734.673395][ T9836] _copy_from_user+0x2d/0xb0 [ 734.673418][ T9836] do_sys_poll+0x23d/0xed0 [ 734.673456][ T9836] ? __pfx_do_sys_poll+0x10/0x10 [ 734.673547][ T9836] ? rcu_read_lock_any_held+0xb3/0x120 [ 734.673566][ T9836] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 734.673586][ T9836] ? vfs_write+0x965/0xb40 [ 734.673631][ T9836] ? set_user_sigmask+0xc7/0x1b0 [ 734.673652][ T9836] ? __pfx_set_user_sigmask+0x10/0x10 [ 734.673689][ T9836] __se_sys_ppoll+0x1ff/0x260 [ 734.673713][ T9836] ? __pfx___se_sys_ppoll+0x10/0x10 [ 734.673735][ T9836] ? __pfx_ksys_write+0x10/0x10 [ 734.673753][ T9836] ? rcu_is_watching+0x15/0xb0 [ 734.673781][ T9836] ? do_syscall_64+0xbe/0x3b0 [ 734.673797][ T9836] ? __x64_sys_ppoll+0x20/0xc0 [ 734.673821][ T9836] do_syscall_64+0xfa/0x3b0 [ 734.673836][ T9836] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.673858][ T9836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.673873][ T9836] ? clear_bhb_loop+0x60/0xb0 [ 734.673894][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.673911][ T9836] RIP: 0033:0x7f6190aaec29 [ 734.673927][ T9836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.673941][ T9836] RSP: 002b:00007f618ed16038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 734.673967][ T9836] RAX: ffffffffffffffda RBX: 00007f6190cf5fa0 RCX: 00007f6190aaec29 [ 734.673980][ T9836] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 734.673993][ T9836] RBP: 00007f618ed16090 R08: 0000000000000000 R09: 0000000000000000 [ 734.674004][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.674015][ T9836] R13: 00007f6190cf6038 R14: 00007f6190cf5fa0 R15: 00007ffdc4dc0f68 [ 734.674045][ T9836] [ 735.404426][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.466118][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.509447][ T57] bond0 (unregistering): Released all slaves [ 735.947634][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.950726][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.036260][ T5857] Bluetooth: hci0: command tx timeout [ 736.173741][ T993] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 736.313858][ T993] usb 7-1: device descriptor read/64, error -71 [ 736.508708][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.526974][ T9842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.554070][ T993] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 736.684803][ T993] usb 7-1: device descriptor read/64, error -71 [ 736.800223][ T993] usb usb7-port1: attempt power cycle [ 737.143745][ T993] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 737.177938][ T993] usb 7-1: device descriptor read/8, error -71 [ 737.413785][ T993] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 737.438570][ T993] usb 7-1: device descriptor read/8, error -71 [ 737.544052][ T993] usb usb7-port1: unable to enumerate USB device [ 737.687659][ T9859] tmpfs: Unknown parameter 'hash' [ 737.926646][ T5121] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.062379][ T5121] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.151249][ T5121] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.222353][ T5121] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.773957][ T9656] libceph: connect (1)[c::]:6789 error -101 [ 739.774183][ T9656] libceph: mon0 (1)[c::]:6789 connect error [ 739.804524][ T9879] sctp: [Deprecated]: syz.7.685 (pid 9879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.804524][ T9879] Use struct sctp_sack_info instead [ 740.033961][ T993] libceph: connect (1)[c::]:6789 error -101 [ 740.034177][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 740.807274][ T9888] FAULT_INJECTION: forcing a failure. [ 740.807274][ T9888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.807333][ T9888] CPU: 1 UID: 0 PID: 9888 Comm: syz.7.688 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 740.807355][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 740.807367][ T9888] Call Trace: [ 740.807375][ T9888] [ 740.807383][ T9888] dump_stack_lvl+0x189/0x250 [ 740.807412][ T9888] ? __pfx____ratelimit+0x10/0x10 [ 740.807438][ T9888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.807461][ T9888] ? __pfx__printk+0x10/0x10 [ 740.807481][ T9888] ? __might_fault+0xb0/0x130 [ 740.807516][ T9888] should_fail_ex+0x46c/0x600 [ 740.807546][ T9888] _copy_from_user+0x2d/0xb0 [ 740.807569][ T9888] __sys_bpf+0x1ed/0x870 [ 740.807593][ T9888] ? __pfx___sys_bpf+0x10/0x10 [ 740.807644][ T9888] __x64_sys_bpf+0x7c/0x90 [ 740.807665][ T9888] do_syscall_64+0xfa/0x3b0 [ 740.807684][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.807701][ T9888] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 740.807719][ T9888] ? clear_bhb_loop+0x60/0xb0 [ 740.807740][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.807757][ T9888] RIP: 0033:0x7f722273ec29 [ 740.807773][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.807788][ T9888] RSP: 002b:00007f722095c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 740.807816][ T9888] RAX: ffffffffffffffda RBX: 00007f7222986180 RCX: 00007f722273ec29 [ 740.807829][ T9888] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000001c [ 740.807841][ T9888] RBP: 00007f722095c090 R08: 0000000000000000 R09: 0000000000000000 [ 740.807853][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.807864][ T9888] R13: 00007f7222986218 R14: 00007f7222986180 R15: 00007fff23773db8 [ 740.807895][ T9888] [ 741.547657][ T9656] libceph: connect (1)[c::]:6789 error -101 [ 741.547878][ T9656] libceph: mon0 (1)[c::]:6789 connect error [ 741.594012][ T9873] ceph: No mds server is up or the cluster is laggy [ 741.976195][ T57] hsr_slave_0: left promiscuous mode [ 742.040141][ T57] hsr_slave_1: left promiscuous mode [ 742.041070][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.041098][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.095705][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.095736][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.674376][ T57] veth1_macvtap: left promiscuous mode [ 742.674497][ T57] veth0_macvtap: left promiscuous mode [ 742.674810][ T57] veth1_vlan: left promiscuous mode [ 742.675021][ T57] veth0_vlan: left promiscuous mode [ 743.444550][ T9908] comedi comedi0: Minor 3 could not be opened [ 744.796292][ T9163] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 744.973650][ T9163] usb 9-1: Using ep0 maxpacket: 8 [ 744.981300][ T9163] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 744.981325][ T9163] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 744.984656][ T9163] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 744.984685][ T9163] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.984703][ T9163] usb 9-1: Product: syz [ 744.984717][ T9163] usb 9-1: Manufacturer: syz [ 744.984732][ T9163] usb 9-1: SerialNumber: syz [ 745.047875][ T9163] usb 9-1: config 0 descriptor?? [ 746.408786][ T9928] comedi comedi0: Minor 3 could not be opened [ 747.321749][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.321825][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.577140][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.6.704'. [ 747.772443][ T9935] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 748.237560][ T993] libceph: connect (1)[c::]:6789 error -101 [ 748.253472][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 748.258391][ T993] libceph: connect (1)[c::]:6789 error -101 [ 748.259949][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 748.533972][ T993] libceph: connect (1)[c::]:6789 error -101 [ 748.534436][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 749.058716][ T31] libceph: connect (1)[c::]:6789 error -101 [ 749.074374][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 749.481503][ T57] team0 (unregistering): Port device team_slave_1 removed [ 749.734419][ T57] team0 (unregistering): Port device team_slave_0 removed [ 749.954691][ T993] libceph: connect (1)[c::]:6789 error -101 [ 749.955071][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 750.484013][ T9938] ceph: No mds server is up or the cluster is laggy [ 751.944108][ T9163] usb 9-1: USB disconnect, device number 2 [ 752.064763][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 752.510255][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.736664][ T9950] Invalid ELF header magic: != ELF [ 752.827099][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.133055][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.318442][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.655157][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.832409][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.710'. [ 754.120483][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.651881][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.996564][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.692133][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.734274][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.734504][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.734729][ T9763] bridge_slave_0: entered allmulticast mode [ 755.737949][ T9763] bridge_slave_0: entered promiscuous mode [ 755.788165][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.793455][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.905406][ T9992] comedi comedi0: Minor 3 could not be opened [ 755.936260][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.119122][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.239340][ T9763] bridge_slave_1: entered allmulticast mode [ 756.393700][ T9763] bridge_slave_1: entered promiscuous mode [ 756.593687][ T993] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 756.763969][ T993] usb 9-1: Using ep0 maxpacket: 8 [ 756.767731][ T993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 756.767760][ T993] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 756.770650][ T993] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 756.770675][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.770703][ T993] usb 9-1: Product: syz [ 756.770716][ T993] usb 9-1: Manufacturer: syz [ 756.770730][ T993] usb 9-1: SerialNumber: syz [ 756.871973][ T993] usb 9-1: config 0 descriptor?? [ 757.068128][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.167176][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.371671][T10005] tmpfs: Unknown parameter 'hash' [ 758.136695][ T9763] team0: Port device team_slave_0 added [ 758.220609][ T9763] team0: Port device team_slave_1 added [ 758.467535][ T993] usb 9-1: USB disconnect, device number 3 [ 758.620454][ T9564] udevd[9564]: setting owner of /dev/bus/usb/009/003 to uid=0, gid=0 failed: No such file or directory [ 759.363730][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.363742][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.363758][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.386413][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.386430][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.386455][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.844545][ T9763] hsr_slave_0: entered promiscuous mode [ 759.855949][ T9763] hsr_slave_1: entered promiscuous mode [ 759.858732][ T9763] debugfs: 'hsr0' already exists in 'hsr' [ 759.858757][ T9763] Cannot create hsr debugfs directory [ 759.943788][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 760.100299][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 760.106608][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.106641][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.106685][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.106709][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.197331][ T10] usb 7-1: config 0 descriptor?? [ 760.284980][ T37] audit: type=1804 audit(1758490767.719:30): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.730" name="/newroot/24/file0" dev="tmpfs" ino=150 res=1 errno=0 [ 760.657574][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657618][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657646][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657673][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657699][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657725][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657753][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657779][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657806][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.657832][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 760.661111][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 760.718921][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0002/input/input11 [ 761.079096][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.088123][T10030] comedi comedi0: Minor 3 could not be opened [ 762.219930][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.253759][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.299054][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.067160][ T10] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 763.281784][ T9656] usb 7-1: USB disconnect, device number 7 [ 763.557772][T10035] fido_id[10035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 764.516468][ T9763] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 764.574606][ T9763] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 764.674290][ T9763] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 764.900402][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.910780][ T9763] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 765.204628][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.269050][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.313284][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.314375][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.381112][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.381291][ T7383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.625410][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.678091][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.093284][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.193476][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.666141][T10090] futex_wake_op: syz.7.740 tries to shift op by -1; fix this program [ 768.726007][T10090] can0: slcan on ptm0. [ 768.757124][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.740'. [ 768.858998][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.424598][T10115] comedi comedi0: Minor 3 could not be opened [ 771.353717][ T5845] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 771.399135][T10089] can0 (unregistered): slcan off ptm0. [ 771.503679][ T5845] usb 9-1: Using ep0 maxpacket: 8 [ 771.505601][ T5845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 771.505627][ T5845] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 771.509598][ T5845] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 771.509625][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.509646][ T5845] usb 9-1: Product: syz [ 771.509660][ T5845] usb 9-1: Manufacturer: syz [ 771.509681][ T5845] usb 9-1: SerialNumber: syz [ 771.523354][ T5845] usb 9-1: config 0 descriptor?? [ 773.239504][ T5845] usb 9-1: USB disconnect, device number 4 [ 773.630619][ T9763] veth0_vlan: entered promiscuous mode [ 773.664378][T10152] tmpfs: Unknown parameter 'hash' [ 773.682012][ T9763] veth1_vlan: entered promiscuous mode [ 773.723272][ T9763] veth0_macvtap: entered promiscuous mode [ 773.735354][ T9763] veth1_macvtap: entered promiscuous mode [ 773.760360][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.774761][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.889339][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.406940][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.572751][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.700341][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.819684][ T5121] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.851650][ T5121] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.852546][ T5121] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.853371][ T5121] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.146801][T10163] binder: 10161:10163 ioctl 805c4d65 200000000000 returned -22 [ 775.495918][T10173] FAULT_INJECTION: forcing a failure. [ 775.495918][T10173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.495951][T10173] CPU: 1 UID: 0 PID: 10173 Comm: syz.7.756 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 775.495973][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.495984][T10173] Call Trace: [ 775.495991][T10173] [ 775.495999][T10173] dump_stack_lvl+0x189/0x250 [ 775.496027][T10173] ? __pfx____ratelimit+0x10/0x10 [ 775.496052][T10173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.496074][T10173] ? __pfx__printk+0x10/0x10 [ 775.496094][T10173] ? __might_fault+0xb0/0x130 [ 775.496128][T10173] should_fail_ex+0x46c/0x600 [ 775.496158][T10173] _copy_from_user+0x2d/0xb0 [ 775.496180][T10173] ___sys_sendmsg+0x158/0x2a0 [ 775.496202][T10173] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.496257][T10173] ? __fget_files+0x2a/0x420 [ 775.496279][T10173] ? __fget_files+0x3a6/0x420 [ 775.496313][T10173] __x64_sys_sendmsg+0x1a1/0x260 [ 775.496334][T10173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.496361][T10173] ? __pfx_ksys_write+0x10/0x10 [ 775.496380][T10173] ? rcu_is_watching+0x15/0xb0 [ 775.496410][T10173] ? do_syscall_64+0xbe/0x3b0 [ 775.496431][T10173] do_syscall_64+0xfa/0x3b0 [ 775.496446][T10173] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.496469][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.496493][T10173] ? clear_bhb_loop+0x60/0xb0 [ 775.496515][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.496532][T10173] RIP: 0033:0x7f722273ec29 [ 775.496548][T10173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.496563][T10173] RSP: 002b:00007f722099e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.496582][T10173] RAX: ffffffffffffffda RBX: 00007f7222985fa0 RCX: 00007f722273ec29 [ 775.496595][T10173] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 775.496607][T10173] RBP: 00007f722099e090 R08: 0000000000000000 R09: 0000000000000000 [ 775.496618][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.496630][T10173] R13: 00007f7222986038 R14: 00007f7222985fa0 R15: 00007fff23773db8 [ 775.496655][T10173] [ 775.509667][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.509686][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.865835][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.692838][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.833282][T10186] Oops: general protection fault, probably for non-canonical address 0xdffffc000000014b: 0000 [#1] SMP KASAN PTI [ 776.833308][T10186] KASAN: null-ptr-deref in range [0x0000000000000a58-0x0000000000000a5f] [ 776.833327][T10186] CPU: 0 UID: 0 PID: 10186 Comm: syz.6.758 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 776.833350][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.833363][T10186] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 776.833395][T10186] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 776.833416][T10186] RSP: 0018:ffffc9000577f7e0 EFLAGS: 00010006 [ 776.833434][T10186] RAX: dffffc0000000000 RBX: ffffffff8afa8087 RCX: 7df730b338c51300 [ 776.833450][T10186] RDX: 0000000000000000 RSI: ffffffff8afa8087 RDI: 000000000000014b [ 776.833463][T10186] RBP: ffffffff819094a7 R08: 0000000000000001 R09: 0000000000000000 [ 776.833476][T10186] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 [ 776.833492][T10186] R13: 0000000000000a58 R14: 0000000000000a58 R15: 0000000000000001 [ 776.833502][T10186] FS: 00007f617df8d6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 776.833518][T10186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.833532][T10186] CR2: 00007f617df8cf98 CR3: 00000000399dc000 CR4: 00000000003526f0 [ 776.833549][T10186] Call Trace: [ 776.833556][T10186] [ 776.833563][T10186] __kasan_check_byte+0x12/0x40 [ 776.833597][T10186] lock_acquire+0x8d/0x360 [ 776.833622][T10186] ? preempt_schedule_common+0x83/0xd0 [ 776.833652][T10186] _raw_spin_lock_irqsave+0xa7/0xf0 [ 776.833677][T10186] ? try_to_wake_up+0x67/0x12b0 [ 776.833699][T10186] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 776.833725][T10186] ? rcuwait_wake_up+0x1c/0x230 [ 776.833744][T10186] try_to_wake_up+0x67/0x12b0 [ 776.833767][T10186] ? rcuwait_wake_up+0x1c/0x230 [ 776.833783][T10186] ? rcuwait_wake_up+0x1c/0x230 [ 776.833798][T10186] ? rcuwait_wake_up+0x1c/0x230 [ 776.833816][T10186] requeue_pi_wake_futex+0x24b/0x2f0 [ 776.833842][T10186] ? __pfx_requeue_pi_wake_futex+0x10/0x10 [ 776.833869][T10186] futex_requeue+0x135f/0x1870 [ 776.833894][T10186] ? css_rstat_updated+0x23a/0x4f0 [ 776.833922][T10186] ? __pfx_css_rstat_updated+0x10/0x10 [ 776.833950][T10186] ? __pfx_futex_requeue+0x10/0x10 [ 776.833974][T10186] ? count_memcg_event_mm+0x21/0x260 [ 776.834001][T10186] ? count_memcg_event_mm+0x21/0x260 [ 776.834026][T10186] ? count_memcg_event_mm+0x21/0x260 [ 776.834052][T10186] ? handle_mm_fault+0x30eb/0x3400 [ 776.834077][T10186] ? reacquire_held_locks+0x127/0x1d0 [ 776.834108][T10186] do_futex+0x362/0x420 [ 776.834131][T10186] ? __pfx_do_futex+0x10/0x10 [ 776.834150][T10186] ? lock_vma_under_rcu+0xdf/0x3d0 [ 776.834171][T10186] __se_sys_futex+0x36f/0x400 [ 776.834194][T10186] ? __pfx___se_sys_futex+0x10/0x10 [ 776.834218][T10186] ? __x64_sys_futex+0x21/0xf0 [ 776.834239][T10186] do_syscall_64+0xfa/0x3b0 [ 776.834256][T10186] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.834281][T10186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.834300][T10186] ? clear_bhb_loop+0x60/0xb0 [ 776.834319][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.834337][T10186] RIP: 0033:0x7f617fd4ec29 [ 776.834353][T10186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.834369][T10186] RSP: 002b:00007f617df8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 776.834388][T10186] RAX: ffffffffffffffda RBX: 00007f617ff96090 RCX: 00007f617fd4ec29 [ 776.834403][T10186] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 776.834415][T10186] RBP: 00007f617fdd1e41 R08: 0000200000048000 R09: 0000000000000000 [ 776.834427][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.834439][T10186] R13: 00007f617ff96128 R14: 00007f617ff96090 R15: 00007ffde56e00f8 [ 776.834459][T10186] [ 776.834475][T10186] Modules linked in: [ 776.834494][T10186] ---[ end trace 0000000000000000 ]--- [ 776.834507][T10186] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 776.834535][T10186] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 776.834550][T10186] RSP: 0018:ffffc9000577f7e0 EFLAGS: 00010006 [ 776.834573][T10186] RAX: dffffc0000000000 RBX: ffffffff8afa8087 RCX: 7df730b338c51300 [ 776.834589][T10186] RDX: 0000000000000000 RSI: ffffffff8afa8087 RDI: 000000000000014b [ 776.834603][T10186] RBP: ffffffff819094a7 R08: 0000000000000001 R09: 0000000000000000 [ 776.834615][T10186] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 [ 776.834628][T10186] R13: 0000000000000a58 R14: 0000000000000a58 R15: 0000000000000001 [ 776.834640][T10186] FS: 00007f617df8d6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 776.834657][T10186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.834671][T10186] CR2: 00007f617df8cf98 CR3: 00000000399dc000 CR4: 00000000003526f0 [ 776.834689][T10186] Kernel panic - not syncing: Fatal exception [ 776.834986][T10186] Kernel Offset: disabled