last executing test programs: 13m5.410186477s ago: executing program 1 (id=2): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0x5, 0x9, 0x40, 0x7, 0x100, 0x5, 0x5}, 0x0, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x1000, 0xfffffffe, @mcast2, 0x10}, 0x1c) 12m49.0191418s ago: executing program 32 (id=2): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0x5, 0x9, 0x40, 0x7, 0x100, 0x5, 0x5}, 0x0, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x1000, 0xfffffffe, @mcast2, 0x10}, 0x1c) 10m58.663373118s ago: executing program 3 (id=104): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) 10m54.018445055s ago: executing program 2 (id=107): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) getgroups(0x449a065a, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) shutdown(r4, 0x1) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r7, &(0x7f0000002580)={0x1e0, 0x0, r8, [{0x1400000000000007, 0x1000000, 0x1b7, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00J\xf4\xa9\xd02S\fZ\xfb\xfc !e\x0e/\xeb\xc5\xfa\xe3\xf5\x9e\x91\xadJ\xbd+-n\xb4\xb8a4\xbc\xdf\x1d\xd8\xc1D\xff|G$\xf6\r\xf3\xad5O~\xa9q\t\xb4\x83\n\x06f\xf0\xb3\xa6\x04\xa7\xec\xfdz\xf3\xdaX\xc1SA\xe4x\xa1\xd9j\xaa\xbdT\xbe\xc7\x94\xa8\xe5w\x97\x11\b\f\xfc\xe6\x9ax\x11\x03R\x81\xc9\x90\x1fQ\xf7\xae(h\xd2\x8fj\tp\xf8VdY0\xa8\xc6|M?2J\x03\xff\xfaI\x9av\xf6^\x01R\xce@\xb4\xe5\b\x00!To\xdb}\xdd\x9d&|L+U\xb2\x10\xaeo\xe6\xf5\xcf\xb2\xb1\x10\x84\xd0\"\x96\xa8FstV\xb5:\xd7\x8cE\x95\x0e\fgJ\xba\xee\x17\x8b\xc2\xc1<@c\xc1\a\x17\b\x94\xb2\x06\xfb\x8e4\x0f\xcaT\xe1M\x98\x06M|\xa9\xb7\x9a\x82\xf4'}]}, 0x1e0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 10m53.990290458s ago: executing program 4 (id=108): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000440)="0000000100000002ff6900000000000200d2f83195d8ba9bf85a00001403000000dcdc2850b536f0a31066436d806ac96919cccfc48ef7a2", 0x38, r5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r6, 0xfffffff9, 0x0, 0x30, 0x0, @ib={0x1b, 0xff, 0x3, {"8d775365b59014ad7dcd9de1e562753f"}, 0x7, 0x9, 0xc51}, @ib={0x1b, 0x400, 0x0, {"5401fe3df720d9d8d6e6854ac10e40ab"}, 0x3, 0xe4, 0xfffffffffffffffd}}}, 0xfffffffffffffecd) close(r3) setuid(0xee01) chdir(0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000000)=0x8000, 0x4) syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22000600) socket$xdp(0x2c, 0x3, 0x0) unshare(0x40080) 10m51.426335299s ago: executing program 3 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'lo\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "77c8"}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 10m47.927921958s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) unshare(0x2040400) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r5, &(0x7f0000000840)=""/40, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffc01, 0xfffff000, 0xb) 10m47.92736202s ago: executing program 3 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$nl_generic(r0, 0x0, 0x4002000) 10m47.864076306s ago: executing program 4 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x180) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="250000000000000003000000000000000000010000000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1ff, 0x1, 0xdddd0000, 0x1000, &(0x7f000067d000/0x1000)=nil}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x2}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r8, 0xc008aec1, &(0x7f00000001c0)={0xa00}) socket$inet_tcp(0x2, 0x1, 0x0) 10m43.734231734s ago: executing program 2 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000004000085000000060000001853000006000000000000000000000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x6, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x4000}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='btrfs_sync_fs\x00', r0, 0x0, 0x8000000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ftruncate(r6, 0x8001) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r7, 0x80044944, &(0x7f0000001040)) gettid() 10m43.725263656s ago: executing program 4 (id=115): r0 = memfd_create(0x0, 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES8=r1, @ANYRES64=r3, @ANYRES32=r1, @ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x85, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x3}) userfaultfd(0x1) 10m42.027353323s ago: executing program 2 (id=117): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) geteuid() r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r6, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r7, 0xee00, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x107, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x10000840}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 10m41.979860407s ago: executing program 3 (id=118): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r1, 0x2285, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2024) openat$ppp(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) write$FUSE_LK(r3, &(0x7f0000002240)={0x28, 0x0, r4, {{0x6, 0x7fffffffffffffff, 0x2, r5}}}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa1000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) syz_usb_connect(0x3, 0x61, &(0x7f0000002340)={{0x12, 0x1, 0x110, 0xd, 0xbf, 0x17, 0x8, 0x403, 0xbdc8, 0x6399, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x94, 0xb0, 0xa7, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x3, 0x7, 0xc2, 0x1, 0x5}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x3, 0xfe}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x1, 0x4, [0x3, 0x6, 0x1, 0xa], 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x9, "1293b5acb496"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x5, "f10b"}]}]}}]}}]}}, 0x0) 10m40.784181434s ago: executing program 4 (id=120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 10m35.775511568s ago: executing program 2 (id=121): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, 0x0, 0x0) connect$can_j1939(r2, 0x0, 0x0) sendmsg$can_j1939(r2, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xff}, 0xfe}, 0x18) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x30) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x7, 0xb}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r5, 0x5, 0x7, 0x1ff, 0x0, [], [0xfffffe76, 0x10, 0x7fffffff, 0x6], [0x2, 0xfffffff4, 0x6, 0x1], [0x7, 0x3, 0x6, 0x3]}) timer_settime(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c91e0, 0x0) 10m34.869163113s ago: executing program 3 (id=122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'lo\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "77c8"}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 10m33.979504684s ago: executing program 4 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x180) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="250000000000000003000000000000000000010000000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1ff, 0x1, 0xdddd0000, 0x1000, &(0x7f000067d000/0x1000)=nil}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x2}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r8, 0xc008aec1, &(0x7f00000001c0)={0xa00}) socket$nl_netfilter(0x10, 0x3, 0xc) 10m32.230323016s ago: executing program 2 (id=126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x31) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1382, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000100100000a0000002900"], 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$inet6(0xa, 0x6, 0x4) 10m29.814576716s ago: executing program 3 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$nl_generic(r0, 0x0, 0x4002000) 10m29.543237787s ago: executing program 4 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000009ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000002fc0100000000000000000000000000010900"/784], 0x310) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r7, r6, 0xff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebd7627c020f01000000000081030000000000000095a078ac3442dfc47ab257f4e5bfa5d53ab69623a3ff05e2be169a4ebea729cc3b50779e84785d9649c4e2436e0e70c4ea42367668ce1574497b6b14de3312a882c3eb6a49378ab2aa7639fcf3a12f4bc1ae4603f046fcddab0ef38815f20000ab7bb70d796c9ac9c800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8000, 0x0, @mcast2}, {0xa, 0x4e21, 0x7, @local, 0xfffffff2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r9}}, 0x48) 10m14.858336644s ago: executing program 33 (id=126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x31) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1382, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000100100000a0000002900"], 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$inet6(0xa, 0x6, 0x4) 10m14.585899941s ago: executing program 34 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$nl_generic(r0, 0x0, 0x4002000) 10m14.336462521s ago: executing program 35 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000009ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000002fc0100000000000000000000000000010900"/784], 0x310) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r7, r6, 0xff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebd7627c020f01000000000081030000000000000095a078ac3442dfc47ab257f4e5bfa5d53ab69623a3ff05e2be169a4ebea729cc3b50779e84785d9649c4e2436e0e70c4ea42367668ce1574497b6b14de3312a882c3eb6a49378ab2aa7639fcf3a12f4bc1ae4603f046fcddab0ef38815f20000ab7bb70d796c9ac9c800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8000, 0x0, @mcast2}, {0xa, 0x4e21, 0x7, @local, 0xfffffff2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r9}}, 0x48) 4m38.126947106s ago: executing program 0 (id=310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x20040600) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'lo\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "77c8"}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4m35.035085391s ago: executing program 0 (id=315): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e03fb0520"], 0x7) 4m34.846052526s ago: executing program 0 (id=317): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{}, {0x0, 0xc8, 0x81}}}}, 0xb) 4m34.497051424s ago: executing program 0 (id=320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$vcsa(0x0, 0x200, 0x0) write$dsp(r5, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 4m20.668928459s ago: executing program 0 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2, 0xaa}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r12, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07, 0x0, 0xff1f0000}, 0x2000000) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) r14 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r14, 0x4018f50b, &(0x7f0000000140)={0x0, 0xd, 0x91}) splice(r4, 0x0, r13, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m16.665062416s ago: executing program 0 (id=358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$vcsa(0x0, 0x200, 0x0) write$dsp(r5, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 3m58.829480416s ago: executing program 36 (id=358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$vcsa(0x0, 0x200, 0x0) write$dsp(r5, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 3m35.77663535s ago: executing program 7 (id=449): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00') lseek(r0, 0x4, 0x0) 3m35.016714181s ago: executing program 7 (id=450): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xfffffe7fffffffff) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 3m31.410168661s ago: executing program 7 (id=453): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r10 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000000240)={&(0x7f00000001c0)=@llc={0x1a, 0x2, 0x4, 0x2, 0x9, 0x4, @random="aaf9c84e64cf"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000940)=[{0x1010, 0x117, 0xa6, "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"}, {0x10, 0x1a, 0x9}, {0x20, 0x117, 0x401, "cdb1d35b13cf8925f01992e11d9b"}], 0x1040}, 0x400c800) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3m22.300200251s ago: executing program 7 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x180) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="250000000000000003000000000000000000010000000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1ff, 0x1, 0xdddd0000, 0x1000, &(0x7f000067d000/0x1000)=nil}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0xc008aec1, &(0x7f00000001c0)={0xa00}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m19.675411061s ago: executing program 7 (id=464): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4004004) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f00000000c0)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) lstat(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./cgroup\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, r4, r5, r6, 0x13, 0x6}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xeb4f, 0xff, 0x4, 0x8, r2, r2}) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) capset(&(0x7f0000000040)={0x20071026}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r10, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) 3m16.848091706s ago: executing program 7 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x50f, 0x1, 0x8100}}]}]}]}]}, 0x54}}, 0x800) 3m1.381358547s ago: executing program 37 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x50f, 0x1, 0x8100}}]}]}]}]}, 0x54}}, 0x800) 32.186601751s ago: executing program 5 (id=814): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r10 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000000240)={&(0x7f00000001c0)=@llc={0x1a, 0x2, 0x4, 0x2, 0x9, 0x4, @random="aaf9c84e64cf"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000940)=[{0x1010, 0x117, 0xa6, "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"}, {0x10, 0x1a, 0x9}, {0x20, 0x117, 0x401, "cdb1d35b13cf8925f01992e11d9b"}], 0x1040}, 0x400c800) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 29.709274517s ago: executing program 5 (id=816): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.086196767s ago: executing program 8 (id=820): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000180)={0x4, 0x1, 0xfffffff8, 0xc121, 0x3, 0x2, 0x10}) 26.789965239s ago: executing program 8 (id=821): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000014}) 25.591380696s ago: executing program 5 (id=822): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 25.434745781s ago: executing program 8 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd) 24.39664808s ago: executing program 6 (id=825): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "1e9eaaf2"}]}}, 0x0}, 0x0) 22.626003397s ago: executing program 6 (id=826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.536742987s ago: executing program 6 (id=827): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r9 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f00000001c0)=@llc={0x1a, 0x2, 0x4, 0x2, 0x9, 0x4, @random="aaf9c84e64cf"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000940)=[{0x1010, 0x117, 0xa6, "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"}, {0x10, 0x1a, 0x9}, {0x20, 0x117, 0x401, "cdb1d35b13cf8925f01992e11d9b"}], 0x1040}, 0x400c800) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 21.387588861s ago: executing program 6 (id=828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r5}, 0x401, 0x2, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 20.339585675s ago: executing program 5 (id=829): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="3f010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 19.884917877s ago: executing program 8 (id=830): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 19.318714125s ago: executing program 6 (id=831): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1c8}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f0000000140)="008e1d620ca7ea7fef26a8545ddd6173b62d035595c38060085344d20414858b2881f1", 0x23}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 18.937976856s ago: executing program 6 (id=832): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000200), 0x80) keyctl$invalidate(0x15, r0) memfd_create(&(0x7f0000000080)='\xb4^!@\\%\x00', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/anycast6\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x4048aec9, &(0x7f0000000080)={[{0x8, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7e}, {0x0, 0x4, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd}], 0x2000003}) 18.935388255s ago: executing program 8 (id=833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 18.190410489s ago: executing program 8 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 18.068481507s ago: executing program 5 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0}, 0x48) 17.776034305s ago: executing program 5 (id=836): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r9 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f00000001c0)=@llc={0x1a, 0x2, 0x4, 0x2, 0x9, 0x4, @random="aaf9c84e64cf"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000940)=[{0x1010, 0x117, 0xa6, "bf1b9286b035090cbb13f7a2740891e4a06cf6d652b59bffc5bb23d26f0713ba2527cd133b0de05383d942ef18d185d5ec072c4756293c0719e1d0b2266dfd4b2e3df6ecef270f5087931136d16c1bc752dd7a8e90c74ad629615db387e890c1c5e211f3d9f36a71bfce72918b96546c3380569b1becdbeb9a0332567c3a6e3147b9223d4e226f4abe21e2bf7964a08945c76bd78a4a3ca77e987485166d78e21459f6395a6e019c9acdd8d8008db18f4d39aad5e5dd922cddbc5b74931c066d338f3763b3267a7177724c41e2decbf4720a3488bc0f76226e31c4f15f9425398df8f83978d6c197b04e13c8dca6553e0317ee5b162f0b0cdc8e4b317937bfaef399dd0f53588b83c5e7fa55e6eb52256693d0969fa68a5f8f621e96920bc88f1bd947dd6418db95d3083f57721440d12f7eb8d2ab38e16053b66401ec69e1264755d713f4b5bf041c876a834651c88556dd60cb6815bd197efaa6f0721789be4ab8fb2624ea78fb2945d9d26194b2864840e3eaac983dbaa66179f2c4a411a69c2bee0c5e231a09b73e0e273287250ba3eba79aba390ea6d6d83e1d9026e64bf8eb3d672c3370d828adf3b63cc03dcda874fe1ae8d57c2595062be965fdf7814458671bd691dfda324c83e5becb17350354cfb9c8dcf26ead62136dcf90aabb2611da62c367b0b7c1529e387a5f610d797109c592e135471c7519d2386cf8d53793db742a55a7bf4755e4aed79bade242bfc13d7c298ab205e8ae1db534cc96d6379b7b7b6edab8318919643c4586cc84958613d0f5ebebc7f8bb07eb79c4c9936165417aa54aa90a4c7fb266bbef468e18a8793249b4016f5db6af9fd9d088a0e96411017221792d759d1af804fb292b408e4edbc0ea3eb74c1748da754ed8ad16531ff88cebc093e85191c34a7afeadc87244359a2b33ea87f034952fd2544999d797c2c98a9639e70f0f8aacee3828727acd2f77099a3a86607b9ecc8202afb967d80e53473cf40897b780ba692a019bf48208b17c7ade65a3001f2cfc5eef25911ddb3826b08f8f218cd17019ef8392e865acff0e2e4f35d8b4a6f24275666fab6433937dd015f54e1a5feafb460fe169c152bd82847ba3c978cadd08e17279237464f79a0124522991fb80283fa00bbf588bf29148eaf57a78f8617f13c57ccfffe9918c9b39dac198ad40b8c8e182bc7b7185b12637567ef9e92569e2df6c28fcd1becc7ae86ab39c9af1ff371b717f04b88bd2b0db4b0c2f25c0941702721ef366b756bd46f6a48a5d1b467e5666e8ff58d9ec3f77f7ea3dfba471c15385dc67faf49e47bb550b36865eb52931aa6540ac80e30890e0d78127136a38f024999eb8a87232df1359c20f5053ca4393a414714b0ded9d6dfa5c5c91600555f0a752a622ba34b8ec8dd58845389f4996c04c56eadefc88ceadb1b3b8bc12dbc0f914981dd836dc42eb1475e3c0eaea658a933ab0b913d641dfb317566b409f77fd3f523197b4d1ff888744e1120b354133ec515665476338bff922a53c4f507a6d83bf3ba9539b882ef4d85a6ef885ce4261e01fd8a91152adf904a616ef5cbcf6e7d11844f97c1c0455949707aca2a0aaa5255c70d262978768d06788d66eb6edfa7393440339f4b04875ac8d18ac8986eee851a21db601fd8f0321e4dadfbca762a5a283f78bf7a950f9eaea00dafcfe0fb0aef50ea57104ab1057e6561296bb66b3cef9107e2dfacf85233c96797f73745fa2e62a7ff75b33385e2900e197b39ca05c0ca1d6eefebea7d68f0dcec834dcecd256a5bca82122055a998139212d8215e18018e397de375da2f0e584558e298ba1b812bc3dbe8ae0f8e670a4523e99e781ecad1b6df85f6d81816ddb93fa05f0cfab751974ffa7b4403f0130c75e0e247806f5d785c491693c95bfe138df1a82cd6af988733dd5e61bcfd567303376f55eefee9e5f6d0ce400ec26d1c57e48a4539dc09c4595cf329c787926c6150f9cbf5e94248c2883e9f9a729e12d0e78ec04db2ef9b46da9aaf4c052957b88708075eddbf87799abd0bbeac55c9c3719e856c9ba4e09f0937563ccc96d02f8d0cd7d29de79580d9e9d0f8e02c7919a73f1857fd55c8a5d2090193a3f089772d92cb5602c212381b94e7edc7f67ca960b768d9b8499c02cf9621898e393aa2f2ed18b1911fac7dfa781ba84cb2b9e62da03f9e911f8bb19054bc8dae00a1df446d1fed4972515ffcddb33c229034866afe5f46f8a1a16c954f1cd87d75d83e6a128aa036361a64a87ecece08998f113b5f903758fc484367849264e7080db4d77375a04473c7487b3b8a605ba3af2c46d27ae71c52f7e1284634f408c9dce04d07a3b076fc024cdd9b045a7aebb59b266660207c2cce4854a282548f7a44fb0ceb4965777b727a8460318ed4521d8dd698f591ffe2ea5719e51e6ab4682528409312d5045d7535f842b7d0f6f6a18a71d2c3d4f8c7501c1de0625e5fcb9b58c0d063689b9c90dd2d2cc1d32e7c88f865b2bced3162e1fb285db3359bc3b0f2d3cadf985277b431025e44d1972df91bae0ddc79abf82fe73effe67119761e70415a8fc0a673ff38a9e29875e53607d9253e9b729538f8149372b0434a4c0b6e4070cf196457819d4712a80db55a09260d3737e4fc00c82c94fe2856e19abc57329967a1b5927a2bc941a3a0bd2c50f05d919f06cc184faff68ab9f16a90c788babee145c8d3327dd8006e5bc1c1f98d4f49f25b021e4bfcc821af046d8751968d6de6cf8df479176ef86bee52a308469339c1e8fe0eaf4fd8e61d3ee5576544fd3c77f47be5e9bb2559e3e0c7c0b009b285cceeeed8b6d229120a4f735357f2744dd8bd174189d84aad7ad4fc72ac82d7812e264826d37b67cc68c70c763510006d018aacc8ec8ca8241c5f9b5597328159376b4d3316bd68689b1178675d762875d07a61418909d10fe8c6ad929fc5af69b28d167f19c131bb863c667ead256be0949e44a76113a98b608849b6e57c25a94a8762f05a5133789c2636f00d0c1315e8d8f4987eb2a4a0a67519ab80e9f7622808c141440a8075df51a15f0ba55d6d7ed8892d783c7da9c6ec91af2732870a05d9e76a3fd7bce4e8dbc199f0539fc9ea38912c82e46b96ffa79dec988cf61da53fcbc647e0ac015d42e65067dfca18ea065cb5572a7b535678d28473ac276823945763c712016a5dfcaaa4b0fd11563643eae125946d2d6c852b28ee8e68d46e54d9e599ee8adcf20a5f316db96e10f6a591caa157dba95b4d292a041ba8f5fef16d87200661c68ec0b7c08dd7c5942e3bc8b2690f002049820819e1df58ec4ad931b15d96ea336e489238eb50a602c24e19b74c46ee039eb4b8ff7702e828ddc601269289615cc10c4bfab9b936f531acff17216cbf784a3354300bab09ef8f94c1248fbda28b21bfeb282bc2348732ce8cb079fdfd18fbc487a93830d3f8e0140171421bbf3dfd0128ad1d67a346237a21790786ea64f2ae35cab00d8ac7bee639595927d293fde1425a43db166dcf5ad245e201225fa21a7f4740b571591fb62e9c554da52554c119aa1d2e6b08adec6789d19f127fb61fbea421f04713b1486226ddedb60c21da1c8ccf6bfc5fa3ec59430cf8d6e6bb44bd677800f32009e4b4411a7a4df8d830948e6ef14820fa6ad74742456045a7568177da305d82830d047f9482210a6fbce5601c561d3199622abb99984465185abb3ebbb2e1d4391a74ed32b41356da9b3aee0f777fe9a37a8efda34abd7dbc5c51e32d3b027e607ed015d499c54a89b29aa1a62420ea59e0d64a2e50bd9b41df428aedcb3bf704593d9681bba98355523334dea421689724bb7284eb972fb636c80e293310fdcd866a8bca3aff869b399e42c6c3137390a38eb81bfdd88909078cc3344b4d4e76809c16407286f1a153797aecae22e03198e396d8d2f76c01f67030dca43870e2855697619e83fb5b77a9bef7b1ca314c4274e50b4974a5b3cfc6a519b589918f6fa29123a90a3439a1a515473219dd3656aa0b6b95dda461bac5083a86596bb541ce9e5943bfbe32420b3274eb9693d66dee2a03f1af8d9f9ad5d3ee753a8b967347b49a1465367f679c18f829d3d879cad516450e6d7e9403b53ef9a87d6eeb10f1bf0415014c4e641cefbaf2df20aa39313914d4ba0edc91dc8c710f106bc39ba233d118942bd3d4082ddb93ddfe351e1089ed6fcf38380e41ba47b6ccff3e985b5e0bf648582c022171b75038529accad9be879a349b9ff69a9fdd0b2a31851d80e65ce790a38f43fa89578c2801cf34116044d8b72b628fca1abc0a702f4431a25a29800e47d3a939d988fea5beb140e5e2e5bf376a9914269bc8289791785abde1ceded7286f61a0a80202358fc51a594a255f8ac4ea8f8f5dab89b399354f30f5910cb32757b64e236959f07581cdb903d7bc365cdf0e62d32bc0f47ec3884cc17ca0dd167ac17954feac4de67efb644bd710b208b2ccf0419eb49ddcd3e1bff90930735bf2882242041d967c9b2684404645aa8a2cfebf7201885523daeb8c5bb45ef19bbc1f1e8e29e40b9cdee474bcc158dac769f12c3e0cd680708ba0b433e00c6a9d362ec5121b7a06069cd860ea8b973f4b48de55eacb9dea8d16ad28225bdc43cfc54911fce1ebb1c93fe9c066f2369cad98b7f1d73c16fc6d94a89c2c1add0d0d4f96ddb45dd393e27bfb59f0149b7c71b3538bcc0b97db7d2559fc8892dd29ea037d4193cd0061a2c964db7cbe566e67a13b95e45cd7e99e98877f607395799ffb823e5a3fd98ccc276fbdbd2408cdd28f5ac31866f16819caeb44d3eb1771eed77afedef0ced4b9a511d90158c7fb1912e51215ad97c544e1a80e9fdb7a534c23032064633c88034773987857e4768f07430ccba89ad9eb99850c197b4229cfaae0250d2b6bc5bc02bd8ccc76ac38eb49195e06e1d19d72d15a2e160315bfd1412a80aedb495e1d1edd050419b7f6aad8891e5f99f268b816b7c9a13a9f5b268d16da0518bea78d202a3f756dfbc90ced8d1122eee8a7ea846227d1ef35f3daee1b94ab151bfa4e4e9d4773290e608df26a3a59202cc67c6831db19559a1e3d94cb6e01d090c18748fe188423c679c8e19d1d1e9ff832e7bf4a4b38644efafeaa9cc5ed7185d8b8d2aae7c4392ac1dc2fc59dfa64af09d0fec9cae63e334fa07bc8344c170bb01959b0ce299323810a03fe16c706875f4d1363f2a7df2fef6b7bb28e1518e2268b5e3bf334fe663e3edcb360cbed16d5bd53776829840a0cce455666762599105ab85389e3d5b29f08dd0db451cd20e988454e7e086c53c3b3acc36e5cb32fb71c6e36a60626b51e719e316c1f63782631ffded60f358d12e933fbcc227d306e04de9af70fe7e52988244c88dc8d6de28279ad86f3d45f97852c0b1c3a06fa8486cff81fe92acafc5dcb1a59a181958c86ef02d1278093ab97bcb77d56d327326255c81b67b094e5661ceab63a9ebb1dd7357021736067953e12f29aff0a51c171d17fb03d6e01fc92b59c7401046ef26d616fd702a1463711730d79facdf89285cc57bade82bba503f3079540e3f389d67356396007bc0d84884492e3c8682929b1efdfb1fe4d9791a61197ebec0181bf13de9b66ca78053ac01a0da0a579e3fd2d10358d3251dc9b29096ecc678db2db46fc2674fb46a17683dceca41fa2d98f9a1e4fd7cf686dd599bfd91bf3797399c47dd582807a024275bf95d05beb7b6da497562df4ab1d1a2c3fc775bd561b088aebb3725110b4d4684a5a"}, {0x10, 0x1a, 0x9}, {0x20, 0x117, 0x401, "cdb1d35b13cf8925f01992e11d9b"}], 0x1040}, 0x400c800) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3.552256779s ago: executing program 38 (id=832): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000200), 0x80) keyctl$invalidate(0x15, r0) memfd_create(&(0x7f0000000080)='\xb4^!@\\%\x00', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/anycast6\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x4048aec9, &(0x7f0000000080)={[{0x8, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7e}, {0x0, 0x4, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd}], 0x2000003}) 962.833µs ago: executing program 39 (id=836): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r9 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f00000001c0)=@llc={0x1a, 0x2, 0x4, 0x2, 0x9, 0x4, @random="aaf9c84e64cf"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000940)=[{0x1010, 0x117, 0xa6, "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"}, {0x10, 0x1a, 0x9}, {0x20, 0x117, 0x401, "cdb1d35b13cf8925f01992e11d9b"}], 0x1040}, 0x400c800) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 0s ago: executing program 40 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) kernel console output (not intermixed with test programs): stering): Port device team_slave_0 removed [ 404.843003][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 405.122755][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 408.983550][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 409.738649][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.738799][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.739013][ T7005] bridge_slave_0: entered allmulticast mode [ 409.769453][ T7005] bridge_slave_0: entered promiscuous mode [ 409.797545][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.797708][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.798004][ T7005] bridge_slave_1: entered allmulticast mode [ 409.825860][ T7005] bridge_slave_1: entered promiscuous mode [ 409.829875][ T6874] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 410.023881][ T6874] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 410.196335][ T6874] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 410.282106][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.283360][ T6874] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.454802][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.811850][ T7005] team0: Port device team_slave_0 added [ 410.883119][ T7005] team0: Port device team_slave_1 added [ 411.185237][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.185255][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.185285][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.186551][ T6877] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 411.259544][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.259563][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.259593][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.324717][ T6877] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 411.457475][ T6877] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 411.543862][ T6877] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 411.851078][ T7005] hsr_slave_0: entered promiscuous mode [ 411.852615][ T7005] hsr_slave_1: entered promiscuous mode [ 411.853639][ T7005] debugfs: 'hsr0' already exists in 'hsr' [ 411.853665][ T7005] Cannot create hsr debugfs directory [ 412.150695][ T6876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.518497][ T6876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.774435][ T6876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.958579][ T6876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 413.944483][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.155696][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.216657][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.217462][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.266333][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.317409][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.318752][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.722191][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.791541][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.797312][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.798067][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.024329][ T6021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.418205][ T6021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.484977][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.485148][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.813096][ T6021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.877174][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.225518][ T6021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.299601][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.300751][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.485762][ T6349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.498645][ T6349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.512173][ T6349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.526900][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.527072][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.532896][ T6349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.574433][ T6349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.993243][ T6021] bridge_slave_1: left allmulticast mode [ 417.993279][ T6021] bridge_slave_1: left promiscuous mode [ 417.993549][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.163268][ T6021] bridge_slave_0: left allmulticast mode [ 418.163304][ T6021] bridge_slave_0: left promiscuous mode [ 418.163604][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.368735][ T6021] bridge_slave_1: left allmulticast mode [ 418.368773][ T6021] bridge_slave_1: left promiscuous mode [ 418.369041][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.562151][ T6021] bridge_slave_0: left allmulticast mode [ 418.562186][ T6021] bridge_slave_0: left promiscuous mode [ 418.562459][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.608884][ T6349] Bluetooth: hci1: command tx timeout [ 418.616511][ T6349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.628952][ T6349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.630234][ T6349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.684918][ T6349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.699999][ T6349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.719112][ T6021] bridge_slave_1: left allmulticast mode [ 418.719146][ T6021] bridge_slave_1: left promiscuous mode [ 418.719411][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.899681][ T6021] bridge_slave_0: left allmulticast mode [ 418.899715][ T6021] bridge_slave_0: left promiscuous mode [ 418.899991][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.004242][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 419.020789][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 419.023169][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 419.024632][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 419.026111][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 419.038967][ T6021] bridge_slave_0: left allmulticast mode [ 419.038998][ T6021] bridge_slave_0: left promiscuous mode [ 419.039240][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.167633][ T6021] bridge_slave_1: left allmulticast mode [ 419.167667][ T6021] bridge_slave_1: left promiscuous mode [ 419.167949][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.262551][ T6021] bridge_slave_0: left allmulticast mode [ 419.262586][ T6021] bridge_slave_0: left promiscuous mode [ 419.262859][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.954033][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.041803][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.117178][ T6021] bond0 (unregistering): Released all slaves [ 420.690879][ T6349] Bluetooth: hci1: command tx timeout [ 421.000837][ T6349] Bluetooth: hci2: command tx timeout [ 421.091021][ T6349] Bluetooth: hci6: command tx timeout [ 421.673264][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.731553][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.755505][ T6021] bond0 (unregistering): Released all slaves [ 422.002886][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.094408][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.172630][ T6021] bond0 (unregistering): Released all slaves [ 422.378569][ T6021] bond0 (unregistering): Released all slaves [ 422.601850][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.675018][ T6021] bond0 (unregistering): Released all slaves [ 422.760888][ T6349] Bluetooth: hci1: command tx timeout [ 423.080560][ T6349] Bluetooth: hci2: command tx timeout [ 423.173057][ T6349] Bluetooth: hci6: command tx timeout [ 423.325143][ T7005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.373359][ T7005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.419645][ T7005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.480917][ T7005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.730126][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 424.840653][ T6349] Bluetooth: hci1: command tx timeout [ 425.160673][ T6349] Bluetooth: hci2: command tx timeout [ 425.243062][ T6349] Bluetooth: hci6: command tx timeout [ 425.251023][ T6021] hsr_slave_0: left promiscuous mode [ 425.290929][ T6021] hsr_slave_1: left promiscuous mode [ 425.291965][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.351595][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.550957][ T6021] hsr_slave_0: left promiscuous mode [ 425.591041][ T6021] hsr_slave_1: left promiscuous mode [ 425.592062][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.592092][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.656589][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.656624][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.792662][ T6021] veth1_macvtap: left promiscuous mode [ 425.792807][ T6021] veth0_macvtap: left promiscuous mode [ 425.793120][ T6021] veth1_vlan: left promiscuous mode [ 425.793338][ T6021] veth0_vlan: left promiscuous mode [ 426.975204][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 427.113577][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 427.241070][ T6349] Bluetooth: hci2: command tx timeout [ 427.320833][ T6349] Bluetooth: hci6: command tx timeout [ 430.001931][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 430.233257][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 433.987541][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.988044][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.988308][ T7099] bridge_slave_0: entered allmulticast mode [ 433.996263][ T7099] bridge_slave_0: entered promiscuous mode [ 434.082519][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.082691][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.082925][ T7099] bridge_slave_1: entered allmulticast mode [ 434.085836][ T7099] bridge_slave_1: entered promiscuous mode [ 434.535115][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.593862][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.727238][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 434.889052][ T7099] team0: Port device team_slave_0 added [ 434.894404][ T7117] chnl_net:caif_netlink_parms(): no params data found [ 434.948546][ T7099] team0: Port device team_slave_1 added [ 435.536167][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.536185][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.536214][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.627517][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.627535][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.627564][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.102102][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.102250][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.102479][ T7113] bridge_slave_0: entered allmulticast mode [ 436.105804][ T7113] bridge_slave_0: entered promiscuous mode [ 436.392433][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.392858][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.393092][ T7113] bridge_slave_1: entered allmulticast mode [ 436.396029][ T7113] bridge_slave_1: entered promiscuous mode [ 436.407900][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.408066][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.408389][ T7117] bridge_slave_0: entered allmulticast mode [ 436.422466][ T7117] bridge_slave_0: entered promiscuous mode [ 436.714522][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.714684][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.714918][ T7117] bridge_slave_1: entered allmulticast mode [ 436.722014][ T7117] bridge_slave_1: entered promiscuous mode [ 436.754793][ T7099] hsr_slave_0: entered promiscuous mode [ 436.756344][ T7099] hsr_slave_1: entered promiscuous mode [ 436.757382][ T7099] debugfs: 'hsr0' already exists in 'hsr' [ 436.757408][ T7099] Cannot create hsr debugfs directory [ 436.769931][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.097041][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.240256][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.455878][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.673964][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.986303][ T7113] team0: Port device team_slave_0 added [ 438.153158][ T7113] team0: Port device team_slave_1 added [ 438.156509][ T7117] team0: Port device team_slave_0 added [ 438.285388][ T7117] team0: Port device team_slave_1 added [ 438.616933][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.743768][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.743786][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.743814][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.767591][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.767610][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.767643][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.774710][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.774729][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.774774][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.836223][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.836245][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.836278][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.025037][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.025293][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.469746][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.469979][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.593765][ T7113] hsr_slave_0: entered promiscuous mode [ 439.595254][ T7113] hsr_slave_1: entered promiscuous mode [ 439.596278][ T7113] debugfs: 'hsr0' already exists in 'hsr' [ 439.596304][ T7113] Cannot create hsr debugfs directory [ 439.614759][ T7117] hsr_slave_0: entered promiscuous mode [ 439.616424][ T7117] hsr_slave_1: entered promiscuous mode [ 439.617548][ T7117] debugfs: 'hsr0' already exists in 'hsr' [ 439.617577][ T7117] Cannot create hsr debugfs directory [ 442.677049][ T7099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.727422][ T7099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.914508][ T7099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.947289][ T7099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.206492][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.486215][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.565815][ T7005] veth0_vlan: entered promiscuous mode [ 445.608185][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.638732][ T7005] veth1_vlan: entered promiscuous mode [ 445.729969][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.730053][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.751505][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.751735][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.828336][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.828570][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.174727][ T6021] bridge_slave_1: left allmulticast mode [ 446.174763][ T6021] bridge_slave_1: left promiscuous mode [ 446.175069][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.282564][ T6021] bridge_slave_0: left allmulticast mode [ 446.282600][ T6021] bridge_slave_0: left promiscuous mode [ 446.282885][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.395832][ T6021] bridge_slave_1: left allmulticast mode [ 446.395869][ T6021] bridge_slave_1: left promiscuous mode [ 446.396134][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.502954][ T6021] bridge_slave_0: left allmulticast mode [ 446.502998][ T6021] bridge_slave_0: left promiscuous mode [ 446.503264][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.585341][ T6021] bridge_slave_1: left allmulticast mode [ 446.585377][ T6021] bridge_slave_1: left promiscuous mode [ 446.585649][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.682614][ T6021] bridge_slave_0: left allmulticast mode [ 446.682649][ T6021] bridge_slave_0: left promiscuous mode [ 446.682911][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.641425][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.723280][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.745514][ T6021] bond0 (unregistering): Released all slaves [ 450.047161][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.062931][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.064181][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.065869][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.067080][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.531764][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.611560][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.645435][ T6021] bond0 (unregistering): Released all slaves [ 452.120854][ T6349] Bluetooth: hci3: command tx timeout [ 452.171651][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.238128][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.257478][ T6021] bond0 (unregistering): Released all slaves [ 453.580990][ T6021] hsr_slave_0: left promiscuous mode [ 453.630833][ T6021] hsr_slave_1: left promiscuous mode [ 453.631820][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.678181][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.840729][ T6021] hsr_slave_0: left promiscuous mode [ 453.860725][ T6021] hsr_slave_1: left promiscuous mode [ 453.861713][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.917988][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.061021][ T6021] hsr_slave_0: left promiscuous mode [ 454.080783][ T6021] hsr_slave_1: left promiscuous mode [ 454.081863][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.132494][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.204172][ T6349] Bluetooth: hci3: command tx timeout [ 455.341641][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 455.562748][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 456.290598][ T6349] Bluetooth: hci3: command tx timeout [ 458.370825][ T6349] Bluetooth: hci3: command tx timeout [ 458.778436][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 459.031783][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 461.931854][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 462.191611][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 464.425071][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.145600][ T7113] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 465.290737][ T7113] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 465.440888][ T7113] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 465.547745][ T7113] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.632612][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 466.015473][ T7117] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.097982][ T7117] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.235124][ T7117] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.405040][ T7117] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.447256][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.447485][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.447733][ T7239] bridge_slave_0: entered allmulticast mode [ 466.451825][ T7239] bridge_slave_0: entered promiscuous mode [ 466.487422][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.487579][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.487777][ T7239] bridge_slave_1: entered allmulticast mode [ 466.491521][ T7239] bridge_slave_1: entered promiscuous mode [ 466.767319][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.835401][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.116887][ T7099] veth0_vlan: entered promiscuous mode [ 467.138881][ T7239] team0: Port device team_slave_0 added [ 467.195727][ T7239] team0: Port device team_slave_1 added [ 467.426757][ T7099] veth1_vlan: entered promiscuous mode [ 467.433637][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.433657][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.433690][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.444159][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.444178][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.444212][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.960079][ T7239] hsr_slave_0: entered promiscuous mode [ 467.962704][ T7239] hsr_slave_1: entered promiscuous mode [ 467.963818][ T7239] debugfs: 'hsr0' already exists in 'hsr' [ 467.963847][ T7239] Cannot create hsr debugfs directory [ 468.414290][ T7099] veth0_macvtap: entered promiscuous mode [ 468.469480][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.489705][ T7099] veth1_macvtap: entered promiscuous mode [ 468.995386][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.196210][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.226307][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.228814][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.240499][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.247831][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.281421][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.281590][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.475231][ T6160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.492408][ T6160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.503990][ T6160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.518203][ T6160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.529429][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.805401][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.805557][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.964839][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.965083][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.242924][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.242947][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.543806][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.543829][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.607959][ T6021] bridge_slave_1: left allmulticast mode [ 470.607994][ T6021] bridge_slave_1: left promiscuous mode [ 470.608282][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.703738][ T6021] bridge_slave_0: left allmulticast mode [ 470.703775][ T6021] bridge_slave_0: left promiscuous mode [ 470.704080][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.351571][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.413171][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.439573][ T6021] bond0 (unregistering): Released all slaves [ 473.186084][ T6021] hsr_slave_0: left promiscuous mode [ 473.530910][ T6021] hsr_slave_1: left promiscuous mode [ 473.570987][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.626838][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.404736][ T6021] veth1_vlan: left promiscuous mode [ 474.404989][ T6021] veth0_vlan: left promiscuous mode [ 474.928707][ T7307] program syz.6.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.011749][ T7307] program syz.6.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.023513][ T7307] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 477.503218][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 477.770724][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 477.818040][ T10] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 477.818135][ T10] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 477.818178][ T10] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 477.818262][ T10] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 477.818319][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.818373][ T10] usb 7-1: config 0 has no interface number 0 [ 477.818664][ T10] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 477.818698][ T10] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 477.818723][ T10] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 477.818807][ T10] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.818849][ T10] usb 7-1: config 0 interface 125 has no altsetting 0 [ 477.818921][ T10] usb 7-1: config 0 interface 125 has no altsetting 2 [ 478.454377][ T10] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 478.454452][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.454512][ T10] usb 7-1: Product: syz [ 478.454530][ T10] usb 7-1: Manufacturer: syz [ 478.454594][ T10] usb 7-1: SerialNumber: syz [ 478.805778][ T10] usb 7-1: config 0 descriptor?? [ 478.818201][ T10] usb 7-1: selecting invalid altsetting 2 [ 479.508398][ T7315] syz.0.194 (7315) used greatest stack depth: 18040 bytes left [ 479.735242][ C0] usb 7-1: async_complete: urb error -71 [ 479.735467][ C0] usb 7-1: async_complete: urb error -71 [ 479.735571][ C0] usb 7-1: async_complete: urb error -71 [ 479.735686][ C0] usb 7-1: async_complete: urb error -71 [ 479.737283][ T10] get_1284_register: usb error -71 [ 479.737422][ T10] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 479.874477][ T10] usb 7-1: USB disconnect, device number 2 [ 480.653209][ T7323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.195'. [ 482.042865][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.065707][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.067583][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.069579][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.093025][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.185690][ T6349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.207432][ T6349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.222473][ T6349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.227671][ T6349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.228603][ T6349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.845071][ T6349] Bluetooth: hci4: command tx timeout [ 484.846974][ T6349] Bluetooth: hci5: command tx timeout [ 486.990736][ T5844] Bluetooth: hci5: command tx timeout [ 486.990774][ T5844] Bluetooth: hci4: command tx timeout [ 491.268094][ T6349] Bluetooth: hci4: command tx timeout [ 491.268179][ T6349] Bluetooth: hci5: command tx timeout [ 492.411310][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 493.730783][ T5844] Bluetooth: hci5: command tx timeout [ 493.730821][ T5844] Bluetooth: hci4: command tx timeout [ 494.352122][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 494.675475][ T7372] loop2: detected capacity change from 0 to 7 [ 495.759961][ T7372] Dev loop2: unable to read RDB block 7 [ 495.759993][ T7372] loop2: AHDI p2 p3 [ 495.760017][ T7372] loop2: partition table partially beyond EOD, truncated [ 495.762205][ T7372] loop2: p2 size 150995456 extends beyond EOD, truncated [ 496.098502][ T7368] udevd[7368]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 496.578742][ T7385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.552039][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.211'. [ 502.552071][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.211'. [ 503.632706][ T7406] netlink: 'syz.6.212': attribute type 1 has an invalid length. [ 503.632723][ T7406] netlink: 224 bytes leftover after parsing attributes in process `syz.6.212'. [ 506.948817][ T7429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 507.616405][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.217'. [ 507.780301][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.780533][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.938301][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.962722][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.964010][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.965711][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.966617][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 516.040694][ T5844] Bluetooth: hci2: command tx timeout [ 518.158489][ T5844] Bluetooth: hci2: command tx timeout [ 519.046967][ T7473] program syz.6.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.502606][ T5844] Bluetooth: hci2: command tx timeout [ 522.520759][ T5844] Bluetooth: hci2: command tx timeout [ 522.681901][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 523.133158][ T6255] Process accounting resumed [ 527.294894][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.235'. [ 532.917437][ T7333] chnl_net:caif_netlink_parms(): no params data found [ 534.590471][ T978] kernel write not supported for file /533/attr/sockcreate (pid: 978 comm: kworker/1:2) [ 535.948349][ T7570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.303285][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.303447][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.303652][ T7331] bridge_slave_0: entered allmulticast mode [ 537.308681][ T7331] bridge_slave_0: entered promiscuous mode [ 537.468548][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.468741][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.469011][ T7331] bridge_slave_1: entered allmulticast mode [ 537.488453][ T7331] bridge_slave_1: entered promiscuous mode [ 539.295218][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.513165][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.513319][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.513589][ T7333] bridge_slave_0: entered allmulticast mode [ 539.516588][ T7333] bridge_slave_0: entered promiscuous mode [ 539.536252][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.536420][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.536679][ T7333] bridge_slave_1: entered allmulticast mode [ 539.542557][ T7333] bridge_slave_1: entered promiscuous mode [ 540.123950][ T6349] Bluetooth: hci1: command 0x0406 tx timeout [ 543.262161][ T6349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 543.274610][ T6349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 543.276006][ T6349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 543.277471][ T6349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 543.278420][ T6349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 543.336625][ T6349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.347501][ T6349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.349601][ T6349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.352312][ T6349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.353216][ T6349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.427382][ T3119] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 543.655339][ T3119] usb 7-1: config 1 interface 0 has no altsetting 0 [ 543.668700][ T3119] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 543.668723][ T3119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.668738][ T3119] usb 7-1: Product: syz [ 543.668748][ T3119] usb 7-1: Manufacturer: syz [ 543.668759][ T3119] usb 7-1: SerialNumber: syz [ 544.280131][ T3119] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 544.487512][ T7456] chnl_net:caif_netlink_parms(): no params data found [ 545.330672][ T5844] Bluetooth: hci3: command tx timeout [ 545.582253][ T5844] Bluetooth: hci4: command tx timeout [ 547.131790][ T5938] usb 7-1: USB disconnect, device number 3 [ 547.497612][ T5844] Bluetooth: hci3: command tx timeout [ 547.643305][ T5844] Bluetooth: hci4: command tx timeout [ 548.110215][ T5938] usblp0: removed [ 549.682354][ T5844] Bluetooth: hci3: command tx timeout [ 549.880714][ T5844] Bluetooth: hci4: command tx timeout [ 551.988338][ T5844] Bluetooth: hci3: command tx timeout [ 551.988410][ T5844] Bluetooth: hci4: command tx timeout [ 555.519078][ T7665] vivid-001: disconnect [ 555.547690][ T7665] Bluetooth: MGMT ver 1.23 [ 556.514944][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.515116][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.515397][ T7456] bridge_slave_0: entered allmulticast mode [ 556.888586][ T7456] bridge_slave_0: entered promiscuous mode [ 557.098377][ T7663] vivid-001: reconnect [ 558.890982][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.891148][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.891411][ T7456] bridge_slave_1: entered allmulticast mode [ 558.900634][ T7456] bridge_slave_1: entered promiscuous mode [ 564.138811][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.407511][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.212834][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.278'. [ 568.635218][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.635302][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.291376][ T7456] team0: Port device team_slave_0 added [ 570.753997][ T7456] team0: Port device team_slave_1 added [ 572.373390][ T6021] bridge_slave_1: left allmulticast mode [ 572.373427][ T6021] bridge_slave_1: left promiscuous mode [ 572.373747][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.445120][ T6021] bridge_slave_0: left allmulticast mode [ 572.445155][ T6021] bridge_slave_0: left promiscuous mode [ 572.445451][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.535312][ T6021] bridge_slave_1: left allmulticast mode [ 572.535349][ T6021] bridge_slave_1: left promiscuous mode [ 572.535622][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.630284][ T6021] bridge_slave_0: left allmulticast mode [ 572.630321][ T6021] bridge_slave_0: left promiscuous mode [ 572.632630][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.743008][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.763683][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.765002][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.766380][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.767274][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.817663][ T5844] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 576.847030][ T5844] Bluetooth: hci2: command tx timeout [ 578.963451][ T5844] Bluetooth: hci2: command tx timeout [ 579.147886][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.290'. [ 579.147913][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.290'. [ 580.284195][ T5844] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 580.286147][ T5844] Bluetooth: hci1: Injecting HCI hardware error event [ 580.295996][ T5844] Bluetooth: hci1: hardware error 0x00 [ 581.000651][ T6349] Bluetooth: hci2: command tx timeout [ 581.151608][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.231522][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.256773][ T6021] bond0 (unregistering): Released all slaves [ 582.603084][ T5844] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 582.771311][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.835298][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.885551][ T6021] bond0 (unregistering): Released all slaves [ 583.088736][ T5844] Bluetooth: hci2: command tx timeout [ 583.540645][ T6021] hsr_slave_0: left promiscuous mode [ 583.569091][ T6021] hsr_slave_1: left promiscuous mode [ 583.569863][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.603095][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.765415][ T6021] hsr_slave_0: left promiscuous mode [ 583.801306][ T6021] hsr_slave_1: left promiscuous mode [ 583.804025][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.858685][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.133295][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 585.351660][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 588.251457][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 588.503294][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 590.674215][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 590.722978][ T7610] chnl_net:caif_netlink_parms(): no params data found [ 591.658888][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.659140][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.659407][ T7612] bridge_slave_0: entered allmulticast mode [ 591.663468][ T7612] bridge_slave_0: entered promiscuous mode [ 591.692328][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.692471][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.694721][ T7610] bridge_slave_0: entered allmulticast mode [ 591.766087][ T7610] bridge_slave_0: entered promiscuous mode [ 591.770253][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.772506][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.773206][ T7612] bridge_slave_1: entered allmulticast mode [ 591.782318][ T7612] bridge_slave_1: entered promiscuous mode [ 591.835110][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.835270][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.835525][ T7610] bridge_slave_1: entered allmulticast mode [ 591.838492][ T7610] bridge_slave_1: entered promiscuous mode [ 592.232370][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.239110][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.249646][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.394410][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.594979][ T7612] team0: Port device team_slave_0 added [ 592.734085][ T7612] team0: Port device team_slave_1 added [ 592.749170][ T7610] team0: Port device team_slave_0 added [ 593.124655][ T7610] team0: Port device team_slave_1 added [ 593.323923][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.323942][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.323970][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.391860][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.391884][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.391915][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.540160][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.540174][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.540194][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.608591][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.608617][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.608647][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.619316][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 593.949582][ T7612] hsr_slave_0: entered promiscuous mode [ 593.951527][ T7612] hsr_slave_1: entered promiscuous mode [ 593.952623][ T7612] debugfs: 'hsr0' already exists in 'hsr' [ 593.952651][ T7612] Cannot create hsr debugfs directory [ 594.468954][ T7610] hsr_slave_0: entered promiscuous mode [ 594.477566][ T7610] hsr_slave_1: entered promiscuous mode [ 594.479582][ T7610] debugfs: 'hsr0' already exists in 'hsr' [ 594.479608][ T7610] Cannot create hsr debugfs directory [ 595.146198][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.146435][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.146644][ T7744] bridge_slave_0: entered allmulticast mode [ 595.149655][ T7744] bridge_slave_0: entered promiscuous mode [ 595.254678][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.254859][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.255086][ T7744] bridge_slave_1: entered allmulticast mode [ 595.258133][ T7744] bridge_slave_1: entered promiscuous mode [ 595.394308][ T6021] bridge_slave_1: left allmulticast mode [ 595.394345][ T6021] bridge_slave_1: left promiscuous mode [ 595.394604][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.462414][ T6021] bridge_slave_0: left allmulticast mode [ 595.462450][ T6021] bridge_slave_0: left promiscuous mode [ 595.462785][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.525350][ T6021] bridge_slave_1: left allmulticast mode [ 595.525385][ T6021] bridge_slave_1: left promiscuous mode [ 595.525655][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.584142][ T6021] bridge_slave_0: left allmulticast mode [ 595.584177][ T6021] bridge_slave_0: left promiscuous mode [ 595.584451][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.666417][ T6021] bridge_slave_1: left allmulticast mode [ 595.666460][ T6021] bridge_slave_1: left promiscuous mode [ 595.666734][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.722561][ T6021] bridge_slave_0: left allmulticast mode [ 595.722598][ T6021] bridge_slave_0: left promiscuous mode [ 595.723377][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.808288][ T6021] bridge_slave_1: left allmulticast mode [ 595.808325][ T6021] bridge_slave_1: left promiscuous mode [ 595.808597][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.872452][ T6021] bridge_slave_0: left allmulticast mode [ 595.872488][ T6021] bridge_slave_0: left promiscuous mode [ 595.872766][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.183066][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.283353][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.354970][ T6021] bond0 (unregistering): Released all slaves [ 596.547313][ T6021] bond0 (unregistering): Released all slaves [ 596.788599][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.866877][ T6021] bond0 (unregistering): Released all slaves [ 597.151547][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.271568][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.339092][ T6021] bond0 (unregistering): Released all slaves [ 597.717972][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.773999][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.224209][ T7744] team0: Port device team_slave_0 added [ 598.342790][ T7744] team0: Port device team_slave_1 added [ 598.586524][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.586543][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.586572][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.730119][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.730138][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.730175][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.929875][ T6021] hsr_slave_0: left promiscuous mode [ 598.970808][ T6021] hsr_slave_1: left promiscuous mode [ 598.971856][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.994129][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.271370][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 599.451411][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 600.940117][ T6349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.978317][ T6349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.979629][ T6349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.991725][ T6349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.992524][ T6349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.438098][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 601.613550][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 602.961297][ T7744] hsr_slave_0: entered promiscuous mode [ 602.962930][ T7744] hsr_slave_1: entered promiscuous mode [ 602.963849][ T7744] debugfs: 'hsr0' already exists in 'hsr' [ 602.963874][ T7744] Cannot create hsr debugfs directory [ 603.012445][ T6349] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.042327][ T6349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.055373][ T6349] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.057342][ T6349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.063904][ T6349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.091328][ T6349] Bluetooth: hci5: command tx timeout [ 605.160745][ T5844] Bluetooth: hci6: command tx timeout [ 605.161044][ T5844] Bluetooth: hci5: command tx timeout [ 605.385973][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 606.450963][ T7800] chnl_net:caif_netlink_parms(): no params data found [ 606.771250][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.771497][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.771759][ T7797] bridge_slave_0: entered allmulticast mode [ 606.774657][ T7797] bridge_slave_0: entered promiscuous mode [ 606.868201][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.868373][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.868622][ T7797] bridge_slave_1: entered allmulticast mode [ 606.893988][ T7797] bridge_slave_1: entered promiscuous mode [ 607.240904][ T6349] Bluetooth: hci5: command tx timeout [ 607.240940][ T6349] Bluetooth: hci6: command tx timeout [ 607.371555][ T7744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.411133][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.427832][ T7744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.477722][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.595741][ T7744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.819387][ T7744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.965345][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.965499][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.965746][ T7800] bridge_slave_0: entered allmulticast mode [ 607.969875][ T7800] bridge_slave_0: entered promiscuous mode [ 608.011351][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.011517][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.011796][ T7800] bridge_slave_1: entered allmulticast mode [ 608.014727][ T7800] bridge_slave_1: entered promiscuous mode [ 608.034686][ T7797] team0: Port device team_slave_0 added [ 608.161109][ T7797] team0: Port device team_slave_1 added [ 608.382187][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.574122][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.594719][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.594736][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.594765][ T7797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.679745][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.679774][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.679811][ T7797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.019085][ T7800] team0: Port device team_slave_0 added [ 609.029266][ T7800] team0: Port device team_slave_1 added [ 609.272635][ T6021] bridge_slave_1: left allmulticast mode [ 609.272670][ T6021] bridge_slave_1: left promiscuous mode [ 609.272937][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.320755][ T5844] Bluetooth: hci6: command tx timeout [ 609.320791][ T5844] Bluetooth: hci5: command tx timeout [ 609.324831][ T6021] bridge_slave_0: left allmulticast mode [ 609.324865][ T6021] bridge_slave_0: left promiscuous mode [ 609.325157][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.411240][ T6021] bridge_slave_1: left allmulticast mode [ 609.411268][ T6021] bridge_slave_1: left promiscuous mode [ 609.411482][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.472712][ T6021] bridge_slave_0: left allmulticast mode [ 609.472749][ T6021] bridge_slave_0: left promiscuous mode [ 609.473015][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.831453][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.915590][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.978578][ T6021] bond0 (unregistering): Released all slaves [ 610.313121][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.391222][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.459292][ T6021] bond0 (unregistering): Released all slaves [ 610.777887][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.777906][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.777934][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.832785][ T7797] hsr_slave_0: entered promiscuous mode [ 610.834515][ T7797] hsr_slave_1: entered promiscuous mode [ 610.840988][ T7797] debugfs: 'hsr0' already exists in 'hsr' [ 610.841015][ T7797] Cannot create hsr debugfs directory [ 610.845249][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.845266][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.845298][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.260669][ T6021] hsr_slave_0: left promiscuous mode [ 611.310678][ T6021] hsr_slave_1: left promiscuous mode [ 611.311707][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.341725][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.400555][ T6349] Bluetooth: hci6: command tx timeout [ 611.493640][ T6021] hsr_slave_0: left promiscuous mode [ 611.547909][ T6021] hsr_slave_1: left promiscuous mode [ 611.548634][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.574827][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.361697][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 612.511577][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 613.795166][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 613.931770][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 614.972739][ T7800] hsr_slave_0: entered promiscuous mode [ 614.974343][ T7800] hsr_slave_1: entered promiscuous mode [ 614.975196][ T7800] debugfs: 'hsr0' already exists in 'hsr' [ 614.975219][ T7800] Cannot create hsr debugfs directory [ 616.275933][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.343312][ T7797] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.465381][ T7797] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.554907][ T7797] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.755420][ T7797] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.818695][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.065690][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.065948][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.128920][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.130094][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.245447][ T7800] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 617.318559][ T7800] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 617.373809][ T7800] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 617.463951][ T7800] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 618.004144][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.143024][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.174731][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.174968][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.198476][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.198724][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.352148][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.491783][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.546855][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.549867][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.550033][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.629843][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.630050][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.355028][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.789135][ T7744] veth0_vlan: entered promiscuous mode [ 619.908372][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.941454][ T7744] veth1_vlan: entered promiscuous mode [ 620.145763][ T7744] veth0_macvtap: entered promiscuous mode [ 620.193150][ T7744] veth1_macvtap: entered promiscuous mode [ 620.342020][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.418284][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.498205][ T1324] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.500602][ T1324] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.505173][ T1324] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.515246][ T1324] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.663740][ T7797] veth0_vlan: entered promiscuous mode [ 620.883415][ T7797] veth1_vlan: entered promiscuous mode [ 621.076842][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.076866][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.215116][ T7800] veth0_vlan: entered promiscuous mode [ 621.231940][ T7797] veth0_macvtap: entered promiscuous mode [ 621.261987][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.262011][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.296630][ T7797] veth1_macvtap: entered promiscuous mode [ 621.331293][ T7800] veth1_vlan: entered promiscuous mode [ 621.423378][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.493478][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.517746][ T6021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.540666][ T6021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.570787][ T6021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.620638][ T6021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.674504][ T7800] veth0_macvtap: entered promiscuous mode [ 622.067793][ T7800] veth1_macvtap: entered promiscuous mode [ 623.834771][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.052480][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.588255][ T6515] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.588881][ T6515] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.589142][ T6515] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.589659][ T6515] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.639887][ T7989] random: crng reseeded on system resumption [ 625.228625][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.228648][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.624011][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.624033][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.830670][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.830694][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.860928][ T6349] Bluetooth: Frame is too long (len 12, expected len 4) [ 627.974215][ T6349] Bluetooth: hci0: Malformed Event: 0x02 [ 628.220839][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.220864][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.048737][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.048851][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.162044][ T8040] random: crng reseeded on system resumption [ 632.848505][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.393303][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.553538][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.792656][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.927066][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.139889][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.605169][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.905931][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.075061][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.301265][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.441754][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.621712][ T6349] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 635.810650][ T3119] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 635.843509][ T6349] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 635.972093][ T3119] usb 6-1: Using ep0 maxpacket: 16 [ 635.974906][ T3119] usb 6-1: config 1 interface 0 has no altsetting 0 [ 635.978269][ T3119] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 635.978301][ T3119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.978323][ T3119] usb 6-1: Product: syz [ 635.978339][ T3119] usb 6-1: Manufacturer: syz [ 635.978355][ T3119] usb 6-1: SerialNumber: syz [ 636.314159][ T3119] usbhid 6-1:1.0: can't add hid device: -71 [ 636.314298][ T3119] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 636.346582][ T3119] usb 6-1: USB disconnect, device number 2 [ 637.262618][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.354898][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.511704][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.775075][ T8101] random: crng reseeded on system resumption [ 638.860058][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.896506][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.073990][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.880648][ T6349] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 639.880993][ T6349] Bluetooth: hci0: Injecting HCI hardware error event [ 639.884469][ T6349] Bluetooth: hci0: hardware error 0x00 [ 641.783585][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.257796][ T6349] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 646.056201][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.227421][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.446371][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.757803][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.941080][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.283015][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.891810][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.425084][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.899785][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.213899][ T5921] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 650.395211][ T5921] usb 6-1: device descriptor read/64, error -71 [ 651.529323][ T8200] syz.0.348 (8200) used greatest stack depth: 16184 bytes left [ 659.685901][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.8.366'. [ 663.405319][ T6349] Bluetooth: hci5: Malformed LE Event: 0x0d [ 665.452947][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.807414][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.117125][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.813741][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.870879][ T8347] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 676.987286][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.042985][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.058452][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.074079][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.085371][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.400815][ T8417] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.160877][ T6349] Bluetooth: hci0: command tx timeout [ 681.476332][ T6349] Bluetooth: hci0: command tx timeout [ 682.454769][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.414'. [ 682.454800][ T8421] netlink: 108 bytes leftover after parsing attributes in process `syz.5.414'. [ 682.488813][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.414'. [ 682.489287][ T8421] netlink: 108 bytes leftover after parsing attributes in process `syz.5.414'. [ 682.489312][ T8421] netlink: 84 bytes leftover after parsing attributes in process `syz.5.414'. [ 684.011799][ T6349] Bluetooth: hci0: command tx timeout [ 684.255563][ T6516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.255603][ T6516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.479026][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.8.424'. [ 684.479055][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz.8.424'. [ 684.479075][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.8.424'. [ 685.139747][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.429'. [ 685.340529][ T7893] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 685.604154][ T6516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.604195][ T6516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.693240][ T7893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 685.693274][ T7893] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 685.693301][ T7893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 685.693326][ T7893] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 685.693370][ T7893] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 685.693395][ T7893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.719068][ T7893] usb 7-1: config 0 descriptor?? [ 686.019164][ T7893] hdpvr 7-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½ËDŠ^jvi0ì [ 686.019164][ T7893] †Ã“‘êpY [ 686.959770][ T6349] Bluetooth: hci0: command tx timeout [ 686.980926][ T7893] hdpvr 7-1:0.0: device init failed [ 686.982384][ T7893] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 687.048159][ T8479] tty tty3: ldisc open failed (-12), clearing slot 2 [ 687.207054][ T7893] usb 7-1: USB disconnect, device number 4 [ 689.575652][ T6516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.575694][ T6516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.653726][ T8500] random: crng reseeded on system resumption [ 691.502761][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.502846][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.747811][ T8522] netlink: 'syz.8.443': attribute type 1 has an invalid length. [ 691.747874][ T8522] netlink: 224 bytes leftover after parsing attributes in process `syz.8.443'. [ 692.720115][ T6516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.720145][ T6516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.733324][ T7890] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 694.980499][ T7890] usb 6-1: Using ep0 maxpacket: 32 [ 694.982757][ T7890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 694.982783][ T7890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 694.982800][ T7890] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 694.982818][ T7890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 694.982837][ T7890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 695.089249][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 695.133094][ T7890] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 695.133128][ T7890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.133150][ T7890] usb 6-1: Product: syz [ 695.133167][ T7890] usb 6-1: Manufacturer: syz [ 695.133183][ T7890] usb 6-1: SerialNumber: syz [ 695.185528][ T7890] usb 6-1: config 0 descriptor?? [ 695.274510][ T7890] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 695.633663][ T7890] usb 6-1: USB disconnect, device number 5 [ 697.833482][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.8.452'. [ 699.090600][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 700.553547][ T8594] netlink: 'syz.5.456': attribute type 1 has an invalid length. [ 700.553583][ T8594] netlink: 224 bytes leftover after parsing attributes in process `syz.5.456'. [ 708.610623][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.610796][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.611194][ T8392] bridge_slave_0: entered allmulticast mode [ 708.628038][ T8392] bridge_slave_0: entered promiscuous mode [ 708.650667][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.650817][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.651077][ T8392] bridge_slave_1: entered allmulticast mode [ 708.657571][ T8392] bridge_slave_1: entered promiscuous mode [ 713.761806][ T6516] bridge_slave_1: left allmulticast mode [ 713.761843][ T6516] bridge_slave_1: left promiscuous mode [ 713.762120][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.967897][ T6516] bridge_slave_0: left allmulticast mode [ 713.967933][ T6516] bridge_slave_0: left promiscuous mode [ 713.968221][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.904360][ T8677] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 717.996598][ T8677] cramfs: wrong magic [ 724.284618][ T6349] Bluetooth: hci5: command 0x0406 tx timeout [ 728.622206][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.727342][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.870944][ T6516] bond0 (unregistering): Released all slaves [ 729.099377][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.452805][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.852740][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.527311][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.562063][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 730.563604][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.597831][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.599758][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.618743][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.632502][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 731.325424][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.632295][ T8641] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 731.798762][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.878707][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.680589][ T6349] Bluetooth: hci3: command tx timeout [ 734.303367][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 734.318217][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 734.334059][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 734.364317][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 734.378968][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 734.576037][ T8797] IPv6: sit1: Disabled Multicast RS [ 734.763429][ T6349] Bluetooth: hci3: command tx timeout [ 736.520482][ T6349] Bluetooth: hci4: command tx timeout [ 736.840491][ T6349] Bluetooth: hci3: command tx timeout [ 736.998485][ T8815] warning: `syz.8.516' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 738.600596][ T6349] Bluetooth: hci4: command tx timeout [ 738.920492][ T6349] Bluetooth: hci3: command tx timeout [ 740.075256][ T8852] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.075447][ T8852] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 740.794465][ T6349] Bluetooth: hci4: command tx timeout [ 741.478102][ T6516] hsr_slave_0: left promiscuous mode [ 742.830922][ T6516] hsr_slave_1: left promiscuous mode [ 742.831931][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.831963][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.840522][ T6349] Bluetooth: hci4: command tx timeout [ 742.912169][ T8879] netlink: 132 bytes leftover after parsing attributes in process `syz.6.533'. [ 742.931644][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.931678][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.230720][ T6516] veth1_macvtap: left promiscuous mode [ 743.230971][ T6516] veth0_macvtap: left promiscuous mode [ 743.231334][ T6516] veth1_vlan: left promiscuous mode [ 743.231557][ T6516] veth0_vlan: left promiscuous mode [ 749.814793][ T6349] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 749.815154][ T6349] Bluetooth: hci6: Injecting HCI hardware error event [ 749.819808][ T5155] Bluetooth: hci6: hardware error 0x00 [ 751.351460][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 751.641481][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 751.960520][ T5155] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 752.947251][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.947344][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.322507][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 760.573124][ T8995] IPv6: Can't replace route, no match found [ 760.815943][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.816104][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.816356][ T8751] bridge_slave_0: entered allmulticast mode [ 760.819445][ T8751] bridge_slave_0: entered promiscuous mode [ 760.833955][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 761.901424][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.902122][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.905387][ T8751] bridge_slave_1: entered allmulticast mode [ 762.024378][ T8751] bridge_slave_1: entered promiscuous mode [ 764.414100][ T6516] IPVS: stop unused estimator thread 0... [ 764.706238][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.760163][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.783455][ T9033] netlink: 'syz.8.577': attribute type 3 has an invalid length. [ 764.783482][ T9033] netlink: 'syz.8.577': attribute type 3 has an invalid length. [ 764.784335][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.8.577'. [ 768.655464][ T9069] netlink: 'syz.5.585': attribute type 10 has an invalid length. [ 769.942977][ T8751] team0: Port device team_slave_0 added [ 770.084116][ T8751] team0: Port device team_slave_1 added [ 770.092890][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.093087][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.093389][ T8799] bridge_slave_0: entered allmulticast mode [ 770.096830][ T8799] bridge_slave_0: entered promiscuous mode [ 770.500833][ T6516] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.998923][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.999078][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.999301][ T8799] bridge_slave_1: entered allmulticast mode [ 771.003949][ T8799] bridge_slave_1: entered promiscuous mode [ 773.221142][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.221197][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.221265][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.169972][ T6516] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.338971][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.338990][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.339023][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.397270][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.497866][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.517400][ T6516] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.215804][ T8799] team0: Port device team_slave_0 added [ 779.384386][ T8799] team0: Port device team_slave_1 added [ 779.865309][ T6516] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.090967][ T9170] netlink: 'syz.8.615': attribute type 12 has an invalid length. [ 780.152624][ T8751] hsr_slave_0: entered promiscuous mode [ 780.177440][ T8751] hsr_slave_1: entered promiscuous mode [ 782.717133][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.717148][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.717170][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.973244][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.973262][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.973294][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.318712][ T9212] netlink: 'syz.6.624': attribute type 9 has an invalid length. [ 785.923941][ T8799] hsr_slave_0: entered promiscuous mode [ 785.957903][ T8799] hsr_slave_1: entered promiscuous mode [ 785.985512][ T8799] debugfs: 'hsr0' already exists in 'hsr' [ 785.985545][ T8799] Cannot create hsr debugfs directory [ 788.002778][ T6516] bridge_slave_1: left allmulticast mode [ 788.002813][ T6516] bridge_slave_1: left promiscuous mode [ 788.003157][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.104923][ T6516] bridge_slave_0: left allmulticast mode [ 788.104960][ T6516] bridge_slave_0: left promiscuous mode [ 788.105258][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.224803][ T6516] bridge_slave_1: left allmulticast mode [ 788.224844][ T6516] bridge_slave_1: left promiscuous mode [ 788.225143][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.310495][ T6516] bridge_slave_0: left allmulticast mode [ 788.310531][ T6516] bridge_slave_0: left promiscuous mode [ 788.310951][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.645314][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.734094][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.836633][ T6516] bond0 (unregistering): Released all slaves [ 790.968854][ T6349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.001009][ T6349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.005300][ T6349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.006801][ T6349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.007693][ T6349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 793.090708][ T6349] Bluetooth: hci0: command tx timeout [ 793.194450][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.216487][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.217771][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.225867][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 793.227979][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 793.293511][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.382206][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.409302][ T6516] bond0 (unregistering): Released all slaves [ 793.516536][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.644'. [ 793.890554][ T7854] IPVS: starting estimator thread 0... [ 793.921806][ T9316] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 793.982482][ T9319] IPVS: using max 7 ests per chain, 16800 per kthread [ 795.278222][ T5155] Bluetooth: hci0: command tx timeout [ 795.278302][ T5155] Bluetooth: hci5: command tx timeout [ 797.519081][ T6349] Bluetooth: hci5: command tx timeout [ 797.519172][ T6349] Bluetooth: hci0: command tx timeout [ 798.988815][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.664'. [ 798.989011][ T9366] openvswitch: netlink: Unknown nsh attribute 0 [ 798.989042][ T9366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.363299][ T5155] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 799.660334][ T5155] Bluetooth: hci0: command tx timeout [ 799.660373][ T5155] Bluetooth: hci5: command tx timeout [ 801.776076][ T6349] Bluetooth: hci5: command tx timeout [ 801.990381][ T7854] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 802.355613][ T7854] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 802.355644][ T7854] usb 6-1: config 0 has no interface number 0 [ 802.355695][ T7854] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 802.355722][ T7854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.025421][ T7854] usb 6-1: config 0 descriptor?? [ 803.033971][ T7854] cp210x 6-1:0.32: cp210x converter detected [ 803.439025][ T7854] cp210x 6-1:0.32: failed to get vendor val 0x000e size 3: -71 [ 803.517916][ T6349] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 803.518147][ T6349] Bluetooth: hci2: Injecting HCI hardware error event [ 803.522647][ T5155] Bluetooth: hci2: hardware error 0x00 [ 803.620940][ T7854] usb 6-1: cp210x converter now attached to ttyUSB0 [ 803.746545][ T7854] usb 6-1: USB disconnect, device number 6 [ 803.848070][ T7854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 803.880295][ T7854] cp210x 6-1:0.32: device disconnected [ 804.643081][ T9410] pimreg: entered allmulticast mode [ 805.720443][ T5155] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 806.470773][ T6516] hsr_slave_0: left promiscuous mode [ 806.518114][ T6516] hsr_slave_1: left promiscuous mode [ 806.519177][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.519208][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.603901][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.603935][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.611121][ T5821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 806.811127][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.811165][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.811208][ T5821] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 806.811233][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.836636][ T5821] usb 7-1: config 0 descriptor?? [ 806.881959][ T6516] veth1_macvtap: left promiscuous mode [ 806.882093][ T6516] veth0_macvtap: left promiscuous mode [ 806.882406][ T6516] veth1_vlan: left promiscuous mode [ 806.882632][ T6516] veth0_vlan: left promiscuous mode [ 807.437358][ T5821] stadia 0003:18D1:9400.0001: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.6-1/input0 [ 807.437396][ T5821] stadia 0003:18D1:9400.0001: no inputs found [ 807.437412][ T5821] stadia 0003:18D1:9400.0001: force feedback init failed [ 807.602220][ T5821] usb 7-1: USB disconnect, device number 5 [ 807.754550][ T9478] fido_id[9478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 814.367412][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.367534][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.966378][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 815.254652][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 821.097230][ T9311] chnl_net:caif_netlink_parms(): no params data found [ 821.179561][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 825.322900][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.722'. [ 825.322926][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.722'. [ 825.322954][ T9583] netlink: 'syz.6.722': attribute type 11 has an invalid length. [ 825.572924][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.573088][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.573323][ T9311] bridge_slave_0: entered allmulticast mode [ 825.579953][ T9311] bridge_slave_0: entered promiscuous mode [ 825.600882][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.601048][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.601347][ T9298] bridge_slave_0: entered allmulticast mode [ 825.620881][ T9298] bridge_slave_0: entered promiscuous mode [ 825.650847][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.651000][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.651258][ T9311] bridge_slave_1: entered allmulticast mode [ 825.682303][ T9311] bridge_slave_1: entered promiscuous mode [ 825.701683][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.701844][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.702103][ T9298] bridge_slave_1: entered allmulticast mode [ 825.763270][ T9298] bridge_slave_1: entered promiscuous mode [ 827.791225][ T9311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.793516][ T9605] bond0: option all_slaves_active: invalid value (7) [ 827.797787][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.804999][ T9311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.059531][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.487339][ T9311] team0: Port device team_slave_0 added [ 828.540747][ T3119] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 828.612224][ T9311] team0: Port device team_slave_1 added [ 828.622908][ T9298] team0: Port device team_slave_0 added [ 828.695380][ T3119] usb 6-1: Using ep0 maxpacket: 8 [ 828.698578][ T3119] usb 6-1: unable to get BOS descriptor or descriptor too short [ 828.700173][ T3119] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 828.700201][ T3119] usb 6-1: config 4 has no interface number 0 [ 828.700236][ T3119] usb 6-1: config 4 interface 30 has no altsetting 0 [ 828.738387][ T3119] usb 6-1: string descriptor 0 read error: -22 [ 828.738552][ T3119] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 828.738579][ T3119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.789817][ T3119] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 828.789880][ T3119] dw2102: su3000_power_ctrl: 1, initialized 0 [ 828.811834][ T3119] dvb-usb: bulk message failed: -22 (2/0) [ 828.832531][ T3119] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 828.837185][ T9298] team0: Port device team_slave_1 added [ 828.838781][ T3119] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 828.838843][ T3119] usb 6-1: media controller created [ 828.839679][ T3119] dvb-usb: bulk message failed: -22 (6/0) [ 828.839700][ T3119] dw2102: i2c transfer failed. [ 828.839727][ T3119] dvb-usb: bulk message failed: -22 (6/0) [ 828.839744][ T3119] dw2102: i2c transfer failed. [ 828.839763][ T3119] dvb-usb: bulk message failed: -22 (6/0) [ 828.839779][ T3119] dw2102: i2c transfer failed. [ 828.839797][ T3119] dvb-usb: bulk message failed: -22 (6/0) [ 828.839813][ T3119] dw2102: i2c transfer failed. [ 828.839829][ T3119] dvb-usb: bulk message failed: -22 (6/0) [ 828.839844][ T3119] dw2102: i2c transfer failed. [ 828.839861][ T3119] dvb-usb: bulk message failed: -22 (6/0) [ 828.839876][ T3119] dw2102: i2c transfer failed. [ 828.839887][ T3119] dvb-usb: MAC address: 02:02:02:02:02:02 [ 828.974255][ T3119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.998207][ T9614] dvb-usb: bulk message failed: -22 (3/0) [ 828.998231][ T9614] dw2102: i2c transfer failed. [ 828.998241][ T9614] dvb-usb: bulk message failed: -22 (4/0) [ 828.998256][ T9614] dw2102: i2c transfer failed. [ 829.037098][ T3119] dvb-usb: bulk message failed: -22 (3/0) [ 829.037121][ T3119] dw2102: command 0x0e transfer failed. [ 829.037133][ T3119] dvb-usb: bulk message failed: -22 (3/0) [ 829.037148][ T3119] dw2102: command 0x0e transfer failed. [ 829.350507][ T3119] dvb-usb: bulk message failed: -22 (3/0) [ 829.350533][ T3119] dw2102: command 0x0e transfer failed. [ 829.350544][ T3119] dvb-usb: bulk message failed: -22 (3/0) [ 829.350560][ T3119] dw2102: command 0x0e transfer failed. [ 829.350571][ T3119] dvb-usb: bulk message failed: -22 (1/0) [ 829.350586][ T3119] dw2102: command 0x51 transfer failed. [ 829.350597][ T3119] dvb-usb: bulk message failed: -22 (5/0) [ 829.350612][ T3119] dw2102: i2c probe for address 0x68 failed. [ 829.350624][ T3119] dvb-usb: bulk message failed: -22 (5/0) [ 829.350639][ T3119] dw2102: i2c probe for address 0x69 failed. [ 829.350651][ T3119] dvb-usb: bulk message failed: -22 (5/0) [ 829.350667][ T3119] dw2102: i2c probe for address 0x6a failed. [ 829.350679][ T3119] dw2102: probing for demodulator failed. Is the external power switched on? [ 829.350690][ T3119] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 829.520535][ T3119] rc_core: IR keymap rc-tt-1500 not found [ 829.520561][ T3119] Registered IR keymap rc-empty [ 829.528224][ T3119] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 829.534745][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.534767][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.534802][ T9311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.620726][ T3119] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input12 [ 829.648972][ T3119] dvb-usb: schedule remote query interval to 250 msecs. [ 829.648999][ T3119] dw2102: su3000_power_ctrl: 0, initialized 1 [ 829.649014][ T3119] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 829.675056][ T3119] usb 6-1: USB disconnect, device number 7 [ 829.791390][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.791409][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.791442][ T9311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.801555][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.801575][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.801611][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.889811][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.889833][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.889869][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.002804][ T3119] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 831.064875][ T9311] hsr_slave_0: entered promiscuous mode [ 831.066949][ T9311] hsr_slave_1: entered promiscuous mode [ 831.068023][ T9311] debugfs: 'hsr0' already exists in 'hsr' [ 831.068049][ T9311] Cannot create hsr debugfs directory [ 831.116901][ T9298] hsr_slave_0: entered promiscuous mode [ 831.118369][ T9298] hsr_slave_1: entered promiscuous mode [ 831.119363][ T9298] debugfs: 'hsr0' already exists in 'hsr' [ 831.119389][ T9298] Cannot create hsr debugfs directory [ 832.245336][ T9650] netlink: 208 bytes leftover after parsing attributes in process `syz.8.748'. [ 832.655363][ T6516] bridge_slave_1: left allmulticast mode [ 832.655400][ T6516] bridge_slave_1: left promiscuous mode [ 832.655701][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.755755][ T6516] bridge_slave_0: left allmulticast mode [ 832.755800][ T6516] bridge_slave_0: left promiscuous mode [ 832.760494][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.103232][ T6516] bridge_slave_1: left allmulticast mode [ 833.103271][ T6516] bridge_slave_1: left promiscuous mode [ 833.103612][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.067572][ T6516] bridge_slave_0: left allmulticast mode [ 834.067610][ T6516] bridge_slave_0: left promiscuous mode [ 834.067893][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.391151][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.592426][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.122330][ T6516] bond0 (unregistering): Released all slaves [ 840.213852][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.331504][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.406493][ T6516] bond0 (unregistering): Released all slaves [ 847.240487][ T6516] hsr_slave_0: left promiscuous mode [ 847.321424][ T6516] hsr_slave_1: left promiscuous mode [ 847.322379][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.431270][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.689179][ T6516] hsr_slave_0: left promiscuous mode [ 848.723691][ T6516] hsr_slave_1: left promiscuous mode [ 848.724783][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.761435][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.441928][ T6349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 854.461702][ T6349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 854.462935][ T6349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 854.464173][ T6349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.464757][ T6349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 854.750830][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 854.911525][ T6349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 854.939445][ T6349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 854.952320][ T6349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 854.996283][ T6349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 855.003260][ T6349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 855.112835][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 856.530637][ T5155] Bluetooth: hci3: command tx timeout [ 857.110557][ T5155] Bluetooth: hci4: command tx timeout [ 858.602276][ T5155] Bluetooth: hci3: command tx timeout [ 859.323474][ T5155] Bluetooth: hci4: command tx timeout [ 860.082456][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 860.211176][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 860.680617][ T5155] Bluetooth: hci3: command tx timeout [ 861.036818][ T9779] lo speed is unknown, defaulting to 1000 [ 861.052038][ T9779] lo speed is unknown, defaulting to 1000 [ 861.083713][ T9779] lo speed is unknown, defaulting to 1000 [ 861.134768][ T9779] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 861.335504][ T9759] lo speed is unknown, defaulting to 1000 [ 861.352833][ T9779] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 861.376828][ T9761] lo speed is unknown, defaulting to 1000 [ 861.420753][ T5155] Bluetooth: hci4: command tx timeout [ 862.771698][ T5155] Bluetooth: hci3: command tx timeout [ 863.634378][ T5155] Bluetooth: hci4: command tx timeout [ 863.970449][ T9779] lo speed is unknown, defaulting to 1000 [ 864.055414][ T9779] lo speed is unknown, defaulting to 1000 [ 864.115909][ T9779] lo speed is unknown, defaulting to 1000 [ 864.260825][ T9779] lo speed is unknown, defaulting to 1000 [ 864.408161][ T9779] lo speed is unknown, defaulting to 1000 [ 866.860607][ T5821] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 867.028552][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 867.102420][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.102459][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.102503][ T5821] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 867.102548][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.108639][ T5821] usb 6-1: config 0 descriptor?? [ 867.167204][ T5821] hub 6-1:0.0: USB hub found [ 867.379438][ T5821] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 867.599333][ T5821] usbhid 6-1:0.0: can't add hid device: -71 [ 867.599472][ T5821] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 867.665513][ T5821] usb 6-1: USB disconnect, device number 8 [ 868.268976][ T9761] chnl_net:caif_netlink_parms(): no params data found [ 868.641079][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 873.143286][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.143431][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.143654][ T9761] bridge_slave_0: entered allmulticast mode [ 873.148912][ T9761] bridge_slave_0: entered promiscuous mode [ 873.186491][ T8517] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 873.200937][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.201081][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.201346][ T9759] bridge_slave_0: entered allmulticast mode [ 873.204396][ T9759] bridge_slave_0: entered promiscuous mode [ 873.206996][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.207159][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.207369][ T9761] bridge_slave_1: entered allmulticast mode [ 873.241335][ T9761] bridge_slave_1: entered promiscuous mode [ 873.271118][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.271277][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.271595][ T9759] bridge_slave_1: entered allmulticast mode [ 873.282723][ T9759] bridge_slave_1: entered promiscuous mode [ 873.353412][ T8517] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.353450][ T8517] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.353476][ T8517] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 873.353524][ T8517] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 873.353550][ T8517] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.359495][ T8517] usb 7-1: config 0 descriptor?? [ 873.799922][ T8517] plantronics 0003:047F:FFFF.0002: collection stack underflow [ 873.799962][ T8517] plantronics 0003:047F:FFFF.0002: item 0 2 0 12 parsing failed [ 873.802798][ T8517] plantronics 0003:047F:FFFF.0002: parse failed [ 873.802915][ T8517] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 874.004179][ T6051] usb 7-1: USB disconnect, device number 6 [ 874.170653][ T9761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.288122][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.306392][ T9761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.516966][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.517251][ T6516] bridge_slave_1: left allmulticast mode [ 874.517280][ T6516] bridge_slave_1: left promiscuous mode [ 874.517543][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.663566][ T6516] bridge_slave_0: left allmulticast mode [ 874.663603][ T6516] bridge_slave_0: left promiscuous mode [ 874.663880][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.779577][ T6516] bridge_slave_1: left allmulticast mode [ 874.779613][ T6516] bridge_slave_1: left promiscuous mode [ 874.792488][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.862006][ T6516] bridge_slave_0: left allmulticast mode [ 874.862043][ T6516] bridge_slave_0: left promiscuous mode [ 874.862332][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.100382][ T6051] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 875.231219][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.282542][ T6051] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.282572][ T6051] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 875.282630][ T6051] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 875.282658][ T6051] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.290161][ T6051] usb 7-1: config 0 descriptor?? [ 875.341551][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.345357][ T6051] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 875.345724][ T6051] dvb-usb: bulk message failed: -22 (3/0) [ 875.381785][ T6051] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 875.382866][ T6051] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 875.383055][ T6051] usb 7-1: media controller created [ 875.388170][ T6051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 875.444948][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 875.445088][ T6051] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 875.449898][ T6051] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 875.487721][ T6051] dvb-usb: schedule remote query interval to 150 msecs. [ 875.487746][ T6051] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 875.528193][ T6516] bond0 (unregistering): Released all slaves [ 875.551566][ T9913] dvb-usb: bulk message failed: -22 (2/0) [ 875.559770][ T6051] usb 7-1: USB disconnect, device number 7 [ 875.893362][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.893430][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.511434][ T6051] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 877.501247][ T6516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.601307][ T6516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.668256][ T6516] bond0 (unregistering): Released all slaves [ 878.203818][ T9931] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 878.289675][ T9761] team0: Port device team_slave_0 added [ 878.470159][ T9761] team0: Port device team_slave_1 added [ 878.489509][ T9759] team0: Port device team_slave_0 added [ 878.727999][ T5938] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 879.020447][ T5938] usb 7-1: Using ep0 maxpacket: 8 [ 879.039397][ T5938] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 879.213878][ T5938] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 879.214048][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.214120][ T5938] usb 7-1: Product: syz [ 879.214138][ T5938] usb 7-1: Manufacturer: syz [ 879.214222][ T5938] usb 7-1: SerialNumber: syz [ 879.489951][ T5938] usb 7-1: config 0 descriptor?? [ 879.752675][ T9759] team0: Port device team_slave_1 added [ 879.853633][ T5938] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 879.853849][ T5938] usb 7-1: setting power ON [ 879.853920][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 880.343609][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 880.345535][ T5938] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 880.345595][ T5938] usb 7-1: media controller created [ 880.436661][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.479019][ T5938] usb 7-1: selecting invalid altsetting 6 [ 880.479045][ T5938] usb 7-1: digital interface selection failed (-22) [ 880.479063][ T5938] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 880.510551][ T5938] usb 7-1: setting power OFF [ 880.510818][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 880.510832][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 880.510843][ T5938] (NULL device *): no alternate interface [ 880.582083][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 880.623844][ T5938] usb 7-1: USB disconnect, device number 8 [ 880.682248][ T6516] hsr_slave_0: left promiscuous mode [ 880.740547][ T6516] hsr_slave_1: left promiscuous mode [ 880.741557][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.821478][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.004165][ T6516] hsr_slave_0: left promiscuous mode [ 881.050667][ T6516] hsr_slave_1: left promiscuous mode [ 881.051635][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.104689][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.260447][ T8517] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 881.414601][ T8517] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 881.414636][ T8517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.441600][ T8517] usb 6-1: config 0 descriptor?? [ 881.754358][ T8517] kaweth 6-1:0.0: Firmware present in device. [ 881.902570][ T8517] kaweth 6-1:0.0: Statistics collection: 0 [ 881.902605][ T8517] kaweth 6-1:0.0: Multicast filter limit: 0 [ 881.902622][ T8517] kaweth 6-1:0.0: MTU: 0 [ 881.902637][ T8517] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 882.107864][ T8517] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 882.147408][ T8517] usb 6-1: USB disconnect, device number 9 [ 885.902075][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 886.246031][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 886.440777][ T978] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 886.593183][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.593220][ T978] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 886.593268][ T978] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 886.593294][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.603715][ T978] usb 7-1: config 0 descriptor?? [ 887.103655][ T978] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 887.285822][ T7888] usb 7-1: USB disconnect, device number 9 [ 888.303503][ T6516] team0 (unregistering): Port device team_slave_1 removed [ 888.517756][ T6516] team0 (unregistering): Port device team_slave_0 removed [ 890.024177][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.024196][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.024227][ T9761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.421672][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.421701][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.421734][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.427088][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.427106][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.427138][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.455387][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.455409][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.455445][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.490626][ T5938] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 890.677577][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.677617][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.690833][ T5938] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 890.690874][ T5938] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 890.690898][ T5938] usb 6-1: Manufacturer: syz [ 890.746598][ T5938] usb 6-1: config 0 descriptor?? [ 891.194312][ T5938] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 891.194361][ T5938] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 891.194392][ T5938] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 891.194422][ T5938] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 891.194453][ T5938] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 891.196795][ T9761] hsr_slave_0: entered promiscuous mode [ 891.216305][ T5938] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 891.253689][ T9761] hsr_slave_1: entered promiscuous mode [ 891.414553][ T7893] usb 6-1: USB disconnect, device number 10 [ 891.585936][ T9759] hsr_slave_0: entered promiscuous mode [ 891.595258][ T9759] hsr_slave_1: entered promiscuous mode [ 891.613736][ T9759] debugfs: 'hsr0' already exists in 'hsr' [ 891.613766][ T9759] Cannot create hsr debugfs directory [ 891.653210][T10012] fido_id[10012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 892.680600][ T5155] Bluetooth: hci4: command tx timeout [ 908.246092][ T6349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 908.278393][ T6349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 908.291346][ T6349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 908.292721][ T6349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 908.294406][ T6349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.362233][ T6349] Bluetooth: hci0: command tx timeout [ 910.684841][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 910.710619][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 910.712736][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 910.716707][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 910.744201][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 911.022599][ T6349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 911.063769][ T6349] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 911.065427][ T6349] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 911.067305][ T6349] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 911.092258][ T6349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 912.372778][ T5155] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 912.393450][ T5155] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 912.400691][ T5155] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 912.425047][ T5155] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 912.426550][ T5155] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 912.440680][ T5155] Bluetooth: hci0: command tx timeout [ 912.840418][ T6349] Bluetooth: hci5: command tx timeout [ 913.170479][ T6349] Bluetooth: hci7: command tx timeout [ 914.520734][ T6349] Bluetooth: hci8: command tx timeout [ 914.521333][ T6349] Bluetooth: hci0: command tx timeout [ 914.860523][T10023] tipc: Started in network mode [ 914.860559][T10023] tipc: Node identity 070000000000000007, cluster identity 4711 [ 914.920366][ T5155] Bluetooth: hci5: command tx timeout [ 915.240481][ T5155] Bluetooth: hci7: command tx timeout [ 915.961995][ T6349] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 915.995169][ T6349] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 915.996727][ T6349] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 915.998132][ T6349] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 915.999052][ T6349] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 916.600613][ T6349] Bluetooth: hci0: command tx timeout [ 916.600650][ T6349] Bluetooth: hci8: command tx timeout [ 917.000407][ T5155] Bluetooth: hci5: command tx timeout [ 917.320533][ T5155] Bluetooth: hci7: command tx timeout [ 917.350255][ C0] sched: DL replenish lagged too much [ 918.120516][ T5155] Bluetooth: hci9: command tx timeout [ 918.680853][ T5155] Bluetooth: hci8: command tx timeout [ 919.080451][ T5155] Bluetooth: hci5: command tx timeout [ 919.400502][ T5155] Bluetooth: hci7: command tx timeout [ 920.200793][ T5155] Bluetooth: hci9: command tx timeout [ 920.760472][ T5155] Bluetooth: hci8: command tx timeout [ 922.280440][ T5155] Bluetooth: hci9: command tx timeout [ 924.360424][ T5155] Bluetooth: hci9: command tx timeout [ 937.267723][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.267808][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.997573][ T6349] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 971.017461][ T6349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 971.019623][ T6349] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 971.065528][ T6349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 971.069655][ T6349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 971.228090][ T8756] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 971.249217][ T8756] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 971.264020][ T8756] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 971.269552][ T8756] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 971.290550][ T8756] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 971.521688][ T8755] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 971.544092][ T8755] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 971.546648][ T8755] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 971.547998][ T8755] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 971.548884][ T8755] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 972.919994][T10079] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 972.941795][T10079] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 972.960766][T10079] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 972.962431][T10079] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 972.998239][T10079] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 974.464134][ T6349] Bluetooth: hci10: command tx timeout [ 976.440479][ T5155] Bluetooth: hci12: command tx timeout [ 976.530063][ T5155] Bluetooth: hci10: command tx timeout [ 976.538792][ T5155] Bluetooth: hci6: command tx timeout [ 976.539330][ T5155] Bluetooth: hci11: command tx timeout [ 977.042429][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 977.080782][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 977.085244][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 977.086789][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 977.088267][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 978.520328][ T5155] Bluetooth: hci12: command tx timeout [ 978.600650][ T5155] Bluetooth: hci11: command tx timeout [ 978.600684][ T5155] Bluetooth: hci6: command tx timeout [ 978.600708][ T5155] Bluetooth: hci10: command tx timeout [ 979.160618][ T6349] Bluetooth: hci4: command tx timeout [ 980.600443][ T6349] Bluetooth: hci12: command tx timeout [ 980.680535][ T8755] Bluetooth: hci11: command tx timeout [ 980.682190][ T5155] Bluetooth: hci6: command tx timeout [ 980.682290][ T6349] Bluetooth: hci10: command tx timeout [ 981.240446][ T6349] Bluetooth: hci4: command tx timeout [ 982.680533][ T6349] Bluetooth: hci12: command tx timeout [ 982.762316][ T5155] Bluetooth: hci11: command tx timeout [ 982.768137][ T6349] Bluetooth: hci6: command tx timeout [ 983.321047][ T6349] Bluetooth: hci4: command tx timeout [ 985.400488][ T6349] Bluetooth: hci4: command tx timeout [ 998.697232][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.697321][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.164093][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.186839][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.188275][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.189699][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.212747][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.962256][ T8755] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1030.983381][ T8755] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1030.985826][ T8755] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1030.987176][ T8755] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1030.988095][ T8755] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1031.149723][ T8756] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1031.169450][ T8756] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1031.182914][ T8756] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1031.184883][ T8756] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1031.186549][ T8756] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1033.543316][T10079] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1033.563317][T10079] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1033.567184][T10079] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1033.569497][T10079] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1033.598298][T10079] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1038.242316][T10105] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1038.245693][T10105] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1038.249129][T10105] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1038.295955][T10105] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1038.296910][T10105] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1042.840620][ T38] INFO: task kworker/u8:23:6516 blocked for more than 143 seconds. [ 1042.840661][ T38] Not tainted syzkaller #0 [ 1042.840674][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1042.840689][ T38] task:kworker/u8:23 state:D stack:20584 pid:6516 tgid:6516 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1042.840757][ T38] Workqueue: netns cleanup_net [ 1042.840808][ T38] Call Trace: [ 1042.840816][ T38] [ 1042.840832][ T38] __schedule+0x16f3/0x4c20 [ 1042.840898][ T38] ? __lock_acquire+0xab9/0xd20 [ 1042.840932][ T38] ? __pfx___schedule+0x10/0x10 [ 1042.840984][ T38] ? schedule+0x91/0x360 [ 1042.841020][ T38] schedule+0x165/0x360 [ 1042.841055][ T38] schedule_timeout+0x9a/0x270 [ 1042.841087][ T38] ? __pfx_schedule_timeout[ 1042.841087][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1042.841135][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1042.841169][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.841203][ T38] ? wait_for_completion+0x267/0x5d0 [ 1042.841239][ T38] wait_for_completion+0x2bf/0x5d0 [ 1042.841289][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1042.841326][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 1042.841356][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 1042.841390][ T38] rcu_barrier+0x463/0x570 [ 1042.841427][ T38] wg_destruct+0x21e/0x2f0 [ 1042.841455][ T38] ? __pfx_wg_destruct+0x10/0x10 [ 1042.841482][ T38] netdev_run_todo+0xcd4/0xea0 [ 1042.841515][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1042.841537][ T38] ? unregister_netdevice_queue+0x1b3/0x380 [ 1042.841566][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1042.841590][ T38] ? batadv_meshif_vlan_put+0x131/0x1e0 [ 1042.841619][ T38] ? batadv_meshif_destroy_netlink+0x125/0x160 [ 1042.841656][ T38] default_device_exit_batch+0x81e/0x890 [ 1042.841698][ T38] ? __pfx___might_resched+0x10/0x10 [ 1042.841726][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1042.841761][ T38] ? cfg802154_pernet_exit+0x19/0xe0 [ 1042.841788][ T38] ? mutex_lock_nested+0x16a/0x1d0 [ 1042.841826][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1042.841858][ T38] ops_undo_list+0x525/0x990 [ 1042.841902][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1042.841949][ T38] cleanup_net+0x4cb/0x800 [ 1042.841986][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1042.842023][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1042.842055][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1042.842084][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1042.842115][ T38] process_scheduled_works+0xade/0x17b0 [ 1042.842181][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1042.842232][ T38] worker_thread+0x8a0/0xda0 [ 1042.842267][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1042.842313][ T38] ? __kthread_parkme+0x7b/0x200 [ 1042.842357][ T38] kthread+0x70e/0x8a0 [ 1042.842396][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1042.842426][ T38] ? __pfx_kthread+0x10/0x10 [ 1042.842468][ T38] ? __pfx_kthread+0x10/0x10 [ 1042.842505][ T38] ret_from_fork+0x3f9/0x770 [ 1042.842540][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1042.842578][ T38] ? __switch_to_asm+0x39/0x70 [ 1042.842601][ T38] ? __switch_to_asm+0x33/0x70 [ 1042.842622][ T38] ? __pfx_kthread+0x10/0x10 [ 1042.842670][ T38] ret_from_fork_asm+0x1a/0x30 [ 1042.842712][ T38] [ 1042.842757][ T38] INFO: task syz.6.832:10014 blocked for more than 143 seconds. [ 1042.842774][ T38] Not tainted syzkaller #0 [ 1042.842785][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1042.842796][ T38] task:syz.6.832 state:D stack:25128 pid:10014 tgid:10014 ppid:7099 task_flags:0x400040 flags:0x00004004 [ 1042.842865][ T38] Call Trace: [ 1042.842872][ T38] [ 1042.842886][ T38] __schedule+0x16f3/0x4c20 [ 1042.842951][ T38] ? __pfx___schedule+0x10/0x10 [ 1042.843012][ T38] rt_mutex_schedule+0x77/0xf0 [ 1042.843034][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1042.843078][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1042.843112][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1042.843143][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1042.843174][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1042.843221][ T38] ? rcu_barrier+0x4c/0x570 [ 1042.843253][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1042.843287][ T38] ? rcu_barrier+0x4c/0x570 [ 1042.843313][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1042.843340][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1042.843375][ T38] rcu_barrier+0x4c/0x570 [ 1042.843411][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 1042.843438][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 1042.843471][ T38] kvm_put_kvm+0xf8e/0x1670 [ 1042.843510][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 1042.843543][ T38] kvm_vm_release+0x46/0x50 [ 1042.843573][ T38] __fput+0x45b/0xa80 [ 1042.843610][ T38] task_work_run+0x1d4/0x260 [ 1042.843645][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1042.843677][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 1042.843712][ T38] exit_to_user_mode_loop+0xec/0x110 [ 1042.843745][ T38] do_syscall_64+0x2bd/0x3b0 [ 1042.843765][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.843800][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.843824][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1042.843853][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.843883][ T38] RIP: 0033:0x7f6df708ebe9 [ 1042.843908][ T38] RSP: 002b:00007fffd395bc98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1042.843933][ T38] RAX: 0000000000000000 RBX: 00000000000d98b5 RCX: 00007f6df708ebe9 [ 1042.843949][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1042.843963][ T38] RBP: 00007f6df72c7da0 R08: 0000000000000001 R09: 00000016d395bf8f [ 1042.843979][ T38] R10: 0000001b2fa20000 R11: 0000000000000246 R12: 00007f6df72c5fac [ 1042.843995][ T38] R13: 00007f6df72c5fa0 R14: ffffffffffffffff R15: 00007fffd395bdb0 [ 1042.844033][ T38] [ 1042.844069][ T38] [ 1042.844069][ T38] Showing all locks held in the system: [ 1042.844080][ T38] 4 locks held by kworker/0:0/9: [ 1042.844094][ T38] #0: ffff88805d8c8d38 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.844181][ T38] #1: ffffc900000e7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.844260][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1042.844319][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1042.844379][ T38] 2 locks held by kworker/u8:1/13: [ 1042.844396][ T38] 1 lock held by khungtaskd/38: [ 1042.844409][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1042.844468][ T38] 5 locks held by irq/10-virtio2/198: [ 1042.844499][ T38] 4 locks held by kworker/0:2/3119: [ 1042.844514][ T38] 4 locks held by kworker/u9:1/5155: [ 1042.844527][ T38] #0: ffff88804cb66938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.844591][ T38] #1: ffffc9000fae7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.844660][ T38] #2: ffff88801c39c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1042.844719][ T38] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1042.844779][ T38] 2 locks held by dhcpcd/5501: [ 1042.844792][ T38] #0: ffff888023a5e910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 1042.844853][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1042.844914][ T38] 2 locks held by getty/5597: [ 1042.844927][ T38] #0: ffff88823bf880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1042.844993][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1042.845054][ T38] 3 locks held by kworker/u8:19/6100: [ 1042.845067][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.845128][ T38] #1: ffffc90006077bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.845188][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1042.845242][ T38] 4 locks held by kworker/u9:3/6349: [ 1042.845261][ T38] #0: ffff888029565138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.845327][ T38] #1: ffffc900093ffbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.845394][ T38] #2: ffff88807d03c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1042.845452][ T38] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1042.845511][ T38] 5 locks held by kworker/u8:23/6516: [ 1042.845524][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.845584][ T38] #1: ffffc90005de7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.845652][ T38] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1042.845715][ T38] #3: ffff88805bd657b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 1042.845771][ T38] #4: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1042.845835][ T38] 2 locks held by kworker/0:4/7854: [ 1042.845851][ T38] 3 locks held by kworker/u8:13/8191: [ 1042.845865][ T38] #0: ffff88814d0c2938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.845925][ T38] #1: ffffc90004c47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.845987][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1042.846046][ T38] 2 locks held by kworker/0:7/8517: [ 1042.846060][ T38] 4 locks held by kworker/u9:0/8755: [ 1042.846073][ T38] #0: ffff88803ddbf938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.846137][ T38] #1: ffffc900046bfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.846197][ T38] #2: ffff8880878780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1042.846263][ T38] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1042.846322][ T38] 4 locks held by kworker/u9:4/8756: [ 1042.846335][ T38] #0: ffff88805e1d4938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.846401][ T38] #1: ffffc9000408fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.846455][ T38] #2: ffff88804c1b40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1042.846521][ T38] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1042.846578][ T38] 1 lock held by syz-executor/9759: [ 1042.846591][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1042.846662][ T38] 1 lock held by syz-executor/9761: [ 1042.846675][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1042.846740][ T38] 1 lock held by syz.6.832/10014: [ 1042.846753][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1042.846807][ T38] 1 lock held by syz.8.834/10023: [ 1042.846820][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1042.846872][ T38] 1 lock held by syz.5.836/10032: [ 1042.846885][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1042.846939][ T38] 4 locks held by syz-executor/10043: [ 1042.846952][ T38] #0: ffff888068894e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1042.847012][ T38] #1: ffff8880688940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1042.847082][ T38] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1042.847135][ T38] #3: ffff8880255e8358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1042.847206][ T38] 3 locks held by syz-executor/10049: [ 1042.847219][ T38] #0: ffff888071168e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1042.847277][ T38] #1: ffff8880711680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1042.847339][ T38] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1042.847391][ T38] 2 locks held by syz-executor/10051: [ 1042.847405][ T38] #0: ffff888071094e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1042.847462][ T38] #1: ffff8880710940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1042.847525][ T38] 3 locks held by syz-executor/10054: [ 1042.847538][ T38] #0: ffff88805b894e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1042.847596][ T38] #1: ffff88805b8940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1042.847668][ T38] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1042.847722][ T38] 3 locks held by syz-executor/10057: [ 1042.847736][ T38] #0: ffff88806a780e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1042.847793][ T38] #1: ffff88806a7800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1042.847856][ T38] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1042.847911][ T38] 5 locks held by syz-executor/10069: [ 1042.847925][ T38] 1 lock held by syz-executor/10073: [ 1042.847939][ T38] 4 locks held by syz-executor/10075: [ 1042.847952][ T38] 5 locks held by syz-executor/10078: [ 1042.847966][ T38] 4 locks held by kworker/u9:5/10079: [ 1042.847979][ T38] #0: ffff88803aefa138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1042.848051][ T38] #1: ffffc900046efbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1042.848112][ T38] #2: ffff888089c800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1042.848170][ T38] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1042.848237][ T38] 1 lock held by syz-executor/10092: [ 1042.848250][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1042.848311][ T38] 1 lock held by syz-executor/10096: [ 1042.848325][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1042.848380][ T38] 1 lock held by syz-executor/10098: [ 1042.848392][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1042.848443][ T38] 1 lock held by syz-executor/10101: [ 1042.848455][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1042.848507][ T38] 1 lock held by syz-executor/10104: [ 1042.848519][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1042.848572][ T38] [ 1042.848577][ T38] ============================================= [ 1042.848577][ T38] [ 1042.848595][ T38] NMI backtrace for cpu 1 [ 1042.848618][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1042.848661][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1042.848674][ T38] Call Trace: [ 1042.848683][ T38] [ 1042.848693][ T38] dump_stack_lvl+0x189/0x250 [ 1042.848731][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.848765][ T38] ? __pfx__printk+0x10/0x10 [ 1042.848814][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1042.848851][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1042.848882][ T38] ? __pfx__printk+0x10/0x10 [ 1042.848913][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1042.848945][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1042.848977][ T38] watchdog+0xf93/0xfe0 [ 1042.849013][ T38] ? watchdog+0x1de/0xfe0 [ 1042.849048][ T38] kthread+0x70e/0x8a0 [ 1042.849086][ T38] ? __pfx_watchdog+0x10/0x10 [ 1042.849115][ T38] ? __pfx_kthread+0x10/0x10 [ 1042.849156][ T38] ? __pfx_kthread+0x10/0x10 [ 1042.849193][ T38] ret_from_fork+0x3f9/0x770 [ 1042.849226][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1042.849263][ T38] ? __switch_to_asm+0x39/0x70 [ 1042.849284][ T38] ? __switch_to_asm+0x33/0x70 [ 1042.849305][ T38] ? __pfx_kthread+0x10/0x10 [ 1042.849341][ T38] ret_from_fork_asm+0x1a/0x30 [ 1042.849381][ T38] [ 1042.849393][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1042.849419][ C0] NMI backtrace for cpu 0 [ 1042.849435][ C0] CPU: 0 UID: 0 PID: 198 Comm: irq/10-virtio2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1042.849456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1042.849467][ C0] RIP: 0010:task_rq_lock+0x0/0x470 [ 1042.849489][ C0] Code: df e8 34 d0 8d 00 e9 f9 fe ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 f3 49 [ 1042.849506][ C0] RSP: 0018:ffffc90003b0f958 EFLAGS: 00000006 [ 1042.849522][ C0] RAX: 1ffff110041e043c RBX: 1ffff110041e0440 RCX: dffffc0000000000 [ 1042.849537][ C0] RDX: ffff888020f02200 RSI: ffffc90003b0f990 RDI: ffff888020f01dc0 [ 1042.849551][ C0] RBP: ffffc90003b0fa50 R08: ffff88802f721deb R09: 1ffff11005ee43bd [ 1042.849565][ C0] R10: dffffc0000000000 R11: ffffed1005ee43be R12: dffffc0000000000 [ 1042.849579][ C0] R13: 1ffff92000761f34 R14: ffff888020f01dc0 R15: ffff888020f021e0 [ 1042.849594][ C0] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 1042.849610][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1042.849623][ C0] CR2: 00007fe2f0402020 CR3: 0000000077fe4000 CR4: 00000000003526f0 [ 1042.849640][ C0] Call Trace: [ 1042.849647][ C0] [ 1042.849654][ C0] migrate_enable+0x12a/0x3c0 [ 1042.849682][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 1042.849709][ C0] ? __rcu_read_unlock+0x84/0xe0 [ 1042.849733][ C0] __local_bh_enable+0x23f/0x3d0 [ 1042.849759][ C0] ? __pfx___local_bh_enable+0x10/0x10 [ 1042.849790][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1042.849820][ C0] __local_bh_enable_ip+0x1a4/0x270 [ 1042.849843][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1042.849866][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1042.849907][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1042.849935][ C0] ? irq_finalize_oneshot+0x2f2/0x3d0 [ 1042.849964][ C0] ? __pfx_vp_interrupt+0x10/0x10 [ 1042.849982][ C0] irq_forced_thread_fn+0xe9/0x120 [ 1042.850008][ C0] ? irq_forced_thread_fn+0x2b/0x120 [ 1042.850037][ C0] irq_thread+0x427/0x690 [ 1042.850061][ C0] ? irq_thread+0x17b/0x690 [ 1042.850091][ C0] ? __pfx_irq_forced_thread_fn+0x10/0x10 [ 1042.850119][ C0] ? __pfx_irq_thread+0x10/0x10 [ 1042.850145][ C0] ? __kthread_parkme+0x7b/0x200 [ 1042.850175][ C0] ? __pfx_irq_thread_dtor+0x10/0x10 [ 1042.850204][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1042.850233][ C0] kthread+0x70e/0x8a0 [ 1042.850263][ C0] ? __pfx_irq_thread+0x10/0x10 [ 1042.850288][ C0] ? __pfx_kthread+0x10/0x10 [ 1042.850319][ C0] ? __pfx_kthread+0x10/0x10 [ 1042.850347][ C0] ret_from_fork+0x3f9/0x770 [ 1042.850373][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1042.850400][ C0] ? __switch_to_asm+0x39/0x70 [ 1042.850417][ C0] ? __switch_to_asm+0x33/0x70 [ 1042.850433][ C0] ? __pfx_kthread+0x10/0x10 [ 1042.850462][ C0] ret_from_fork_asm+0x1a/0x30 [ 1042.850489][ C0] [ 1043.030404][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1043.030428][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1043.030455][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1043.030470][ T38] Call Trace: [ 1043.030479][ T38] [ 1043.030490][ T38] dump_stack_lvl+0x99/0x250 [ 1043.030530][ T38] ? __asan_memcpy+0x40/0x70 [ 1043.030555][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.030591][ T38] ? __pfx__printk+0x10/0x10 [ 1043.030639][ T38] vpanic+0x281/0x750 [ 1043.030677][ T38] ? __pfx_vpanic+0x10/0x10 [ 1043.030711][ T38] ? preempt_schedule+0xae/0xc0 [ 1043.030747][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1043.030786][ T38] panic+0xb9/0xc0 [ 1043.030819][ T38] ? __pfx_panic+0x10/0x10 [ 1043.030855][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1043.030900][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1043.030933][ T38] watchdog+0xfd2/0xfe0 [ 1043.030970][ T38] ? watchdog+0x1de/0xfe0 [ 1043.031007][ T38] kthread+0x70e/0x8a0 [ 1043.031046][ T38] ? __pfx_watchdog+0x10/0x10 [ 1043.031076][ T38] ? __pfx_kthread+0x10/0x10 [ 1043.031117][ T38] ? __pfx_kthread+0x10/0x10 [ 1043.031154][ T38] ret_from_fork+0x3f9/0x770 [ 1043.031188][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.031225][ T38] ? __switch_to_asm+0x39/0x70 [ 1043.031246][ T38] ? __switch_to_asm+0x33/0x70 [ 1043.031267][ T38] ? __pfx_kthread+0x10/0x10 [ 1043.031304][ T38] ret_from_fork_asm+0x1a/0x30 [ 1043.031344][ T38] [ 1043.031717][ T38] Kernel Offset: disabled