last executing test programs: 34m9.747519885s ago: executing program 32 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) 33m26.52367634s ago: executing program 33 (id=75): syz_create_resource$binfmt(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=@getchain={0x2c, 0x66, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xb, 0x4}, {0x6, 0x1}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002000)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000100)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 33m3.357729568s ago: executing program 34 (id=106): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4008000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8008402) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010011bd7000000000000a002040000000070000000014000200fc020000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0xfff, 0x5f91, 0x5, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) 28m21.785412329s ago: executing program 4 (id=545): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = getpgid(0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2002012, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 28m21.39358958s ago: executing program 4 (id=546): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000210000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 28m19.802501275s ago: executing program 4 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000040)=[{r0, 0x4400}], 0x1, 0x28d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x34000811) 28m18.255730496s ago: executing program 4 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7b, 0x5}, 0x51, [0x7, 0x33d, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x800000000049, 0x1, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x18, &(0x7f0000000140)={0x40, 0x22, 0x3b, {0x3b, 0xb, "1eb9b1d7080b5c858c9a943606cd17b21b8d6cd7b7d6631781c8942b96076d29fa148419fc9cc80b6abcfa1800000000000000f200000078b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000580)={0x0, 0xc, 0x1, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 28m14.448695679s ago: executing program 4 (id=554): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:4\t\n', @ANYRESHEX=r1], 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110032c512e40d1123314000001021b01090212000f058580ff09048305009850e301"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r5 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffe, 0x0, 0x0, 0xfd, "0062ba7d82000000160000000000f738096304"}) r7 = syz_open_pts(r6, 0xc81) r8 = dup3(r7, r6, 0x80000) read$watch_queue(r8, &(0x7f0000001d40)=""/4095, 0xfff) syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000080)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) socket$can_j1939(0x1d, 0x2, 0x7) 28m2.691065482s ago: executing program 4 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27m46.964824223s ago: executing program 35 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m15.665589206s ago: executing program 8 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}}, 0x0) 8m14.551425306s ago: executing program 8 (id=2259): r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000440)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, r3}, 0x14) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setuid(0xee01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x24, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x2, 0x2, 0x8, 0x0, [@local]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 8m11.751404139s ago: executing program 8 (id=2261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 8m10.17459677s ago: executing program 8 (id=2266): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 8m9.678838526s ago: executing program 8 (id=2271): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) 8m5.706477456s ago: executing program 3 (id=2276): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x400c000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8m4.623505515s ago: executing program 3 (id=2278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, 0x0, 0x7f03) 8m3.072943805s ago: executing program 3 (id=2282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m2.387734471s ago: executing program 8 (id=2284): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r2, r2, 0x0, 0x40008) 8m1.26735533s ago: executing program 36 (id=2284): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r2, r2, 0x0, 0x40008) 8m1.254084893s ago: executing program 3 (id=2288): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 8m1.046438037s ago: executing program 3 (id=2289): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 8m0.039696078s ago: executing program 3 (id=2294): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, &(0x7f0000000180), &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 7m59.792680597s ago: executing program 37 (id=2294): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, &(0x7f0000000180), &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 7m54.24355741s ago: executing program 7 (id=2307): r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000440)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, r3}, 0x14) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setuid(0xee01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x24, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x2, 0x2, 0x8, 0x0, [@local]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = fcntl$dupfd(r5, 0x406, r5) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 7m53.868150442s ago: executing program 7 (id=2310): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000040)=0x1f) 7m52.023098876s ago: executing program 7 (id=2315): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0xff16) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 7m51.630923865s ago: executing program 7 (id=2318): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mkdir(0x0, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 7m51.39477683s ago: executing program 7 (id=2319): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@any, 0x1}, 0x400, "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"}, 0x418, 0x2001}) 7m50.573659355s ago: executing program 6 (id=2324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x80) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(0x0, &(0x7f0000000300)='./bus\x00') 7m49.098104883s ago: executing program 6 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m48.578270954s ago: executing program 6 (id=2328): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 7m48.383950972s ago: executing program 7 (id=2329): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090000000000feffffff0a000000", @ANYRES32=r2, @ANYBLOB="140050"], 0x3c}}, 0x0) 7m48.144209294s ago: executing program 38 (id=2329): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090000000000feffffff0a000000", @ANYRES32=r2, @ANYBLOB="140050"], 0x3c}}, 0x0) 7m47.964265856s ago: executing program 6 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 7m47.654394054s ago: executing program 6 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x16a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7m46.978702726s ago: executing program 6 (id=2336): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mkdir(0x0, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 7m46.758702622s ago: executing program 39 (id=2336): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mkdir(0x0, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 6m21.137519399s ago: executing program 0 (id=2574): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@orangefs={0x14, 0x1, {"308bc688ee1173dc995e8e257e447006"}}, 0x0, 0x0) 6m20.764817574s ago: executing program 0 (id=2576): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xa, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m19.567883651s ago: executing program 0 (id=2581): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x9, 0x6, 0x80000001, 0x48ce, 0xfffffffffffffffc, 0x800000db}) 6m19.414984832s ago: executing program 0 (id=2582): shmat(0x0, &(0x7f000062b000/0x3000)=nil, 0x400c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0xf2, &(0x7f0000fff000/0x1000)=nil, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x40) openat$sequencer(0xffffffffffffff9c, 0x0, 0xbe0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(0x0, 0x8, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, 0x0, 0x541844, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x52, 0x1c}, 0x18) 6m17.572482085s ago: executing program 0 (id=2586): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c39cc, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x280c40, 0x0) 6m16.108495894s ago: executing program 0 (id=2592): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x9, 0x6, 0x80000001, 0x48ce, 0xfffffffffffffffc, 0x800000db}) 6m4.19773846s ago: executing program 2 (id=2615): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f000009de80), 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0xa7}], 0x1, 0x40011121, 0x0) 6m2.898240368s ago: executing program 2 (id=2616): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6m1.888593275s ago: executing program 2 (id=2619): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000380), 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x81]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r1 = userfaultfd(0x80801) r2 = socket(0x10, 0x3, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x401) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x102, 0xfffd, 0xe0, 0x0, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x800) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000040)=0x1f) bind$alg(r7, 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f00000000c0)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 6m1.514600844s ago: executing program 2 (id=2622): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 6m1.374369095s ago: executing program 2 (id=2624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x10d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m0.426873463s ago: executing program 2 (id=2626): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xf3e0, 0x9, 0x3, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9b, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5m59.885657022s ago: executing program 40 (id=2626): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xf3e0, 0x9, 0x3, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9b, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5m59.803766876s ago: executing program 41 (id=2592): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x9, 0x6, 0x80000001, 0x48ce, 0xfffffffffffffffc, 0x800000db}) 4m20.987581883s ago: executing program 5 (id=2955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00') 4m17.946836434s ago: executing program 5 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x2b) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m10.212401843s ago: executing program 5 (id=3015): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m8.487662724s ago: executing program 5 (id=3023): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) process_vm_readv(r0, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/148, 0x94}, {0x0}], 0x7, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/13, 0xd}], 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000180)={0x5, 0x0, 0xfff6}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 4m8.398425296s ago: executing program 9 (id=3025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00') 4m7.222711123s ago: executing program 5 (id=3026): semop(0x0, &(0x7f0000000380), 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x81]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) userfaultfd(0x80801) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x401) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000040)=0x1f) 4m7.143796101s ago: executing program 9 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a) read$FUSE(r5, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000004380)={0x10, 0x0, r7}, 0x10) setreuid(0xee00, 0x0) 4m7.082501788s ago: executing program 5 (id=3028): r0 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) preadv(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x1, 0x9) 4m7.010968296s ago: executing program 9 (id=3029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a) read$FUSE(r5, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000004380)={0x10, 0x0, r7}, 0x10) setreuid(0xee00, 0x0) 4m6.907595676s ago: executing program 9 (id=3030): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x2b) r5 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m5.788328074s ago: executing program 9 (id=3031): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m4.716594121s ago: executing program 9 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00') 3m50.809292016s ago: executing program 42 (id=3028): r0 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) preadv(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x1, 0x9) 3m48.460502866s ago: executing program 43 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00') 9.307342354s ago: executing program 1 (id=3176): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.1317279s ago: executing program 1 (id=3177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, r2) poll(0x0, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000b1cbe9d9e84a90e5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r6, 0x2}, 0x20) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) 6.572896281s ago: executing program 1 (id=3178): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.723376003s ago: executing program 1 (id=3179): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) tgkill(r0, r0, 0x1e) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 1.291816997s ago: executing program 1 (id=3180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_wait(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 1 (id=3181): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f00000000c0)={[0xffffffff]}, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x0, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x7, 0x4, 0xbdb], 0x5000, 0x42900}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x45}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x4, 0x7d, 0x7, 0x36, 0x2, 0x2, 0x87}, {0x0, 0x33325000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x3000, 0xd000, 0xf, 0x3, 0x16, 0xa, 0xab, 0x8, 0xc, 0x9, 0x8, 0x97}, {0x2000, 0xeeef0000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x1, 0x0, 0x5, 0x7, 0x5, 0xa, 0x3, 0x8, 0x81, 0x42, 0x70}, {0x0, 0x4000, 0xa, 0x5, 0xcd, 0x9, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): onfig 0 has no interface number 0 [ 1798.679036][T11156] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1798.679064][T11156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.679087][T11156] usb 6-1: Product: syz [ 1798.679102][T11156] usb 6-1: Manufacturer: syz [ 1798.679118][T11156] usb 6-1: SerialNumber: syz [ 1798.767676][T11156] usb 6-1: config 0 descriptor?? [ 1798.782775][T11156] hub 6-1:0.132: bad descriptor, ignoring hub [ 1798.782819][T11156] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1798.851039][T11156] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input13 [ 1798.968880][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1799.067808][ T5944] usb 1-1: USB disconnect, device number 5 [ 1799.164025][ T5920] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1799.164107][ T5920] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1799.164145][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1799.168473][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1799.168511][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1799.168543][ T5920] usb 3-1: Product: syz [ 1799.168566][ T5920] usb 3-1: Manufacturer: syz [ 1799.168590][ T5920] usb 3-1: SerialNumber: syz [ 1799.263123][ T5920] usb 3-1: config 0 descriptor?? [ 1799.318655][ T5920] hub 3-1:0.0: bad descriptor, ignoring hub [ 1799.318698][ T5920] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1799.452382][ T5920] usb 3-1: selecting invalid altsetting 0 [ 1800.450172][ T5920] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 1800.504870][T16797] ubi: mtd0 is already attached to ubi31 [ 1800.677464][T16803] overlayfs: missing 'lowerdir' [ 1800.762395][ T5920] usb 3-1: device firmware changed [ 1800.769800][ T5920] usb 3-1: USB disconnect, device number 5 [ 1800.917887][T16784] udevd[16784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.071385][T16810] tipc: Started in network mode [ 1801.071420][T16810] tipc: Node identity 866baad9e544, cluster identity 4711 [ 1801.071648][T16810] tipc: Enabled bearer , priority 0 [ 1801.072761][T16810] syzkaller0: entered promiscuous mode [ 1801.072788][T16810] syzkaller0: entered allmulticast mode [ 1801.129914][T16810] tipc: Resetting bearer [ 1801.165922][T16809] tipc: Resetting bearer [ 1801.199600][ T9] usb 10-1: USB disconnect, device number 4 [ 1801.336261][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1801.397951][T16809] tipc: Disabling bearer [ 1801.671314][ T5920] usb 3-1: device descriptor read/all, error -71 [ 1801.777880][T16830] kAFS: unable to lookup cell '(' [ 1802.409819][T16838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1803.988539][ T5944] usb 6-1: USB disconnect, device number 16 [ 1805.282368][T16870] binder: 16866:16870 ioctl c0306201 200000000040 returned -22 [ 1805.282851][T16870] binder: 16866:16870 ioctl c0306201 200000000640 returned -22 [ 1805.999929][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2591'. [ 1807.242945][ T5944] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1807.405143][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2596'. [ 1807.422693][ T5944] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1807.422768][ T5944] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1807.422800][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1807.426581][ T5944] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1807.426617][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1807.426642][ T5944] usb 6-1: Product: syz [ 1807.426661][ T5944] usb 6-1: Manufacturer: syz [ 1807.426680][ T5944] usb 6-1: SerialNumber: syz [ 1807.443265][ T5944] usb 6-1: config 0 descriptor?? [ 1807.457834][ T5944] hub 6-1:0.0: bad descriptor, ignoring hub [ 1807.457883][ T5944] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1807.465407][ T5944] usb 6-1: selecting invalid altsetting 0 [ 1807.583154][T16904] ubi: mtd0 is already attached to ubi31 [ 1807.731690][T16906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.732328][T16906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.885382][ T9] usb 6-1: USB disconnect, device number 17 [ 1810.713542][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1813.514358][ T6154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.875970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.241842][T16986] kAFS: unable to lookup cell '(,c¾ûL' [ 1817.272094][T16990] ubi: mtd0 is already attached to ubi31 [ 1817.351848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.663925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.691721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.712618][ T6154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.398027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1818.677885][T16992] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1819.093612][T17013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1819.443471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1819.551431][ T6154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.698915][ T8764] page_pool_release_retry() stalled pool shutdown: id 258, 50 inflight 426 sec [ 1819.807768][T17021] ubi: mtd0 is already attached to ubi31 [ 1820.076015][ T6154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.253516][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1820.377270][ C1] vkms_vblank_simulate: vblank timer overrun [ 1820.416330][ T5920] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1820.416395][ T5920] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1820.416422][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1820.419599][ T5920] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1820.419631][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1820.419654][ T5920] usb 2-1: Product: syz [ 1820.419670][ T5920] usb 2-1: Manufacturer: syz [ 1820.419686][ T5920] usb 2-1: SerialNumber: syz [ 1820.557843][ T5920] usb 2-1: config 0 descriptor?? [ 1820.572521][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 1820.572562][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1820.592011][ T5920] usb 2-1: selecting invalid altsetting 0 [ 1821.521127][ T6154] bridge_slave_1: left allmulticast mode [ 1821.521159][ T6154] bridge_slave_1: left promiscuous mode [ 1821.523251][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.613238][ T6154] bridge_slave_0: left allmulticast mode [ 1821.613270][ T6154] bridge_slave_0: left promiscuous mode [ 1821.613567][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.975854][T17062] ubi: mtd0 is already attached to ubi31 [ 1822.366036][T17069] kAFS: unable to lookup cell '(,c¾ûL' [ 1822.691042][ T8764] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1822.795122][T11543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1822.836992][T11543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1822.839582][T11543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1822.845605][T11543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1822.849300][T11543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1822.880367][ T8764] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1822.880395][ T8764] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1822.880442][ T8764] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1822.880482][ T8764] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1822.880506][ T8764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.901605][ T8764] usb 6-1: config 0 descriptor?? [ 1822.967860][ T8764] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1823.560706][T14528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1823.589905][T14528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1823.594658][T14528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1823.630294][T14528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1823.672818][T14528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1824.594487][ T6154] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1824.822879][ T5920] usb 2-1: USB disconnect, device number 5 [ 1825.188300][T11543] Bluetooth: hci3: command tx timeout [ 1825.482104][ T9] usb 6-1: USB disconnect, device number 18 [ 1825.976600][T11543] Bluetooth: hci1: command tx timeout [ 1826.273782][T17125] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1826.273843][T17125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1826.554870][T17132] ubi: mtd0 is already attached to ubi31 [ 1826.775787][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.085578][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.733208][T11543] Bluetooth: hci3: command tx timeout [ 1828.021024][ T6154] bond0 (unregistering): Released all slaves [ 1828.176006][ T8688] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1828.176194][T14528] Bluetooth: hci1: command tx timeout [ 1828.356931][ T8688] usb 6-1: Using ep0 maxpacket: 16 [ 1828.360896][ T8688] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1828.360922][ T8688] usb 6-1: config 0 has no interface number 0 [ 1828.364100][ T8688] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1828.364132][ T8688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.364150][ T8688] usb 6-1: Product: syz [ 1828.364161][ T8688] usb 6-1: Manufacturer: syz [ 1828.364172][ T8688] usb 6-1: SerialNumber: syz [ 1828.449698][ T8688] usb 6-1: config 0 descriptor?? [ 1828.452479][ T8688] hub 6-1:0.132: bad descriptor, ignoring hub [ 1828.452521][ T8688] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1828.477826][ T8688] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input14 [ 1829.292103][ T6154] bond1 (unregistering): Released all slaves [ 1829.365514][ T5920] usb 6-1: USB disconnect, device number 19 [ 1829.705579][ T6154] tipc: Left network mode [ 1829.893120][T14528] Bluetooth: hci3: command tx timeout [ 1830.409589][T14528] Bluetooth: hci1: command tx timeout [ 1830.535513][T17181] ubi: mtd0 is already attached to ubi31 [ 1832.108599][T14528] Bluetooth: hci3: command tx timeout [ 1832.478286][T17196] binder: 17195:17196 ioctl c0306201 200000000640 returned -22 [ 1832.666634][T14528] Bluetooth: hci1: command tx timeout [ 1834.193574][ T6154] hsr_slave_0: left promiscuous mode [ 1834.300838][ T6154] hsr_slave_1: left promiscuous mode [ 1834.301944][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1834.301971][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1834.343710][T17226] fuse: Unknown parameter 'group_id00000000000000000000' [ 1834.374266][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1834.374295][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1834.625660][T17231] ubi: mtd0 is already attached to ubi31 [ 1834.710426][ T6154] veth1_macvtap: left promiscuous mode [ 1834.710567][ T6154] veth0_macvtap: left promiscuous mode [ 1834.716779][ T6154] veth1_vlan: left promiscuous mode [ 1834.717088][ T6154] veth0_vlan: left promiscuous mode [ 1835.038592][ T5920] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1835.222547][ T5920] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1835.222617][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.222648][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.222673][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1835.222719][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1835.222745][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.244442][ T5920] usb 2-1: config 0 descriptor?? [ 1835.379572][T17250] overlayfs: failed to resolve './file0': -2 [ 1835.734474][ T5920] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 1835.734518][ T5920] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1835.734545][ T5920] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1835.820422][T17254] binder: 17252:17254 ioctl c0306201 0 returned -14 [ 1835.826043][ T5920] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1836.047677][ T5944] usb 2-1: USB disconnect, device number 6 [ 1836.355671][T17258] netlink: 'syz.5.2668': attribute type 13 has an invalid length. [ 1836.706281][ T5944] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1836.933000][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1836.933040][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 1836.933091][ T5944] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1836.933118][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.970233][ T5944] usb 6-1: config 0 descriptor?? [ 1836.971903][T17262] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1838.066002][T17273] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1838.487489][T17276] ubi: mtd0 is already attached to ubi31 [ 1839.183505][T17283] netlink: 'syz.9.2675': attribute type 13 has an invalid length. [ 1839.393250][ T38] audit: type=1326 audit(1764313126.835:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17284 comm="syz.1.2676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34e3bf749 code=0x0 [ 1841.728043][T17293] netlink: 'syz.1.2678': attribute type 13 has an invalid length. [ 1842.459516][ T5944] usbhid 6-1:0.0: can't add hid device: -32 [ 1842.459627][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1843.100965][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1843.442702][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1847.437438][ T5944] usb 6-1: USB disconnect, device number 20 [ 1847.553363][T17302] overlayfs: failed to resolve './file0': -2 [ 1849.042552][T17071] chnl_net:caif_netlink_parms(): no params data found [ 1849.342736][ T38] audit: type=1326 audit(1764313136.142:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17315 comm="syz.5.2683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ca971f749 code=0x0 [ 1849.507332][T17078] chnl_net:caif_netlink_parms(): no params data found [ 1849.755913][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1849.912690][ T9] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1849.912761][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.912792][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1849.912818][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1849.912867][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1849.912902][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.934539][ T9] usb 10-1: config 0 descriptor?? [ 1850.359943][T17071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.360093][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.360402][T17071] bridge_slave_0: entered allmulticast mode [ 1850.363527][T17071] bridge_slave_0: entered promiscuous mode [ 1850.443649][ T5944] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1850.475924][T17071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.476080][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.476361][T17071] bridge_slave_1: entered allmulticast mode [ 1850.480422][T17071] bridge_slave_1: entered promiscuous mode [ 1850.585374][ T9] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 1850.585420][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1850.652609][ T5944] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1850.652670][ T5944] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1850.652696][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1850.667115][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1850.696843][ T5944] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1850.696875][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1850.696897][ T5944] usb 6-1: Product: syz [ 1850.696912][ T5944] usb 6-1: Manufacturer: syz [ 1850.696929][ T5944] usb 6-1: SerialNumber: syz [ 1850.749679][ T5944] usb 6-1: config 0 descriptor?? [ 1850.805746][ T5944] hub 6-1:0.0: bad descriptor, ignoring hub [ 1850.805792][ T5944] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1850.808315][ T9] usb 10-1: USB disconnect, device number 5 [ 1850.831215][ T5944] usb 6-1: selecting invalid altsetting 0 [ 1850.956473][T17344] fido_id[17344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1851.214637][ T5944] usb 6-1: USB disconnect, device number 21 [ 1851.307076][T17297] udevd[17297]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.705182][ T5944] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1851.779691][T17071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1851.789932][T17078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.799271][T17078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.799572][T17078] bridge_slave_0: entered allmulticast mode [ 1851.818082][T17078] bridge_slave_0: entered promiscuous mode [ 1851.833255][T17071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.837334][T17078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.837497][T17078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.837771][T17078] bridge_slave_1: entered allmulticast mode [ 1851.842853][T17078] bridge_slave_1: entered promiscuous mode [ 1851.924948][ T5944] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1851.925018][ T5944] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1851.925044][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1851.934373][ T5944] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1851.934404][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1851.934428][ T5944] usb 6-1: Product: syz [ 1851.934445][ T5944] usb 6-1: Manufacturer: syz [ 1851.934460][ T5944] usb 6-1: SerialNumber: syz [ 1852.022673][ T5944] usb 6-1: config 0 descriptor?? [ 1852.050650][ T5944] hub 6-1:0.0: bad descriptor, ignoring hub [ 1852.050694][ T5944] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1852.056056][ T5944] usb 6-1: selecting invalid altsetting 0 [ 1852.540948][ T5944] usb 6-1: USB disconnect, device number 22 [ 1853.247127][T17071] team0: Port device team_slave_0 added [ 1853.253854][T17383] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1853.351850][T17078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1853.352201][T17383] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1853.381838][T17071] team0: Port device team_slave_1 added [ 1853.430976][T17078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1853.926460][T17392] ubi: mtd0 is already attached to ubi31 [ 1854.256014][T17401] binder: 17398:17401 ioctl c0306201 0 returned -14 [ 1854.497681][T17396] netlink: 'syz.9.2694': attribute type 13 has an invalid length. [ 1854.805095][T17417] netlink: 'syz.5.2697': attribute type 13 has an invalid length. [ 1855.265156][ T8788] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1855.266925][T11156] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1855.520954][T17071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.520968][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.520990][T17071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.577422][ T8788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1855.577534][ T8788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 1855.577584][ T8788] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1855.577602][ T8788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.695154][ T8788] usb 6-1: config 0 descriptor?? [ 1855.710777][T17418] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1855.738502][T11156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1855.738528][T11156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 1855.738612][T11156] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1855.738629][T11156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.875340][T11156] usb 2-1: config 0 descriptor?? [ 1855.877651][T17400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1856.774505][T17078] team0: Port device team_slave_0 added [ 1858.540720][ T6154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.810459][T17071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1858.810474][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.810499][T17071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.818251][T17078] team0: Port device team_slave_1 added [ 1860.169194][ T6154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.288617][T17078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.288633][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1860.288654][T17078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1860.750029][T17078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.750044][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1860.750443][T17078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.097071][ T8788] usbhid 6-1:0.0: can't add hid device: -32 [ 1861.097335][ T8788] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1861.350061][T11156] usbhid 2-1:0.0: can't add hid device: -32 [ 1861.350166][T11156] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1861.576849][T11874] usb 6-1: USB disconnect, device number 23 [ 1861.705087][ T6154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.713887][ T8688] usb 2-1: USB disconnect, device number 7 [ 1862.006415][T17071] hsr_slave_0: entered promiscuous mode [ 1862.007956][T17071] hsr_slave_1: entered promiscuous mode [ 1862.022767][T17071] debugfs: 'hsr0' already exists in 'hsr' [ 1862.022815][T17071] Cannot create hsr debugfs directory [ 1862.122951][T11874] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1862.278336][ T8688] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1862.281475][T11874] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1862.281511][T11874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1862.340431][T11874] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1862.340466][T11874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.340487][T11874] usb 6-1: Product: syz [ 1862.340502][T11874] usb 6-1: Manufacturer: syz [ 1862.340518][T11874] usb 6-1: SerialNumber: syz [ 1862.362998][T11874] usb 6-1: config 0 descriptor?? [ 1862.375777][T17450] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1862.466824][ T6154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.483988][ T8688] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1862.484119][ T8688] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1862.484144][ T8688] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1862.494638][ T8688] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1862.494741][ T8688] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1862.494768][ T8688] usb 2-1: Product: syz [ 1862.494786][ T8688] usb 2-1: Manufacturer: syz [ 1862.494805][ T8688] usb 2-1: SerialNumber: syz [ 1862.683128][T11874] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1862.747117][ T8688] usb 2-1: config 0 descriptor?? [ 1862.804677][T11874] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 1863.025884][ T8688] hub 2-1:0.0: bad descriptor, ignoring hub [ 1863.025929][ T8688] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1863.055118][ C1] powermate: config urb returned -71 [ 1863.058786][ C1] powermate: config urb returned -71 [ 1863.059065][ C1] powermate: config urb returned -71 [ 1863.059297][ C1] powermate: config urb returned -71 [ 1863.248342][T11874] usb 6-1: USB disconnect, device number 24 [ 1863.248432][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1863.250097][ T8688] usb 2-1: selecting invalid altsetting 0 [ 1863.940031][ T8688] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 1864.126867][T17078] hsr_slave_0: entered promiscuous mode [ 1864.142100][T17078] hsr_slave_1: entered promiscuous mode [ 1864.143179][T17078] debugfs: 'hsr0' already exists in 'hsr' [ 1864.143208][T17078] Cannot create hsr debugfs directory [ 1864.476715][ T8688] usb 2-1: failed to restore interface 0 altsetting 251 (error=-71) [ 1864.572019][ T8688] usb 2-1: USB disconnect, device number 8 [ 1864.861600][T17440] udevd[17440]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1865.781177][T17537] kAFS: unable to lookup cell '(' [ 1865.862024][T17537] kAFS: unable to lookup cell '(,c¾ûL' [ 1866.591514][ T6154] bridge_slave_1: left allmulticast mode [ 1866.591547][ T6154] bridge_slave_1: left promiscuous mode [ 1866.591809][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.780627][ T6154] bridge_slave_0: left allmulticast mode [ 1866.780659][ T6154] bridge_slave_0: left promiscuous mode [ 1866.808366][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.024758][ T8763] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1867.187689][ T8763] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1867.187728][ T8763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1867.192118][ T8763] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1867.192147][ T8763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.192164][ T8763] usb 6-1: Product: syz [ 1867.192178][ T8763] usb 6-1: Manufacturer: syz [ 1867.192191][ T8763] usb 6-1: SerialNumber: syz [ 1867.263152][ T8763] usb 6-1: config 0 descriptor?? [ 1867.271102][T17554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1867.508025][ T8763] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1867.555355][ T8763] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 1867.612140][ C0] powermate: config urb returned -71 [ 1867.612347][ C0] powermate: config urb returned -71 [ 1867.612646][ C0] powermate: config urb returned -71 [ 1867.612878][ C0] powermate: config urb returned -71 [ 1867.672476][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1867.672549][ T8763] usb 6-1: USB disconnect, device number 25 [ 1868.782507][T17592] kAFS: unable to lookup cell '(' [ 1868.783089][T17592] kAFS: unable to lookup cell '(,c¾ûL' [ 1870.411447][T17609] overlayfs: missing 'lowerdir' [ 1871.938272][ T8788] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1872.190951][ T8788] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1872.190987][ T8788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1872.191016][ T8788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1872.231217][ T8788] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1872.231249][ T8788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.231270][ T8788] usb 2-1: Product: syz [ 1872.231286][ T8788] usb 2-1: Manufacturer: syz [ 1872.231301][ T8788] usb 2-1: SerialNumber: syz [ 1872.337426][ T8788] usb 2-1: config 0 descriptor?? [ 1872.581614][ T8788] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1872.581876][ T8788] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 1872.604876][ T8788] usb 2-1: USB disconnect, device number 9 [ 1875.476658][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1879.572357][T17686] ubi: mtd0 is already attached to ubi31 [ 1882.649637][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1882.805259][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.529044][T17735] fuse: Bad value for 'fd' [ 1884.165153][T11156] page_pool_release_retry() stalled pool shutdown: id 258, 50 inflight 486 sec [ 1884.239106][ T6154] bond0 (unregistering): Released all slaves [ 1884.716704][T17745] ubi: mtd0 is already attached to ubi31 [ 1885.918638][T17750] fuse: Bad value for 'fd' [ 1889.045037][T11543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1890.207122][T11543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1890.209031][T11543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1890.234996][T11543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1890.242403][T11543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1890.417735][T14528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1890.429321][ T6154] bond1 (unregistering): Released all slaves [ 1890.461864][T14528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1890.469384][T14528] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1890.471844][T17751] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1890.526512][T17783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1890.539168][T17783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1890.958446][ T6154] tipc: Left network mode [ 1892.759318][T11543] Bluetooth: hci4: command tx timeout [ 1892.823784][T11543] Bluetooth: hci6: command tx timeout [ 1895.079805][T11543] Bluetooth: hci4: command tx timeout [ 1895.132214][T11543] Bluetooth: hci6: command tx timeout [ 1896.122373][T17837] netlink: 'syz.5.2822': attribute type 13 has an invalid length. [ 1897.523432][T11543] Bluetooth: hci4: command tx timeout [ 1897.523472][T11543] Bluetooth: hci6: command tx timeout [ 1899.663404][T17783] Bluetooth: hci6: command tx timeout [ 1899.663445][T17783] Bluetooth: hci4: command tx timeout [ 1900.178431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1900.348695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1900.823133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1900.943726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1901.067599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1901.410509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1901.715895][ T6154] hsr_slave_0: left promiscuous mode [ 1901.760749][ T6154] hsr_slave_1: left promiscuous mode [ 1901.761961][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1901.762025][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1901.828798][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1901.828829][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.025605][ T6154] veth1_macvtap: left promiscuous mode [ 1902.031795][ T6154] veth0_macvtap: left promiscuous mode [ 1902.032214][ T6154] veth1_vlan: left promiscuous mode [ 1902.032546][ T6154] veth0_vlan: left promiscuous mode [ 1902.287015][T17930] Bluetooth: MGMT ver 1.23 [ 1902.290037][T17930] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1902.638036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.758211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.868642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.975313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.076358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.153459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.223199][ T8763] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1903.348302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.386277][ T8763] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1903.386315][ T8763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1903.386345][ T8763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1903.389638][ T8763] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1903.389670][ T8763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.389693][ T8763] usb 2-1: Product: syz [ 1903.389709][ T8763] usb 2-1: Manufacturer: syz [ 1903.389725][ T8763] usb 2-1: SerialNumber: syz [ 1903.472651][ T8763] usb 2-1: config 0 descriptor?? [ 1903.532472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1903.720134][ T8763] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1903.720419][ T8763] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 1903.795959][ T8763] usb 2-1: USB disconnect, device number 10 [ 1903.919305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1904.351725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1904.695715][T17983] fuse: Bad value for 'fd' [ 1904.722685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1905.611394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.008359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.198741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.337458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.557623][T18002] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1906.686266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.903110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.245685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.889255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1908.582296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1908.857911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1909.032683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1909.208438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.073087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.177743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.279449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.347022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.414517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.463588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.533117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.591598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.668790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.719837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.783089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.837930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.899858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1910.961292][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.023762][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1911.067657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.176719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.461754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.537669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.584211][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1912.489797][ C1] vkms_vblank_simulate: vblank timer overrun [ 1917.410556][T18019] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1917.526624][T18049] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1917.574765][T17768] chnl_net:caif_netlink_parms(): no params data found [ 1918.369834][T17780] chnl_net:caif_netlink_parms(): no params data found [ 1919.390202][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.390355][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.390662][T17768] bridge_slave_0: entered allmulticast mode [ 1919.393641][T17768] bridge_slave_0: entered promiscuous mode [ 1919.423100][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.423261][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.423617][T17768] bridge_slave_1: entered allmulticast mode [ 1919.426997][T17768] bridge_slave_1: entered promiscuous mode [ 1920.600232][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1920.786094][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.592013][T17780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.592164][T17780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1923.592463][T17780] bridge_slave_0: entered allmulticast mode [ 1923.595412][T17780] bridge_slave_0: entered promiscuous mode [ 1924.008597][T17780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.008783][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.009036][T17780] bridge_slave_1: entered allmulticast mode [ 1924.012424][T17780] bridge_slave_1: entered promiscuous mode [ 1924.062916][T17768] team0: Port device team_slave_0 added [ 1924.192209][T17768] team0: Port device team_slave_1 added [ 1924.844072][T17780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1926.651743][T17780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1926.652718][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1926.652734][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1926.652764][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1926.691138][T18245] ubi: mtd0 is already attached to ubi31 [ 1926.711033][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1926.711058][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1926.711105][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1927.863934][ T6154] bridge_slave_1: left allmulticast mode [ 1927.863967][ T6154] bridge_slave_1: left promiscuous mode [ 1927.864245][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.364294][ T6154] bridge_slave_0: left allmulticast mode [ 1928.364327][ T6154] bridge_slave_0: left promiscuous mode [ 1928.381529][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.468554][ T6154] bridge_slave_1: left allmulticast mode [ 1928.468588][ T6154] bridge_slave_1: left promiscuous mode [ 1928.469636][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.572931][ T6154] bridge_slave_0: left allmulticast mode [ 1928.572966][ T6154] bridge_slave_0: left promiscuous mode [ 1928.573224][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.405390][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1929.523941][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1929.623703][ T6154] bond0 (unregistering): Released all slaves [ 1930.053413][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1930.189298][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1930.295377][ T6154] bond0 (unregistering): Released all slaves [ 1930.533464][T18308] ubi: mtd0 is already attached to ubi31 [ 1930.577422][T17780] team0: Port device team_slave_0 added [ 1930.808873][T17780] team0: Port device team_slave_1 added [ 1930.990254][ T8788] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1931.181997][ T8788] usb 2-1: config 0 has no interfaces? [ 1931.185165][ T8788] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1931.185199][ T8788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.185223][ T8788] usb 2-1: Product: syz [ 1931.185239][ T8788] usb 2-1: Manufacturer: syz [ 1931.185256][ T8788] usb 2-1: SerialNumber: syz [ 1931.209538][ T8788] usb 2-1: config 0 descriptor?? [ 1931.237813][T17768] hsr_slave_0: entered promiscuous mode [ 1931.239339][T17768] hsr_slave_1: entered promiscuous mode [ 1931.240441][T17768] debugfs: 'hsr0' already exists in 'hsr' [ 1931.240476][T17768] Cannot create hsr debugfs directory [ 1931.464984][T14361] usb 2-1: USB disconnect, device number 11 [ 1931.765758][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.765778][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.765810][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1933.076065][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1933.076086][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1933.076119][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1934.675159][ T6154] hsr_slave_0: left promiscuous mode [ 1935.765375][ T6154] hsr_slave_1: left promiscuous mode [ 1935.766510][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.106115][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1938.128224][ T6154] hsr_slave_0: left promiscuous mode [ 1938.171130][ T6154] hsr_slave_1: left promiscuous mode [ 1938.172211][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1938.449963][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.167601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1939.661621][ C1] vkms_vblank_simulate: vblank timer overrun [ 1940.041222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1940.776116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1941.150228][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1941.190853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.293831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.688310][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.748491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.829096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1944.318648][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1944.521821][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1945.757912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.456859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.512514][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.699651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.905757][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.475206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.728922][T18405] block device autoloading is deprecated and will be removed. [ 1947.731461][T18405] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1947.731496][T18405] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1947.731865][T18405] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1947.731885][T18405] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1947.764718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.910215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.030002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.170586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.258631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.305289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.374925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.234264][T14361] page_pool_release_retry() stalled pool shutdown: id 258, 50 inflight 547 sec [ 1949.253318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.311560][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.592375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.653256][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1949.709340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.246144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.690121][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.238052][T17783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1953.272739][T17783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1953.276127][T17783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1953.283969][T17783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1953.303543][T17783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1953.313814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.320889][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1953.390274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.590168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.963833][T11543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1953.997655][T11543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1953.999677][T11543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1954.001814][T11543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1954.002597][T11543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1957.191492][T17783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1957.214175][T17783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1957.217154][T17783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1957.219055][T17783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1957.248300][T17783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1957.425720][T11543] Bluetooth: hci1: command tx timeout [ 1957.482328][T17783] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1957.505970][T17783] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1957.508432][T17783] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1957.521762][T17783] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1957.534557][T17783] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1958.393534][T18369] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1959.324813][T17783] Bluetooth: hci3: command tx timeout [ 1959.447613][T17783] Bluetooth: hci7: command tx timeout [ 1959.619372][T17783] Bluetooth: hci1: command tx timeout [ 1959.861785][T17783] Bluetooth: hci8: command tx timeout [ 1961.334414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1961.582537][ C1] vkms_vblank_simulate: vblank timer overrun [ 1961.604762][T17783] Bluetooth: hci3: command tx timeout [ 1961.672492][T17783] Bluetooth: hci7: command tx timeout [ 1962.138201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.147775][T17783] Bluetooth: hci1: command tx timeout [ 1962.147813][T17783] Bluetooth: hci8: command tx timeout [ 1962.210736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.329767][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.403409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.622098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.815504][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.857482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.092368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.156899][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.221582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.441325][T18461] hub 6-0:1.0: USB hub found [ 1963.461991][T18461] hub 6-0:1.0: 1 port detected [ 1963.478901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.621970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.775910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.661226][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.686210][T11543] Bluetooth: hci3: command tx timeout [ 1964.686262][T11543] Bluetooth: hci7: command tx timeout [ 1964.686288][T11543] Bluetooth: hci8: command tx timeout [ 1964.686314][T11543] Bluetooth: hci1: command tx timeout [ 1965.712313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1965.996865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.069995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.303449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.398794][T18465] hub 6-0:1.0: USB hub found [ 1966.404566][T18465] hub 6-0:1.0: 1 port detected [ 1966.427162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.572071][ C1] vkms_vblank_simulate: vblank timer overrun [ 1967.370653][T11543] Bluetooth: hci8: command tx timeout [ 1967.370690][T11543] Bluetooth: hci7: command tx timeout [ 1967.370751][T14528] Bluetooth: hci3: command tx timeout [ 1970.357170][T18432] chnl_net:caif_netlink_parms(): no params data found [ 1970.649557][T18483] hub 6-0:1.0: USB hub found [ 1970.655379][T18483] hub 6-0:1.0: 1 port detected [ 1972.590419][T18420] chnl_net:caif_netlink_parms(): no params data found [ 1972.868771][T18428] chnl_net:caif_netlink_parms(): no params data found [ 1972.882293][T18489] hub 6-0:1.0: USB hub found [ 1972.882752][T18489] hub 6-0:1.0: 1 port detected [ 1974.328164][T18434] chnl_net:caif_netlink_parms(): no params data found [ 1978.305192][T18509] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1978.305253][T18509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1978.320950][T18509] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1978.321009][T18509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1980.312160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.337258][ T6154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.349798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.442273][T18432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.442412][T18432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.442680][T18432] bridge_slave_0: entered allmulticast mode [ 1980.445677][T18432] bridge_slave_0: entered promiscuous mode [ 1980.496717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.589261][T18432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.589414][T18432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.589577][T18432] bridge_slave_1: entered allmulticast mode [ 1980.592214][T18432] bridge_slave_1: entered promiscuous mode [ 1980.947318][ T6154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.987534][T18420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.987657][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.987895][T18420] bridge_slave_0: entered allmulticast mode [ 1980.990115][T18420] bridge_slave_0: entered promiscuous mode [ 1981.159157][T18420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.159328][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.159624][T18420] bridge_slave_1: entered allmulticast mode [ 1981.166921][T18420] bridge_slave_1: entered promiscuous mode [ 1981.355590][T18432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.488304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1981.547019][ T6154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.663803][T18428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.664048][T18428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.664323][T18428] bridge_slave_0: entered allmulticast mode [ 1981.666518][T18428] bridge_slave_0: entered promiscuous mode [ 1981.809241][ C1] vkms_vblank_simulate: vblank timer overrun [ 1982.793378][ C1] vkms_vblank_simulate: vblank timer overrun [ 1982.819738][T18432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1982.863309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1982.935591][T18428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1982.935792][T18428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.936105][T18428] bridge_slave_1: entered allmulticast mode [ 1982.939312][T18428] bridge_slave_1: entered promiscuous mode [ 1983.124137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.233882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.181017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.273558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.506723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.755391][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.831178][T18538] hub 6-0:1.0: USB hub found [ 1984.840262][T18538] hub 6-0:1.0: 1 port detected [ 1984.892872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.992161][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.783634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.014784][ T6154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.905137][T18434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.905306][T18434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.905599][T18434] bridge_slave_0: entered allmulticast mode [ 1986.908809][T18434] bridge_slave_0: entered promiscuous mode [ 1986.949161][T18420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1987.161222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1987.200831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1987.202987][T18434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.203208][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.203466][T18434] bridge_slave_1: entered allmulticast mode [ 1987.206445][T18434] bridge_slave_1: entered promiscuous mode [ 1987.246081][T18420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1987.581787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1987.679748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1988.472996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1988.567318][T18432] team0: Port device team_slave_0 added [ 1988.805227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1989.144542][ C1] vkms_vblank_simulate: vblank timer overrun [ 1989.893946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1990.051330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1990.109017][T18428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1990.111282][T18432] team0: Port device team_slave_1 added [ 1990.317050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1990.668835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1991.410984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1991.552937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1991.565744][T18428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1991.813692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1992.205805][T18557] fuse: Bad value for 'fd' [ 1992.233168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1992.726788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1992.809439][T18434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1992.826179][T18420] team0: Port device team_slave_0 added [ 1994.185928][T18434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.211756][T18420] team0: Port device team_slave_1 added [ 1994.385503][T18432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1994.385524][T18432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1994.385553][T18432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.901223][T18428] team0: Port device team_slave_0 added [ 1995.905895][T18432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.905913][T18432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1995.905944][T18432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.093641][T18428] team0: Port device team_slave_1 added [ 1996.104655][T18434] team0: Port device team_slave_0 added [ 1996.107626][T18420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.107648][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.107682][T18420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.259621][T18434] team0: Port device team_slave_1 added [ 1996.260944][T18420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.260957][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.260977][T18420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.564683][T18428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.564697][T18428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.564785][T18428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.805729][T18428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.805749][T18428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.805780][T18428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.806970][T18434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.806982][T18434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.807003][T18434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.883954][T18432] hsr_slave_0: entered promiscuous mode [ 1996.885670][T18432] hsr_slave_1: entered promiscuous mode [ 1996.893415][T18432] debugfs: 'hsr0' already exists in 'hsr' [ 1996.893452][T18432] Cannot create hsr debugfs directory [ 1996.915422][T18434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.915446][T18434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.915482][T18434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1997.645924][T18576] hub 6-0:1.0: USB hub found [ 1997.651073][T18576] hub 6-0:1.0: 1 port detected [ 1999.402370][ T6154] bridge_slave_1: left allmulticast mode [ 1999.402402][ T6154] bridge_slave_1: left promiscuous mode [ 1999.402654][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.102765][ T6154] bridge_slave_0: left allmulticast mode [ 2000.102791][ T6154] bridge_slave_0: left promiscuous mode [ 2000.103005][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.472765][T18580] hub 6-0:1.0: USB hub found [ 2000.478053][T18580] hub 6-0:1.0: 1 port detected [ 2001.186033][ T6154] bridge_slave_1: left allmulticast mode [ 2001.186067][ T6154] bridge_slave_1: left promiscuous mode [ 2001.186334][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.246964][ T6154] bridge_slave_0: left allmulticast mode [ 2001.247000][ T6154] bridge_slave_0: left promiscuous mode [ 2001.247290][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.324055][ T6154] bridge_slave_1: left allmulticast mode [ 2001.324088][ T6154] bridge_slave_1: left promiscuous mode [ 2001.324337][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.386038][ T6154] bridge_slave_0: left allmulticast mode [ 2001.386070][ T6154] bridge_slave_0: left promiscuous mode [ 2001.386350][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.924709][T18588] hub 6-0:1.0: USB hub found [ 2004.931098][T18588] hub 6-0:1.0: 1 port detected [ 2005.781873][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2005.870059][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.842180][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2006.936620][ T6154] bond0 (unregistering): Released all slaves [ 2008.568884][T11874] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2008.817901][T11874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.817931][T11874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2008.819312][T11874] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2008.819343][T11874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2008.819364][T11874] usb 2-1: SerialNumber: syz [ 2009.077201][T11874] usb 2-1: 0:2 : does not exist [ 2009.103588][T11874] usb 2-1: USB disconnect, device number 12 [ 2009.149194][T18597] udevd[18597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2012.878249][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2012.942671][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2012.989807][ T6154] bond0 (unregistering): Released all slaves [ 2013.924673][ T8763] page_pool_release_retry() stalled pool shutdown: id 258, 50 inflight 608 sec [ 2014.013969][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.081351][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.170513][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.266930][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.366266][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.444127][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.514474][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.561740][ T6154] bond1 (unregistering): Released all slaves [ 2014.615155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.702077][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.783867][ C1] vkms_vblank_simulate: vblank timer overrun [ 2015.035729][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 2015.038668][ C1] vkms_vblank_simulate: vblank timer overrun [ 2015.955155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.023157][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.084023][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.234067][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.508317][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.600187][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.657239][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.744269][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.760796][ T6154] bond2 (unregistering): Released all slaves [ 2016.850697][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.909559][ C1] vkms_vblank_simulate: vblank timer overrun [ 2016.939717][T17783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2016.970186][T17773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2016.988416][T17773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2016.999971][T17773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2017.001011][T17773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2017.022376][T17773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2017.067086][T14528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2017.076345][T14528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2017.094923][T14528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2017.096604][T14528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2017.207566][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2017.282292][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2017.331794][ T6154] bond0 (unregistering): Released all slaves [ 2017.370376][T18420] hsr_slave_0: entered promiscuous mode [ 2017.372011][T18420] hsr_slave_1: entered promiscuous mode [ 2017.373127][T18420] debugfs: 'hsr0' already exists in 'hsr' [ 2017.373156][T18420] Cannot create hsr debugfs directory [ 2017.420990][ C1] vkms_vblank_simulate: vblank timer overrun [ 2017.515010][ C1] vkms_vblank_simulate: vblank timer overrun [ 2017.837289][ C1] vkms_vblank_simulate: vblank timer overrun [ 2017.922248][ C1] vkms_vblank_simulate: vblank timer overrun [ 2018.298701][ C1] vkms_vblank_simulate: vblank timer overrun [ 2018.951005][ C1] vkms_vblank_simulate: vblank timer overrun [ 2018.995012][ C1] vkms_vblank_simulate: vblank timer overrun [ 2019.220870][ C1] vkms_vblank_simulate: vblank timer overrun [ 2019.234192][T14528] Bluetooth: hci4: command tx timeout [ 2019.344511][T14528] Bluetooth: hci0: command tx timeout [ 2020.429551][ T6154] tipc: Left network mode [ 2021.920982][T14528] Bluetooth: hci4: command tx timeout [ 2021.921021][T14528] Bluetooth: hci0: command tx timeout [ 2022.301866][ C1] vkms_vblank_simulate: vblank timer overrun [ 2022.411006][ C1] vkms_vblank_simulate: vblank timer overrun [ 2022.705331][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.160769][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.451055][T14528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2023.457551][T14528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2023.492800][T14528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2023.493567][T17783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2023.515715][T14528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2023.526407][T14528] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2023.553484][T17783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2023.584646][T11543] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2023.587124][T14528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2023.590590][T14528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2023.711650][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.868565][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.978632][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.051098][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.059259][ T8788] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2024.104068][T14528] Bluetooth: hci0: command tx timeout [ 2024.104103][T14528] Bluetooth: hci4: command tx timeout [ 2024.169550][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.300613][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.377188][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.411684][ T8788] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 2024.411707][ T8788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.411721][ T8788] usb 2-1: config 0 has no interfaces? [ 2024.411907][ T8788] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2024.411934][ T8788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.423347][ T8788] usb 2-1: config 0 descriptor?? [ 2024.641820][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.743296][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.198463][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.756147][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.761216][T17773] Bluetooth: hci5: command tx timeout [ 2026.001900][ C1] vkms_vblank_simulate: vblank timer overrun [ 2026.082747][T17773] Bluetooth: hci6: command tx timeout [ 2026.326488][T17773] Bluetooth: hci4: command tx timeout [ 2026.326516][T17773] Bluetooth: hci0: command tx timeout [ 2026.528769][ T6154] hsr_slave_0: left promiscuous mode [ 2026.571502][ T6154] hsr_slave_1: left promiscuous mode [ 2026.573585][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2026.618320][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2026.776679][ T6154] hsr_slave_0: left promiscuous mode [ 2026.795959][ T6154] hsr_slave_1: left promiscuous mode [ 2026.796842][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2026.796862][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2026.840452][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2026.840484][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2026.893055][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2026.925247][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2027.007150][ T6154] veth1_macvtap: left promiscuous mode [ 2027.007271][ T6154] veth0_macvtap: left promiscuous mode [ 2027.007532][ T6154] veth1_vlan: left promiscuous mode [ 2027.007659][ T6154] veth0_vlan: left promiscuous mode [ 2027.390574][T14361] usb 2-1: USB disconnect, device number 13 [ 2027.534441][ C1] vkms_vblank_simulate: vblank timer overrun [ 2027.602353][ C1] vkms_vblank_simulate: vblank timer overrun [ 2027.680028][ C1] vkms_vblank_simulate: vblank timer overrun [ 2027.843024][ C1] vkms_vblank_simulate: vblank timer overrun [ 2027.950665][T14528] Bluetooth: hci5: command tx timeout [ 2027.983526][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2028.034563][ C1] vkms_vblank_simulate: vblank timer overrun [ 2028.143686][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2028.192689][ C1] vkms_vblank_simulate: vblank timer overrun [ 2028.255238][ C1] vkms_vblank_simulate: vblank timer overrun [ 2028.292679][T14528] Bluetooth: hci6: command tx timeout [ 2028.334303][ C1] vkms_vblank_simulate: vblank timer overrun [ 2028.433148][ C1] vkms_vblank_simulate: vblank timer overrun [ 2028.739309][ C1] vkms_vblank_simulate: vblank timer overrun [ 2028.797988][ T38] audit: type=1326 audit(1764313304.000:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.798411][ T38] audit: type=1326 audit(1764313304.000:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.798914][ T38] audit: type=1326 audit(1764313304.000:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.799547][ T38] audit: type=1326 audit(1764313304.000:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.799826][ T38] audit: type=1326 audit(1764313304.000:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.800360][ T38] audit: type=1326 audit(1764313304.000:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.809120][T18671] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 2028.822838][T18671] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 2028.823304][T18671] kvm: requested 168457 ns i8254 timer period limited to 200000 ns [ 2028.823714][T18671] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 2028.824167][T18671] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 2028.824921][T18671] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 2028.825528][T18671] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 2028.825925][T18671] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 2028.829969][T18671] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 2028.832850][T18671] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 2028.847155][ T38] audit: type=1326 audit(1764313304.047:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2028.849166][ T38] audit: type=1326 audit(1764313304.056:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18670 comm="syz.1.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2029.106497][ C1] vkms_vblank_simulate: vblank timer overrun [ 2029.259590][ C1] vkms_vblank_simulate: vblank timer overrun [ 2029.543698][ C1] vkms_vblank_simulate: vblank timer overrun [ 2029.744697][ C1] vkms_vblank_simulate: vblank timer overrun [ 2030.185234][T14528] Bluetooth: hci5: command tx timeout [ 2030.494994][ T8788] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2030.516366][T14528] Bluetooth: hci6: command tx timeout [ 2030.693823][ T8788] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 2030.693854][ T8788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.693874][ T8788] usb 2-1: config 0 has no interfaces? [ 2030.693901][ T8788] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2030.693918][ T8788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.789952][ T8788] usb 2-1: config 0 descriptor?? [ 2030.955934][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.520935][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.674157][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.748924][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.822014][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.888666][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.960633][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.016459][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.155609][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.225478][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.356888][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2032.399594][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.399680][T14528] Bluetooth: hci5: command tx timeout [ 2032.468510][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.546171][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.655359][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2032.765885][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.766061][T14528] Bluetooth: hci6: command tx timeout [ 2033.267565][ T8688] usb 2-1: USB disconnect, device number 14 [ 2034.226962][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.613396][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.696939][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.766769][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.834644][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.893395][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.965424][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.037851][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.096766][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.606737][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.667800][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.745241][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.827690][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.905231][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.978699][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.038025][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.091238][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.143526][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.496188][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.549151][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.619907][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.682091][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.752354][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.820931][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.984489][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.201743][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2037.349270][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2037.746550][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.827739][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.881395][T18619] chnl_net:caif_netlink_parms(): no params data found [ 2038.103962][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.144201][T18620] chnl_net:caif_netlink_parms(): no params data found [ 2043.334332][T11874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2043.487693][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.487828][T18619] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.488106][T18619] bridge_slave_0: entered allmulticast mode [ 2043.490223][T18619] bridge_slave_0: entered promiscuous mode [ 2043.492702][T18620] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.492802][T18620] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.492970][T18620] bridge_slave_0: entered allmulticast mode [ 2043.496835][T18620] bridge_slave_0: entered promiscuous mode [ 2043.528229][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.528391][T18619] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.528764][T18619] bridge_slave_1: entered allmulticast mode [ 2043.536379][T18619] bridge_slave_1: entered promiscuous mode [ 2043.541729][T18620] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.542373][T18620] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.542738][T18620] bridge_slave_1: entered allmulticast mode [ 2043.546109][T18620] bridge_slave_1: entered promiscuous mode [ 2043.606812][T11874] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 2043.606843][T11874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.606863][T11874] usb 2-1: config 0 has no interfaces? [ 2043.606896][T11874] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2043.606921][T11874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.669243][T11874] usb 2-1: config 0 descriptor?? [ 2044.206013][T18619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2044.230619][T18620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2044.294802][T18619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2044.324753][T18620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2044.791992][T18619] team0: Port device team_slave_0 added [ 2044.792901][T18647] chnl_net:caif_netlink_parms(): no params data found [ 2044.814276][T18646] chnl_net:caif_netlink_parms(): no params data found [ 2044.878728][T18620] team0: Port device team_slave_0 added [ 2044.881610][T18619] team0: Port device team_slave_1 added [ 2044.907208][T18620] team0: Port device team_slave_1 added [ 2045.752621][T18619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.752642][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2045.752671][T18619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2045.793624][T18620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.793649][T18620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2045.793684][T18620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2045.799470][T18619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2045.799490][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2045.799526][T18619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2045.845901][T18620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2045.845922][T18620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2045.845958][T18620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2046.241386][T11874] usb 2-1: USB disconnect, device number 15 [ 2046.787342][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.787795][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.788037][T18647] bridge_slave_0: entered allmulticast mode [ 2046.790755][T18647] bridge_slave_0: entered promiscuous mode [ 2046.836603][T18646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.836746][T18646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.837075][T18646] bridge_slave_0: entered allmulticast mode [ 2046.840536][T18646] bridge_slave_0: entered promiscuous mode [ 2046.962182][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.963788][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.968049][T18647] bridge_slave_1: entered allmulticast mode [ 2047.033547][T18647] bridge_slave_1: entered promiscuous mode [ 2047.260195][T18646] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.260333][T18646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.260909][T18646] bridge_slave_1: entered allmulticast mode [ 2047.263796][T18646] bridge_slave_1: entered promiscuous mode [ 2047.486944][T18619] hsr_slave_0: entered promiscuous mode [ 2047.488670][T18619] hsr_slave_1: entered promiscuous mode [ 2047.489863][T18619] debugfs: 'hsr0' already exists in 'hsr' [ 2047.489892][T18619] Cannot create hsr debugfs directory [ 2047.632738][T18620] hsr_slave_0: entered promiscuous mode [ 2047.634349][T18620] hsr_slave_1: entered promiscuous mode [ 2047.635483][T18620] debugfs: 'hsr0' already exists in 'hsr' [ 2047.635512][T18620] Cannot create hsr debugfs directory [ 2048.097589][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2049.052275][T18646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2049.198511][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2049.206224][T18646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2049.374606][ T8788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2049.537340][ T8788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.537370][ T8788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2049.538607][ T8788] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2049.538637][ T8788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2049.538652][ T8788] usb 2-1: SerialNumber: syz [ 2049.783542][ T8788] usb 2-1: 0:2 : does not exist [ 2049.807832][ T8788] usb 2-1: USB disconnect, device number 16 [ 2049.871250][T18702] udevd[18702]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2049.957658][T18647] team0: Port device team_slave_0 added [ 2049.960418][T18646] team0: Port device team_slave_0 added [ 2049.981192][ T6154] IPVS: stop unused estimator thread 0... [ 2049.998326][T18647] team0: Port device team_slave_1 added [ 2050.001041][T18646] team0: Port device team_slave_1 added [ 2050.484721][T18726] ubi: mtd0 is already attached to ubi31 [ 2050.810656][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.810674][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.810714][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2050.813975][T18646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.813992][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.814020][T18646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.069655][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.069711][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.069772][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.887884][T18646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.887905][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.887938][T18646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2053.172537][T18646] hsr_slave_0: entered promiscuous mode [ 2053.185468][T18646] hsr_slave_1: entered promiscuous mode [ 2053.186207][T18646] debugfs: 'hsr0' already exists in 'hsr' [ 2053.186230][T18646] Cannot create hsr debugfs directory [ 2053.206349][T18647] hsr_slave_0: entered promiscuous mode [ 2053.208182][T18647] hsr_slave_1: entered promiscuous mode [ 2053.210363][T18647] debugfs: 'hsr0' already exists in 'hsr' [ 2053.210393][T18647] Cannot create hsr debugfs directory [ 2053.690431][ T6154] bridge_slave_1: left allmulticast mode [ 2053.690455][ T6154] bridge_slave_1: left promiscuous mode [ 2053.690634][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.749413][ T6154] bridge_slave_0: left allmulticast mode [ 2053.749444][ T6154] bridge_slave_0: left promiscuous mode [ 2053.749642][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.816316][ T6154] bridge_slave_1: left allmulticast mode [ 2053.816340][ T6154] bridge_slave_1: left promiscuous mode [ 2053.816555][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.909029][ T6154] bridge_slave_0: left allmulticast mode [ 2053.909059][ T6154] bridge_slave_0: left promiscuous mode [ 2053.909335][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.216669][ T6154] bridge_slave_1: left allmulticast mode [ 2054.216704][ T6154] bridge_slave_1: left promiscuous mode [ 2054.216985][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.390142][ T6154] bridge_slave_0: left allmulticast mode [ 2054.390174][ T6154] bridge_slave_0: left promiscuous mode [ 2054.390435][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.681950][ T6154] bridge_slave_1: left allmulticast mode [ 2054.681976][ T6154] bridge_slave_1: left promiscuous mode [ 2054.682164][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.726323][ T6154] bridge_slave_0: left allmulticast mode [ 2055.726357][ T6154] bridge_slave_0: left promiscuous mode [ 2055.726626][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.414206][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2057.532837][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2057.598305][ T6154] bond0 (unregistering): Released all slaves [ 2057.702617][ T8688] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2057.842529][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2057.867140][ T8688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.867169][ T8688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2057.868515][ T8688] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2057.868542][ T8688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2057.868563][ T8688] usb 2-1: SerialNumber: syz [ 2057.970992][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.029430][ T6154] bond0 (unregistering): Released all slaves [ 2058.147487][ T8688] usb 2-1: 0:2 : does not exist [ 2058.185803][ T8688] usb 2-1: USB disconnect, device number 17 [ 2058.273578][T18750] udevd[18750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2058.419598][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2058.516941][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.592402][ T6154] bond0 (unregistering): Released all slaves [ 2059.071640][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2060.194902][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2060.293802][ T6154] bond0 (unregistering): Released all slaves [ 2063.884081][T18775] netlink: 'syz.1.3110': attribute type 14 has an invalid length. [ 2066.071333][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.114468][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.192361][ T6154] hsr_slave_0: left promiscuous mode [ 2066.233633][ T6154] hsr_slave_1: left promiscuous mode [ 2066.234912][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.270370][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.309580][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.406675][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.468793][ T6154] hsr_slave_0: left promiscuous mode [ 2066.490211][ T6154] hsr_slave_1: left promiscuous mode [ 2066.491386][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.545036][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.613442][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2067.778010][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2068.885786][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2069.056915][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2069.924606][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2070.093826][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2070.949179][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2071.087900][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2073.425138][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2077.206797][T18802] : Can't lookup blockdev [ 2078.581319][ T8763] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2078.833185][ T8763] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2078.833216][ T8763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2078.834838][ T8763] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2078.834868][ T8763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2078.834890][ T8763] usb 2-1: SerialNumber: syz [ 2079.142245][ T8788] page_pool_release_retry() stalled pool shutdown: id 258, 50 inflight 669 sec [ 2079.154914][ T8763] usb 2-1: 0:2 : does not exist [ 2079.155006][ T8763] usb 2-1: unit 255 not found! [ 2079.241112][ T8763] usb 2-1: USB disconnect, device number 18 [ 2079.486280][T18796] udevd[18796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2081.655071][T18619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2081.697824][T18619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2081.788681][T18619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2083.586259][T17773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2083.748599][T17773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2083.776518][T17773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2083.802459][T17773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2083.819843][T17773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2084.308746][T14528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2084.428262][T14528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2084.491964][T14528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2084.502234][T14528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2084.503144][T14528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2084.650326][T11543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2084.687491][T11543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2084.689843][T11543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2084.691313][T11543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2084.692138][T11543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2084.880314][T14528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2085.947093][T14528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2085.950659][T14528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2085.953059][T14528] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2085.953923][T14528] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2086.022130][T14528] Bluetooth: hci1: command tx timeout [ 2086.814910][T11543] Bluetooth: hci3: command tx timeout [ 2087.582442][T11543] Bluetooth: hci4: command tx timeout [ 2088.715026][T11543] Bluetooth: hci7: command tx timeout [ 2088.925778][T11543] Bluetooth: hci1: command tx timeout [ 2089.015421][T11543] Bluetooth: hci3: command tx timeout [ 2089.789387][T11543] Bluetooth: hci4: command tx timeout [ 2090.936577][T11543] Bluetooth: hci7: command tx timeout [ 2091.072640][T11543] Bluetooth: hci1: command tx timeout [ 2091.238988][T11543] Bluetooth: hci3: command tx timeout [ 2092.074774][T11543] Bluetooth: hci4: command tx timeout [ 2094.681895][T11543] Bluetooth: hci7: command tx timeout [ 2094.681937][T11543] Bluetooth: hci1: command tx timeout [ 2094.681963][T11543] Bluetooth: hci3: command tx timeout [ 2094.681987][T11543] Bluetooth: hci4: command tx timeout [ 2096.883577][T11543] Bluetooth: hci7: command tx timeout [ 2100.739826][T18856] chnl_net:caif_netlink_parms(): no params data found [ 2107.190687][T18862] chnl_net:caif_netlink_parms(): no params data found [ 2109.023994][T18864] chnl_net:caif_netlink_parms(): no params data found [ 2109.957243][T18870] chnl_net:caif_netlink_parms(): no params data found [ 2110.869868][T18856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.870092][T18856] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.870372][T18856] bridge_slave_0: entered allmulticast mode [ 2110.873390][T18856] bridge_slave_0: entered promiscuous mode [ 2111.601604][T18856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.603200][T18856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.610418][T18856] bridge_slave_1: entered allmulticast mode [ 2111.897131][T18856] bridge_slave_1: entered promiscuous mode [ 2114.818800][T18856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2115.257132][T18856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2115.257568][T18862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.257789][T18862] bridge0: port 1(bridge_slave_0) entered disabled state [ 2115.258034][T18862] bridge_slave_0: entered allmulticast mode [ 2115.264898][T18862] bridge_slave_0: entered promiscuous mode [ 2115.898123][ C1] vkms_vblank_simulate: vblank timer overrun [ 2116.693529][ C1] vkms_vblank_simulate: vblank timer overrun [ 2116.832289][T18864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.832431][T18864] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.832764][T18864] bridge_slave_0: entered allmulticast mode [ 2116.835838][T18864] bridge_slave_0: entered promiscuous mode [ 2116.851956][ C1] vkms_vblank_simulate: vblank timer overrun [ 2117.076429][ C1] vkms_vblank_simulate: vblank timer overrun [ 2118.006250][ C1] vkms_vblank_simulate: vblank timer overrun [ 2118.146058][ C1] vkms_vblank_simulate: vblank timer overrun [ 2118.159973][T18862] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.160120][T18862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.160443][T18862] bridge_slave_1: entered allmulticast mode [ 2118.163766][T18862] bridge_slave_1: entered promiscuous mode [ 2118.329673][T18864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.329834][T18864] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.330168][T18864] bridge_slave_1: entered allmulticast mode [ 2118.340561][T18864] bridge_slave_1: entered promiscuous mode [ 2118.376883][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.377036][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.377366][T18870] bridge_slave_0: entered allmulticast mode [ 2118.380448][T18870] bridge_slave_0: entered promiscuous mode [ 2118.564656][ C1] vkms_vblank_simulate: vblank timer overrun [ 2119.026331][ C1] vkms_vblank_simulate: vblank timer overrun [ 2119.094553][ C1] vkms_vblank_simulate: vblank timer overrun [ 2119.732638][ C1] vkms_vblank_simulate: vblank timer overrun [ 2121.099960][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.100128][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.100379][T18870] bridge_slave_1: entered allmulticast mode [ 2121.129626][T18870] bridge_slave_1: entered promiscuous mode [ 2121.140952][T18856] team0: Port device team_slave_0 added [ 2121.195705][ C1] vkms_vblank_simulate: vblank timer overrun [ 2121.431770][ C1] vkms_vblank_simulate: vblank timer overrun [ 2121.662422][ C1] vkms_vblank_simulate: vblank timer overrun [ 2122.396802][ C1] vkms_vblank_simulate: vblank timer overrun [ 2124.115204][T18856] team0: Port device team_slave_1 added [ 2124.135076][T18862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2124.140594][T18864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2124.483473][T18862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2124.487258][T18864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2124.503639][T18870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2124.856018][T18870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2124.902856][T18856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2124.902876][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2124.902906][T18856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2125.196414][T18856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2125.196435][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.196467][T18856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2125.199214][T18862] team0: Port device team_slave_0 added [ 2125.202180][T18864] team0: Port device team_slave_0 added [ 2125.438960][T18862] team0: Port device team_slave_1 added [ 2125.441170][T18864] team0: Port device team_slave_1 added [ 2125.441900][ T6154] bridge_slave_1: left allmulticast mode [ 2125.441927][ T6154] bridge_slave_1: left promiscuous mode [ 2125.442145][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.514345][ T6154] bridge_slave_0: left allmulticast mode [ 2125.514369][ T6154] bridge_slave_0: left promiscuous mode [ 2125.514637][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.580550][ T6154] bridge_slave_1: left allmulticast mode [ 2125.580577][ T6154] bridge_slave_1: left promiscuous mode [ 2125.580754][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.642484][ T6154] bridge_slave_0: left allmulticast mode [ 2125.642509][ T6154] bridge_slave_0: left promiscuous mode [ 2125.642705][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.658081][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2129.091110][ C0] vkms_vblank_simulate: vblank timer overrun [ 2129.859491][ C0] vkms_vblank_simulate: vblank timer overrun [ 2129.906015][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2129.995932][ T6154] bond0 (unregistering): Released all slaves [ 2130.029360][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.217811][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2130.303246][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2130.369194][ T6154] bond0 (unregistering): Released all slaves [ 2130.391526][T18870] team0: Port device team_slave_0 added [ 2130.437080][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.501564][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.585864][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.646489][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.715169][T18870] team0: Port device team_slave_1 added [ 2130.787538][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.788437][ T8763] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2130.946662][ C0] vkms_vblank_simulate: vblank timer overrun [ 2130.965248][ T8763] usb 2-1: Using ep0 maxpacket: 32 [ 2130.967928][ T8763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2130.967965][ T8763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.968009][ T8763] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2130.968034][ T8763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.978573][ T8763] usb 2-1: config 0 descriptor?? [ 2131.039245][ C0] vkms_vblank_simulate: vblank timer overrun [ 2131.043606][ T8763] hub 2-1:0.0: USB hub found [ 2131.205368][T18862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2131.205388][T18862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.205483][T18862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.221480][T18864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2131.221533][T18864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.222838][T18864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.268870][ T8763] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2131.284441][ T8763] usbhid 2-1:0.0: can't add hid device: -71 [ 2131.284629][ T8763] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2131.332920][ T8763] usb 2-1: USB disconnect, device number 19 [ 2131.481684][T18862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.481698][T18862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.481719][T18862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.483174][T18864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.483186][T18864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.483206][T18864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.484354][T18870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2131.484365][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.484385][T18870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.496348][T18856] hsr_slave_0: entered promiscuous mode [ 2131.498145][T18856] hsr_slave_1: entered promiscuous mode [ 2131.499427][T18856] debugfs: 'hsr0' already exists in 'hsr' [ 2131.499460][T18856] Cannot create hsr debugfs directory [ 2131.565190][T18870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.565214][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.565248][T18870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.852827][ T6154] hsr_slave_0: left promiscuous mode [ 2131.874488][ T6154] hsr_slave_1: left promiscuous mode [ 2131.875821][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.928658][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2132.102425][ T38] audit: type=1326 audit(1764313400.636:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.102579][ T38] audit: type=1326 audit(1764313400.636:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.103087][ T38] audit: type=1326 audit(1764313400.636:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.103331][ T38] audit: type=1326 audit(1764313400.636:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.103495][ T38] audit: type=1326 audit(1764313400.636:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.103867][ T38] audit: type=1326 audit(1764313400.636:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.104016][ T38] audit: type=1326 audit(1764313400.636:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.104171][ T38] audit: type=1326 audit(1764313400.636:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.104403][ T38] audit: type=1326 audit(1764313400.636:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.107154][ T38] audit: type=1326 audit(1764313400.636:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19193 comm="syz.1.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2132.282583][ T6154] hsr_slave_0: left promiscuous mode [ 2132.326975][ T6154] hsr_slave_1: left promiscuous mode [ 2132.328479][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2132.345449][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2133.101562][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.168758][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2133.229100][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.299277][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.356053][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2133.557764][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.618141][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.706284][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.749993][ C0] vkms_vblank_simulate: vblank timer overrun [ 2134.299673][ C0] vkms_vblank_simulate: vblank timer overrun [ 2134.379385][ C0] vkms_vblank_simulate: vblank timer overrun [ 2136.963463][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2138.253766][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2138.280135][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2138.748076][T14361] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2138.966628][T14361] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 2138.966658][T14361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.966820][T14361] usb 2-1: config 0 has no interfaces? [ 2138.966918][T14361] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2138.966936][T14361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.970901][T14361] usb 2-1: config 0 descriptor?? [ 2139.900276][T18862] hsr_slave_0: entered promiscuous mode [ 2139.901444][T18862] hsr_slave_1: entered promiscuous mode [ 2139.902220][T18862] debugfs: 'hsr0' already exists in 'hsr' [ 2139.902245][T18862] Cannot create hsr debugfs directory [ 2140.090210][T18864] hsr_slave_0: entered promiscuous mode [ 2140.091864][T18864] hsr_slave_1: entered promiscuous mode [ 2140.093282][T18864] debugfs: 'hsr0' already exists in 'hsr' [ 2140.099046][T18864] Cannot create hsr debugfs directory [ 2140.318261][T18870] hsr_slave_0: entered promiscuous mode [ 2140.326755][T18870] hsr_slave_1: entered promiscuous mode [ 2140.328198][T18870] debugfs: 'hsr0' already exists in 'hsr' [ 2140.328220][T18870] Cannot create hsr debugfs directory [ 2141.683026][ T5944] usb 2-1: USB disconnect, device number 20 [ 2142.023219][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.011829][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.639436][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.673694][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.955707][ C1] vkms_vblank_simulate: vblank timer overrun [ 2144.695573][T14361] page_pool_release_retry() stalled pool shutdown: id 258, 50 inflight 730 sec [ 2144.721073][ C1] vkms_vblank_simulate: vblank timer overrun [ 2145.126618][ C1] vkms_vblank_simulate: vblank timer overrun [ 2145.466433][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.272973][ C1] vkms_vblank_simulate: vblank timer overrun [ 2148.530946][T14528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2148.536714][T14528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2148.544420][T14528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2148.561075][T14528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2148.571609][T14528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2148.573830][T14528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2148.575769][T14528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2148.576783][T14528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2148.583775][T14528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2148.600892][T14528] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2150.494365][T14528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2150.543688][T14528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2150.547298][T14528] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2150.553429][T14528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2150.762296][T17783] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2150.779524][T17783] Bluetooth: hci5: command tx timeout [ 2150.784174][T17783] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2150.789070][T17783] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2150.790331][T17783] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2150.792074][T17783] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2150.850129][T14528] Bluetooth: hci0: command tx timeout [ 2150.862345][T14528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2152.988108][T11543] Bluetooth: hci8: command tx timeout [ 2152.988709][T11543] Bluetooth: hci5: command tx timeout [ 2153.073544][T14528] Bluetooth: hci0: command tx timeout [ 2153.073735][T11543] Bluetooth: hci6: command tx timeout [ 2153.322909][T19257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2153.322939][T19257] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2153.481891][T19242] chnl_net:caif_netlink_parms(): no params data found [ 2153.485319][T19257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2153.485344][T19257] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2153.569944][T19243] chnl_net:caif_netlink_parms(): no params data found [ 2153.638651][T19257] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2153.638677][T19257] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 2153.792778][ T6154] bridge_slave_1: left allmulticast mode [ 2153.792802][ T6154] bridge_slave_1: left promiscuous mode [ 2153.792983][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.834348][T19257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2153.834373][T19257] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2153.866607][ T6154] bridge_slave_0: left allmulticast mode [ 2153.866631][ T6154] bridge_slave_0: left promiscuous mode [ 2153.866835][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.954209][ T6154] bridge_slave_1: left allmulticast mode [ 2153.954234][ T6154] bridge_slave_1: left promiscuous mode [ 2153.954407][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.029029][T19257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2154.029057][T19257] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2154.038138][ T6154] bridge_slave_0: left allmulticast mode [ 2154.038177][ T6154] bridge_slave_0: left promiscuous mode [ 2154.038476][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.223800][T19257] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2154.223826][T19257] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2154.413786][T19257] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2154.413812][T19257] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 2154.474977][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2154.638468][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2154.958640][ T6154] bond0 (unregistering): Released all slaves [ 2157.286413][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2157.427570][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2157.491341][ T6154] bond0 (unregistering): Released all slaves [ 2157.519107][T19276] create_pit_timer: 4 callbacks suppressed [ 2157.519125][T19276] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 2157.519543][T19276] kvm: requested 115657 ns i8254 timer period limited to 200000 ns [ 2157.519988][T19276] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 2157.520472][T19276] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 2157.522179][T19276] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 2157.522691][T19276] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 2157.523179][T19276] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 2157.525684][T19276] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 2157.526289][T19276] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 2157.526746][T19276] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2160.151601][T19294] binder_alloc: 19293: binder_alloc_buf, no vma [ 2161.647446][ T6154] hsr_slave_0: left promiscuous mode [ 2161.871820][ T6154] hsr_slave_1: left promiscuous mode [ 2161.872919][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2161.926133][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.518287][ T6154] hsr_slave_0: left promiscuous mode [ 2163.560946][ T6154] hsr_slave_1: left promiscuous mode [ 2163.561840][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.669747][T19306] : Can't lookup blockdev [ 2164.669537][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2168.436732][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2169.302689][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2173.012294][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 2173.193818][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 2178.101695][T19242] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.101934][T19242] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.103287][T19242] bridge_slave_0: entered allmulticast mode [ 2178.106955][T19242] bridge_slave_0: entered promiscuous mode [ 2178.243249][T19254] chnl_net:caif_netlink_parms(): no params data found [ 2179.069991][T19242] bridge0: port 2(bridge_slave_1) entered blocking state [ 2179.070104][T19242] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.070322][T19242] bridge_slave_1: entered allmulticast mode [ 2179.072343][T19242] bridge_slave_1: entered promiscuous mode [ 2179.102471][T19243] bridge0: port 1(bridge_slave_0) entered blocking state [ 2179.102609][T19243] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.102845][T19243] bridge_slave_0: entered allmulticast mode [ 2180.059142][T19243] bridge_slave_0: entered promiscuous mode [ 2180.062922][T19252] chnl_net:caif_netlink_parms(): no params data found [ 2181.612586][T19243] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.612709][T19243] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.612897][T19243] bridge_slave_1: entered allmulticast mode [ 2181.614957][T19243] bridge_slave_1: entered promiscuous mode [ 2181.742285][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2181.742305][ T38] audit: type=1326 audit(1764313447.051:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.742361][ T38] audit: type=1326 audit(1764313447.051:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.742411][ T38] audit: type=1326 audit(1764313447.060:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.743423][ T38] audit: type=1326 audit(1764313447.060:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.749600][ T38] audit: type=1326 audit(1764313447.069:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.749967][ T38] audit: type=1326 audit(1764313447.069:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.750533][ T38] audit: type=1326 audit(1764313447.069:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.755444][ T38] audit: type=1326 audit(1764313447.069:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.757309][ T38] audit: type=1326 audit(1764313447.069:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19347 comm="syz.1.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34e3bf749 code=0x7ffc0000 [ 2181.982974][ T5919] ------------[ cut here ]------------ [ 2181.983000][ T5919] WARNING: CPU: 1 PID: 5919 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 2181.983051][ T5919] Modules linked in: [ 2181.983074][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2181.983100][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2181.983115][ T5919] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2181.983155][ T5919] Code: c7 c7 50 45 c5 8e 48 c7 c6 1e 27 da 8c 48 c7 c2 e4 fc d8 8c 4c 89 f9 e8 82 61 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 2181.983176][ T5919] RSP: 0018:ffffc90005a7fbc0 EFLAGS: 00010206 [ 2181.983197][ T5919] RAX: df60dab210e10500 RBX: ffff8880314e4200 RCX: 0000000000000000 [ 2181.983214][ T5919] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 2181.983232][ T5919] RBP: ffffc90005a7fd38 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 2181.983248][ T5919] R10: dffffc0000000000 R11: fffffbfff1dac82f R12: dffffc0000000000 [ 2181.983275][ T5919] R13: 0000000000000000 R14: ffff8880314e4208 R15: ffff888026018000 [ 2181.983293][ T5919] FS: 0000000000000000(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 2181.983313][ T5919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2181.983343][ T5919] CR2: 000000110c2c2c5c CR3: 00000000638c2000 CR4: 00000000003526f0 [ 2181.983375][ T5919] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2181.983392][ T5919] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2181.983408][ T5919] Call Trace: [ 2181.983419][ T5919] [ 2181.983434][ T5919] do_exit+0x105/0x2300 [ 2181.983484][ T5919] ? worker_thread+0xcf7/0xda0 [ 2181.983514][ T5919] ? __pfx_do_exit+0x10/0x10 [ 2181.983574][ T5919] kthread_exit+0x22c/0x280 [ 2181.983612][ T5919] kthread+0x72f/0x8a0 [ 2181.983651][ T5919] ? __pfx_worker_thread+0x10/0x10 [ 2181.983680][ T5919] ? __pfx_kthread+0x10/0x10 [ 2181.983716][ T5919] ? rt_spin_unlock+0x150/0x200 [ 2181.983750][ T5919] ? rt_spin_unlock+0x161/0x200 [ 2181.983794][ T5919] ? __pfx_kthread+0x10/0x10 [ 2181.983855][ T5919] ret_from_fork+0x4bc/0x870 [ 2181.983886][ T5919] ? __pfx_ret_from_fork+0x10/0x10 [ 2181.983929][ T5919] ? __switch_to_asm+0x39/0x70 [ 2181.983952][ T5919] ? __switch_to_asm+0x33/0x70 [ 2181.983975][ T5919] ? __pfx_kthread+0x10/0x10 [ 2181.984010][ T5919] ret_from_fork_asm+0x1a/0x30 [ 2181.984055][ T5919] [ 2181.984072][ T5919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2181.984090][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2181.984116][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2181.984130][ T5919] Call Trace: [ 2181.984140][ T5919] [ 2181.984149][ T5919] dump_stack_lvl+0x99/0x250 [ 2181.984196][ T5919] ? __asan_memcpy+0x40/0x70 [ 2181.984224][ T5919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2181.984271][ T5919] ? __pfx__printk+0x10/0x10 [ 2181.984314][ T5919] vpanic+0x237/0x6d0 [ 2181.984337][ T5919] ? __pfx_vpanic+0x10/0x10 [ 2181.984376][ T5919] panic+0xb9/0xc0 [ 2181.984398][ T5919] ? __pfx_panic+0x10/0x10 [ 2181.984445][ T5919] __warn+0x31b/0x4b0 [ 2181.984470][ T5919] ? kcov_task_exit+0x13c/0x150 [ 2181.984508][ T5919] ? kcov_task_exit+0x13c/0x150 [ 2181.984538][ T5919] report_bug+0x2be/0x4f0 [ 2181.984569][ T5919] ? kcov_task_exit+0x13c/0x150 [ 2181.984602][ T5919] ? kcov_task_exit+0x13c/0x150 [ 2181.984632][ T5919] ? kcov_task_exit+0x13e/0x150 [ 2181.984669][ T5919] handle_bug+0x84/0x160 [ 2181.984693][ T5919] exc_invalid_op+0x1a/0x50 [ 2181.984717][ T5919] asm_exc_invalid_op+0x1a/0x20 [ 2181.984739][ T5919] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2181.984776][ T5919] Code: c7 c7 50 45 c5 8e 48 c7 c6 1e 27 da 8c 48 c7 c2 e4 fc d8 8c 4c 89 f9 e8 82 61 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 2181.984798][ T5919] RSP: 0018:ffffc90005a7fbc0 EFLAGS: 00010206 [ 2181.984817][ T5919] RAX: df60dab210e10500 RBX: ffff8880314e4200 RCX: 0000000000000000 [ 2181.984835][ T5919] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 2181.984851][ T5919] RBP: ffffc90005a7fd38 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 2181.984868][ T5919] R10: dffffc0000000000 R11: fffffbfff1dac82f R12: dffffc0000000000 [ 2181.984886][ T5919] R13: 0000000000000000 R14: ffff8880314e4208 R15: ffff888026018000 [ 2181.984910][ T5919] ? rt_spin_lock+0x1c1/0x3e0 [ 2181.984954][ T5919] do_exit+0x105/0x2300 [ 2181.985005][ T5919] ? worker_thread+0xcf7/0xda0 [ 2181.985034][ T5919] ? __pfx_do_exit+0x10/0x10 [ 2181.985090][ T5919] kthread_exit+0x22c/0x280 [ 2181.985127][ T5919] kthread+0x72f/0x8a0 [ 2181.985171][ T5919] ? __pfx_worker_thread+0x10/0x10 [ 2181.985200][ T5919] ? __pfx_kthread+0x10/0x10 [ 2181.985237][ T5919] ? rt_spin_unlock+0x150/0x200 [ 2181.985277][ T5919] ? rt_spin_unlock+0x161/0x200 [ 2181.985304][ T5919] ? __pfx_kthread+0x10/0x10 [ 2181.985339][ T5919] ret_from_fork+0x4bc/0x870 [ 2181.985370][ T5919] ? __pfx_ret_from_fork+0x10/0x10 [ 2181.985406][ T5919] ? __switch_to_asm+0x39/0x70 [ 2181.985426][ T5919] ? __switch_to_asm+0x33/0x70 [ 2181.985446][ T5919] ? __pfx_kthread+0x10/0x10 [ 2181.985482][ T5919] ret_from_fork_asm+0x1a/0x30 [ 2181.985527][ T5919] [ 2181.985818][ T5919] Kernel Offset: disabled