last executing test programs: 19m3.278651222s ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x36, 0x8e, &(0x7f00000008c0)=""/142, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d40), 0x0, 0x10, 0x200000}, 0x94) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 18m56.589263112s ago: executing program 3 (id=19): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, 0x0) 18m51.777173404s ago: executing program 3 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) symlink(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 18m47.502456349s ago: executing program 3 (id=31): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)=0x2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 18m44.696530559s ago: executing program 3 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) unshare(0x8000600) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2024) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be81000000100000000100000000000000ff0022eb000000002000000002000000000000000000000008"], 0x0) socket$inet6(0xa, 0x2, 0x0) 18m42.786562422s ago: executing program 3 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/186, 0xba) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r8, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0x8, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x12, &(0x7f0000000640)=[@cr4={0x1, 0x342101}], 0x1) 18m26.543976649s ago: executing program 32 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/186, 0xba) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r8, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0x8, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x12, &(0x7f0000000640)=[@cr4={0x1, 0x342101}], 0x1) 17m5.343176429s ago: executing program 4 (id=120): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17m3.867106409s ago: executing program 4 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() r5 = fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100040000000100000009000000280003800800030000000000140002007663616e3000000000000000000000000800010001000000e6c3628372cce68cbb4c173a66362e9bc107f304c171ced7ed47403118a2665e82294291c8b397d2c0a925bb890376795399c003716ae0effe8838c159fcf97651b378bc16dab2a012dfde8324bf906f7cafda339898d9"], 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) fchdir(r6) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000480)=0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) 16m59.938451062s ago: executing program 4 (id=132): r0 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x8000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000300)=""/101, &(0x7f00000000c0)=0x65) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 16m57.923546915s ago: executing program 4 (id=134): kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r5, 0x10000000005, 0x0) 16m55.855409212s ago: executing program 4 (id=138): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0xb7, 0x0, 0x1, 0x9}, 0x28) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x8001}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xe, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7794b0ed934a040a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x81}, {0x7, 0x5, 0x7d, 0x8001}]}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) capset(&(0x7f0000000000)={0xf1504}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16m52.813294715s ago: executing program 4 (id=143): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/56, 0x38}, 0x1fff}], 0x1, 0x1832b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sigaltstack(0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) unshare(0x26020480) r4 = userfaultfd(0x801) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x20500) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x1, 0xffffffff, @name="d5925c5bf7a5a2ec78c9f3763603c825fb89148a49e93f711f07bcaa9ac7b576"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) 16m37.524795287s ago: executing program 33 (id=143): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/56, 0x38}, 0x1fff}], 0x1, 0x1832b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sigaltstack(0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) unshare(0x26020480) r4 = userfaultfd(0x801) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x20500) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x1, 0xffffffff, @name="d5925c5bf7a5a2ec78c9f3763603c825fb89148a49e93f711f07bcaa9ac7b576"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) 13m42.786141454s ago: executing program 1 (id=388): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x9, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739"}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000400), 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000380)={0x0, 0xf6, ""/246}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x2, 0x2, 0x3}) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x24) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0x541b, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r9, 0x1) 13m24.385888064s ago: executing program 1 (id=399): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x40041, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000003040)={0x90, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x4, 0x7, {0x4, 0xe, 0xc, 0x5, 0x30, 0x8000000000000001, 0xdc, 0x3, 0xd8, 0x6000, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xffffff7f}}}, 0x90) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x40000000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/131, 0x83}, 0xc}], 0x1, 0x2131, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) 13m20.72779613s ago: executing program 1 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xc2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r4}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}}) keyctl$setperm(0x5, r5, 0x2000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="710502063fd72771a698960202bfe9773c6a"], 0x12) 13m17.560611209s ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x100000) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8, r4, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 13m12.356346984s ago: executing program 1 (id=404): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = fanotify_init(0x16, 0x0) r4 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x40000010, r5, 0x0) execveat(r5, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 13m7.438082557s ago: executing program 1 (id=413): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e21, 0x6, 0xa, 0x20}, {0x1, 0x8000000000000000, 0x9, 0x9, 0x8d8, 0x800, 0x80, 0x7ff}, {0x8, 0x7d2, 0x8c, 0xe8fe}, 0x1, 0x6e6bbe, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x1, 0x2, 0x2, 0x63b, 0x49db, 0x9}}, 0xe8) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r7 = socket(0x25, 0x80000, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000000)={0x3}) 12m52.010781089s ago: executing program 34 (id=413): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e21, 0x6, 0xa, 0x20}, {0x1, 0x8000000000000000, 0x9, 0x9, 0x8d8, 0x800, 0x80, 0x7ff}, {0x8, 0x7d2, 0x8c, 0xe8fe}, 0x1, 0x6e6bbe, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x1, 0x2, 0x2, 0x63b, 0x49db, 0x9}}, 0xe8) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r7 = socket(0x25, 0x80000, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000000)={0x3}) 4m7.81127657s ago: executing program 2 (id=1083): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 4m4.490326118s ago: executing program 2 (id=1086): io_setup(0x281, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, &(0x7f0000000a00)) 4m1.494719927s ago: executing program 2 (id=1091): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000ea0300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0x8, {"4a1c8686bcfee5208f0167953a62825b02ea50f67f1823f7773c3bc3212c1edd6c1949f236e43d41fc2fd343c04c4e6d954f66533aa0868cc7f34bb8996000634ce6c30deef2d8643aaa60b953146c94ac2c37b4d179db199ea84b5d351ad7972fbe5e0c5444323bdd85ec91359d206210064b54a9397831346aab546a2dfc7ff5bcf090a67f7e08458c6bac3c85d3d25f8c87cbad060cfc28e7bbc31a9236b2f06fb9da184a0a5894477d35de8df7fe672f47c260e28c3cb6444f0de8579253baacec249e1cafb6ad04a1f02bb74ae1e64bf3b4c848b4b69b36d15aa292fe2ad7c4988b86b7d1e7a4232b23465eb6240ac1e567761759c00d145b6edb5f041fd5eca6d94862233aa57093bbead8ced6643e4e482b151fa687bef6a7fd049df564ea97fcf61c8a2efa8708d17fae9c4b6fd66e12c8c451825f0239862afa7676a53c912b4c44d4ce76f5f2d234b648391bf1dce26d665b79646604d38d93c66a3a48fe8bae57e19d418674ddc60c20ff01f21baffeaa2d68be0b4e74657918f1fa48119cb84b9659acbe84b0bb43a8df61f200221f3b7a633ddc01b4611cb4d769cbc14254dcd64133501ee293b0aed25377ac81406df222137caca6c04849dfd8353d6067c878aa9b6b04fc827a8077b5c44f6b662195b43a8888b3ba3e61622e0081a8392e0a55c0f92d8b917589205071829c851ddc28a6f39b4e338205849753ef1db6950f59fa0c52c5f51722891d0ab3266f4e69b8fbead1bfe1d0eb10e304f494366950e336d7146926b73353da31c156a629dc34632eb92756e1584f024a07761facf2f8983cd41dfc4777561b373144ccbf450b87aa8c64ce759c9256a27798e05286ea7bccfc3e3510efc9558b3f7ea4d24e59d97d4a9609e4ea8c194ae551933bec2a97914e0ec1b4e7ad40609c4b3c3fd85d4df8761e10bca6f4c525ffee14f79fb40d9d9555c8ceb16004a17f92bc2ff675e97eae53fc6a47dd91b18401c672a9cfa7ff0ee243e0ab59e52389e799e0faad1446c06e297ffa7633a654f5eae529db41a535c4398e10c1eeb6cc2eaf462b323c7cbc471dc828798f094b9be68f76706f232979db2a806db3de1650ff42d1c69d491a3a1d876bdd35092e52421f0517bd9cdbfc772bb2d15bd7b8bdddea20eb1a0831b7fc25e20a1873bc480e781081588f5100860c056211e8b27d8e786c000cf4abb07c01674d42c21179a6f0f9eb7b1b66773c9c4b00d1a5eba3ad00f80ea97174f943d30653b3ed87369b2e0048e1e14eca44a6305963875dad15e5be4b2cd0177908382a8ce9d28ce890100e4e533fcbaad459f6c2e5a1076d547071041b117023e88f38eca9032c2eea9ecd37fc5e5b75601c6a48d0ad6082acf4da67dbf574735b5bd1a6a2f6c042322f39a76b99f67cb2d25e5b6834c87330644866b7435a96e1ed657a8cb0f9210b85875f835a5e50f7cb9a7bf03c8b8b08d9b289ec1bcae9c2240959a2f13f7d1978ec6c31a2459db59dff20a185749573d8d33fa04650953bd98ee0d2dc7ff2ece740e0e44794c32c8545327c9b0f4165eaa0b774f3dd84828c919cb6010569129ed1660d5ebaa0c79f8a8457f6e881c710a8f5d54dda474727ad2f04c639210cfee42fe5bedb9ab07627e08475442d5f776364779b09a5ab9df633a46afe7c5a08dd568800ee14c1808e46c41b1658a8d51c95f9e0a3992070eb4c645d3ae8bfda5aecd11750a634d7588d77e881d10038f7a6b446f465594ba98393b6fef4be981e71f92a033628420812063e42fc820b8d87a0e2b7073858c624806822dd6bd01855044d982365924d691b0c43b55101fb71de32ae5bba3ea92c2c753d51feb2a85989fafd0dc96e7eef7c2cd8d85d132501b3f2106f1caf1332c6f67a5f7a9db315e5d50a89244b9a7d979f0b2e3817197c5da18fb18b54fed53cc836f6d1dc5b0fdb9d6db8af03f9447bcd5105abe4646fb02799d728337cc08d86492ba0cc276691b0495173faf90806bc83160c2de9ff381675d7c092813f5441bd52a570f9bbf3c89b90b2b100071c57e88cf4c609e94b33b16b1528cdd108d594bd49a2c198b05f57e0366c71bdf24f00e8e9b8e8045d451093793a2a0c7bfe1f1cff0181d8880310390b8aa40d0bf06314d97ce34b4211a30b6e52cef2e59327d20d9059e0c66b8d8c602f1bacc688d5764ddcd53467757180b29d7ef66c483a2d541e38f7cf3aa70e7825877ad98df7ea45d819834ffe6e58699b1420e53d6e0b0897bb919baa6ec2417a0b7b678f69abc3c2036b583f6ceb7689c5262d90c016b4c0779dd7bbf1867d26cfef12c7543fcf8366482aa58630ddb95c9b35bb4a6b7e98519611f5c44f7527541d45021bbc04730cc7ace246842a01dacce586ae6ffe4c0ece46ccd9a15c06c5fdda6383233d46286dafd14c1d1c434eb60821c0fa2ac62d164806d4790aa0ac25c8f1565ccdf19796e58ba69f08e39b75832b710de6cee8cdc239e0c10aa01baf81bf2b7f946366f87392a8bcd601be4977096cbe1db6d36b4c3125658cfc98920dfceccfa82a2552c16a04adfd4c7b800900719550a8c9a64bb71ba5580a2bf5dfee193b664bc4ed3ec49f015921a91a30d882b582634a13ae5334969b72ae1b5f2839f116961e5b7352b1a61b079e8ce3896dd57bdc1807b8f062d17ec4f3e13370461117af3155cf8516acc52752fc64501852f178ddef4228b3509e5ca8d9c70e94a87ea49904882265e0fe895a1b13c062955ab889f29cb66c6ad0c57e726bf0b5e78717c96b70d57e64f65bdb01c5105a54ff9855030b1c8afc211588c9835a276bdf8e35dd3de2defcac86603aab111df629f55729472edc199901eca23206427d3ad0cd20e33710a0538be06ff03f12d1ef8d1f59c10f225a6dd609daa05f95618426a01e9ffd9c3a8d59cda168a2b9357269c2d6b1194a3b196e096ecf0ae85b4d39ad26eb5b4b95df8217a7f3fe0b193de8244df14ffdab8bfe2eb40a94ec5b3166ae8c24525fa2e86a6493ae86fa47816f77e4c601df12d636b46415b9ffbbb250107f7d2a71156efcbb60296d9e9a3050a7018f76948ed24ca12c8a5c3a5d2b0afc2cedb1801cecb27d8e1636199c3f393535aef6e5a65b0a05c1aa7d6b25585d23e13108a2e3f496ebab022b0769a7feb5a026625cfc8ac64bedc9194f29d865e080a8924d67b57db1bd85cec5a504302547d30231532400a4a63dc6ce226a36bc030b8eb3071b74cdd228e07640c9489f14ecbdd96da61989bad374634f1818fbce2b0e2d3f9dbb8d11fb605ac027b23ce8257376a6da3a7e9593beff87270900a76158b8521eb5e48d9a4018cf2935066f60cb1c5636fb3299661f7e9f7ca3e098df990bd3ac4948a6bd77520a1204d2fabd4ab7eb9e81fc72909a56a371a7c2384fcbaedc5e52b6be65864e50647bf75b3798cfc91f9af29b4e42a904e6f43ee5c52f78eeb07b67d2040d11bcc1751eaa8022471c8f9acddcb650272f325e95a988609d00aefa96e94a1852e7027065dcd294da21a7e8771f1c493d1f19d85484263d0f2123ddc3b03de16c40a2b55523a85ce2ebc45d5778cb1976444a9e34ad6938e32fdd7e1bb8679f5c28dbf32859ba77f983cc99e639c3dec7fd5892b40fe96a21cfc9821a4fcb2dc862e86d1b07ebb50a4e542585116c23cc394f5d907aca0370222d3b742aa6b1b5297c7f3248d63e7252540b571694dcbe529ff655eaa6706b70e1166a23d878f16d2d9bfda2a702f379aab623e80653d8d730b22371f85a8544446c2365154ad0c80c337d74519906c84b68c086c84ee19b8a11a2e2b7832eaf4c3741e69a5a5be6ec0a422f35c2da03edde307266f1684323700242fcdfc43086f32e7c63b198a99fa9435caa67727337635faba24ad3053712f0e20644a9491e6348a08dbae36d6fc0d9e3fbbacce16ec5094e0c783f974b9ee243d52979ce9e41ec6eafe5b5b67e7fd3e3a44edf3e3ae240c635d2c5b486ffd55a625d5aed19b845e965ca476ffc0d33db724666ac96156fe4691b57a1c8c9eec499381dbfcc05e30ae031c9d06a74a4637cfb579423d2e2b2f075d4205f38833ed689468dc722dd80f60a1d879b3e0a42a77fde128a6bd13e973bc80985296a28b0d441913538c81f48601400896c9b48e56e015f7fc301b62415d1f7d20ddbdecd0aec257e2ff55ac7e01d0ad1908002aed4d964aa7fd0a80518fad889cda222c84095874d3585ede9b9fb7b48f56bc08db3cb62b28366be16ba54095061e292275944d1c5ee21c432f09b37802f6e287bd60ec9e310fe97e236bec962aea59f1373a97c5dd5970d5b1e34010d694863651d4508696c1ea2bed714e81413295b44414f8e38d0cb8ade88b9c724ecdba7ee3c7e02d690d76132a2e960485092591881678a8959c5adc5d55cf9571dec96207b24e11d237eaf235775136e9f220d9c5f2b34133f8a49514c9daf1488923db6d00c1227ae5ba05ebe07761a4f4df4adc94fa894a5bb9c6c609eb077a13055ddba2296b7ba493442159a635d1ae7654b56912f9bf3eda868da3e4d760555b11d3f5d4030d54589378533bc01277b27731a44bb7b15a2a921f7862874866f4924bcba403d711d8b41c2902b2d6b67631b12f810ced5e87c08e683613dcdd6332b2e2290398675ea12138c2549221226abaa865b0025f698f13e1dabd4a4dddb61ed77965b8d47feffc461587210ac4543294eccfc97e882535680b392576fd4c3b6b587f1987c6dd5b28df1da14cfe2ec98859c651e30641c1610592122348e14e563d54f93a8d125056da7983960c2bf9a4ac22209912e94d90df4934282c65c7b9e65165305c01b160124aee9e2f59b11be25cb6c97c06aa62e04844d2bbf3a1476e6bd048924b7c30166796565c98efa7aef9c9ac52a650be504d8027d6361a2ebb4017da6de1d3cfa9e86fa442c3a63cd24630d563c93540dcffa0c6923a6512ccf274c533ae5e9000c51deaf1f1d664def78059066ec55c31a98c8b44dd11c7277d3d08c0c91d9de556e18aca33e1853a0bf2ee03dcb2f1e5eb6c925c0fa850f31dad0cefcb0eb17a67876c7a61bf775c5cbe07b31b7fa3fa94eddd13af90e8c004f6356ff3ca860d01575e9972e07877b76125cae5e71e90e20493d4ab9fa6169ad64b6139bdbdf7207c7c14702bd61c0aae6a003f05a077b11e09dc5df05a2b32f41ab5005a8c22207bc9dc608ab0ad736e2dee449d5de25108a91d1311a1494b6a3ceca635407765417a74441a19e004082b14efa13bd588366fb8645b3dc97121b4ae981db1f54a3fb101ac38cd7fff38cc7f72bbbeb0e271837fafc4676f4d3beaeb5fb9bcb271f480017edf6fac074e2e9bf9a839a78ad82348cda40fc05aac23ad37c87b921347f2e00a4624b0d6bc179f5e7d027555bc4c9c9e29b59847605b717c2feec208532f098da3f418a467d7aeff336138c2de8c0eb62d637b336e96cbdf448266d15b541ec4cf11e5bd638df5fe5c0099d9eeba815c65098c101ebfc6fc2eb963331326fe9f53f55628fa4fca752b886b317e4a222357a53bd4ef2e59fc751b3798bbe25e0ef2dd19e4b17c3ffa6865c557a7791617dbd33fb6fb250b496d7c7b83adf6c7d69b7b679b2e708eae073ad289988a6bb29a477ee93e854d75468bb5692e429bb209076ffa0a449dec38fd0b29626c16c9661f1ed52f94ce30e2cdf9af8090dd30cba6c41616b7f185b299f4f754a083b2b63dcb7c4fd06a1839ce914dd134cc387552f989f6feda0", 0x1000}}, 0x1006) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m57.709821876s ago: executing program 2 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x408, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = getpid() mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x1000004, &(0x7f00000001c0)='@\']\x00') r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x4, @loopback, 0x8}}}, 0x3a) 3m54.954232949s ago: executing program 2 (id=1098): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb, 0x224000) read$usbmon(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000c1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x84001) ioctl$BLKGETNRZONES(r6, 0x80041285, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000080)) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m46.873581876s ago: executing program 2 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/26, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80340, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xffe}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1, 0x0) llistxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000400)=""/84, 0x54) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001c80)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m0.056444458s ago: executing program 6 (id=1210): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e21, 0x6, 0xa, 0x20}, {0x1, 0x8000000000000000, 0x9, 0x9, 0x8d8, 0x800, 0x80, 0x7ff}, {0x8, 0x7d2, 0x8c, 0xe8fe}, 0x1, 0x6e6bbe, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x1, 0x2, 0x2, 0x63b, 0x49db, 0x9}}, 0xe8) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r8 = socket(0x25, 0x80000, 0x0) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000000)={0x3}) 1m58.695362904s ago: executing program 6 (id=1211): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x60102, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000b, 0x13, r0, 0x0) mmap(&(0x7f00000de000/0x4000)=nil, 0x4000, 0x200000b, 0x11, r0, 0x75f2e000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 1m56.655513888s ago: executing program 6 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x5efe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0xceff}}, 0x10000, 0x1ff, 0x9, 0x1, 0xd, 0x4, 0x6}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040600) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000104169b2e9ad030b398"], 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r6 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, 0x0) 1m54.058197623s ago: executing program 6 (id=1218): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(r1, 0x0, 0x80900) sendfile(r3, r3, 0x0, 0x200000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xf, 0x4) syz_emit_ethernet(0x96, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x51, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0x8, "743495437356"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x92000, 0x114) getdents64(r5, &(0x7f00000001c0)=""/105, 0x69) 1m52.374449992s ago: executing program 6 (id=1219): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e21, 0x6, 0xa, 0x20}, {0x1, 0x8000000000000000, 0x9, 0x9, 0x8d8, 0x800, 0x80, 0x7ff}, {0x8, 0x7d2, 0x8c, 0xe8fe}, 0x1, 0x6e6bbe, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x1, 0x2, 0x2, 0x63b, 0x49db, 0x9}}, 0xe8) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'hsr0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r6 = socket(0x25, 0x80000, 0x0) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000000)={0x3}) 1m50.805318032s ago: executing program 6 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) r1 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$link(0x8, r1, r5) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 1m34.492507198s ago: executing program 35 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) r1 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$link(0x8, r1, r5) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 10.847151177s ago: executing program 5 (id=1311): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000280)=@v2={0x2000000, [{0x9, 0x7}, {0x8, 0xca}]}, 0x14, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="b8000000150001ee"], 0xb8}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 9.472951108s ago: executing program 5 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001340)=0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000280)={0x0, 0x0, [0x100, 0xfffffffa, 0x5, 0x6, 0x6, 0x9, 0x4, 0x5]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000005802"]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) 9.241299336s ago: executing program 0 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r8, &(0x7f00000012c0)="a5", 0x1) 6.787749773s ago: executing program 5 (id=1314): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) read(r0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000001540)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000340)) 6.758915599s ago: executing program 0 (id=1315): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x3d13, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x7, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x800, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r5, @ANYRES16=r3, @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x40087101, 0x20001100) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x4) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e0000000040200008"], 0x38) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.710355099s ago: executing program 0 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) fstatfs(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x3) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) 4.298626506s ago: executing program 0 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x1000) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 2.808751225s ago: executing program 5 (id=1318): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101381) unshare(0x2040600) openat(0xffffffffffffffff, 0x0, 0x0, 0xd0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790b0c9", 0x4, 0xfffffffffffffffe) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x1000, 0x1cc0014}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x26) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) keyctl$update(0x2, r3, &(0x7f0000000240)="ac", 0x1) 2.573951339s ago: executing program 0 (id=1319): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x101, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1ff, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0x9, 0xffffffffffff8001, 0xb4e7, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x5}, {0x0, 0x9}, {0x200000008, 0xa00}, 0x8000, 0xa, 0x0, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = userfaultfd(0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r5, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) prctl$PR_SET_NAME(0x4, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x2) 1.813206536s ago: executing program 0 (id=1320): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet(0x2, 0x80001, 0x84) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.812613194s ago: executing program 5 (id=1321): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48010000309901000000000000000000e00000020000000000"], 0x148}, 0x1, 0x0, 0x0, 0x200c0881}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000340)}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x281, &(0x7f0000000100)=0x0) io_submit(r5, 0x0, &(0x7f0000000a00)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 5 (id=1322): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 0] vkms_vblank_simulate: vblank timer overrun [ 311.346512][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.351870][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 311.351885][ T37] audit: type=1800 audit(1759296186.800:24): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.231" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 311.696066][ T991] Process accounting resumed [ 312.933392][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.474314][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.572851][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.663927][ T7205] Process accounting resumed [ 314.287053][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.405068][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.518503][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.630696][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.952230][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.952294][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.608057][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.636951][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.639397][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.664380][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.665222][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.696634][ T44] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 326.129925][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 327.190584][ T5132] Bluetooth: hci2: command tx timeout [ 327.416671][ T44] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 327.416700][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.416718][ T44] usb 1-1: Product: syz [ 327.416732][ T44] usb 1-1: Manufacturer: syz [ 327.416745][ T44] usb 1-1: SerialNumber: syz [ 327.505993][ T44] usb 1-1: config 0 descriptor?? [ 327.707449][ T7292] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 328.361646][ T44] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 328.361702][ T44] pctv452e: pctv452e_power_ctrl: 1 [ 328.361702][ T44] [ 328.413394][ T44] usb 1-1: selecting invalid altsetting 3 [ 328.413413][ T44] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 328.413413][ T44] [ 328.413805][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 328.683855][ T7296] binder: 7293:7296 ioctl c0306201 0 returned -14 [ 328.685593][ T7296] binder: 7293:7296 ioctl c0306201 200000000540 returned -22 [ 329.510587][ T5132] Bluetooth: hci2: command tx timeout [ 330.299235][ T37] audit: type=1800 audit(1759296205.780:25): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.252" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 331.435766][ T7311] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 331.565413][ T5132] Bluetooth: hci2: command tx timeout [ 331.913206][ T44] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 331.978192][ T44] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 332.006149][ T31] IPVS: starting estimator thread 0... [ 332.070626][ T44] usb 1-1: USB disconnect, device number 2 [ 332.094003][ T7315] IPVS: using max 7 ests per chain, 16800 per kthread [ 333.757245][ T5831] Bluetooth: hci2: command tx timeout [ 335.098260][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 335.805914][ T9] IPVS: starting estimator thread 0... [ 335.892254][ T7351] IPVS: using max 8 ests per chain, 19200 per kthread [ 341.554303][ T988] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 342.592113][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.544847][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.593092][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.627703][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.813237][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.924792][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.145160][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.369580][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.469605][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.628220][ T7400] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 345.709178][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.404724][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.461026][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.559727][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.600409][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.445716][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.470258][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.619650][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.660554][ T6367] bond0 (unregistering): Released all slaves [ 353.399665][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.197088][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.591395][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.977619][ T9] IPVS: starting estimator thread 0... [ 356.222379][ T7464] IPVS: using max 7 ests per chain, 16800 per kthread [ 360.589614][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 361.325791][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'. [ 362.982968][ T7523] comedi: valid board names for 8255 driver are: [ 362.982984][ T7523] 8255 [ 362.982991][ T7523] comedi: valid board names for vmk80xx driver are: [ 362.982999][ T7523] vmk80xx [ 362.983005][ T7523] comedi: valid board names for usbduxsigma driver are: [ 362.983014][ T7523] usbduxsigma [ 362.983021][ T7523] comedi: valid board names for usbduxfast driver are: [ 362.983029][ T7523] usbduxfast [ 362.983036][ T7523] comedi: valid board names for usbdux driver are: [ 362.983042][ T7523] usbdux [ 362.983048][ T7523] comedi: valid board names for ni6501 driver are: [ 362.983054][ T7523] ni6501 [ 362.983057][ T7523] comedi: valid board names for dt9812 driver are: [ 362.983061][ T7523] dt9812 [ 362.983065][ T7523] comedi: valid board names for ni_labpc_cs driver are: [ 362.983069][ T7523] ni_labpc_cs [ 362.983072][ T7523] comedi: valid board names for ni_daq_700 driver are: [ 362.983076][ T7523] ni_daq_700 [ 362.983080][ T7523] comedi: valid board names for labpc_pci driver are: [ 362.983084][ T7523] labpc_pci [ 362.983087][ T7523] comedi: valid board names for adl_pci9118 driver are: [ 362.983092][ T7523] pci9118dg [ 362.983097][ T7523] pci9118hg [ 362.983101][ T7523] pci9118hr [ 362.983104][ T7523] comedi: valid board names for 8255_pci driver are: [ 362.983108][ T7523] 8255_pci [ 362.983111][ T7523] comedi: valid board names for s526 driver are: [ 362.983115][ T7523] s526 [ 362.983118][ T7523] comedi: valid board names for multiq3 driver are: [ 362.983122][ T7523] multiq3 [ 362.983125][ T7523] comedi: valid board names for pcmuio driver are: [ 362.983129][ T7523] pcmuio48 [ 362.983132][ T7523] pcmuio96 [ 362.983135][ T7523] comedi: valid board names for pcmmio driver are: [ 362.983139][ T7523] pcmmio [ 362.983142][ T7523] comedi: valid board names for pcmda12 driver are: [ 362.983146][ T7523] pcmda12 [ 362.983149][ T7523] comedi: valid board names for pcmad driver are: [ 362.983153][ T7523] pcmad12 [ 362.983156][ T7523] pcmad16 [ 362.983158][ T7523] comedi: valid board names for ni_labpc driver are: [ 362.983163][ T7523] lab-pc-1200 [ 362.983166][ T7523] lab-pc-1200ai [ 362.983169][ T7523] lab-pc+ [ 362.983172][ T7523] comedi: valid board names for atmio16 driver are: [ 362.983176][ T7523] atmio16 [ 362.983179][ T7523] atmio16d [ 362.983182][ T7523] comedi: valid board names for ni_at_ao driver are: [ 362.983186][ T7523] at-ao-6 [ 362.983188][ T7523] at-ao-10 [ 362.983191][ T7523] comedi: valid board names for ni_at_a2150 driver are: [ 362.983196][ T7523] ni_at_a2150 [ 362.983199][ T7523] comedi: valid board names for adq12b driver are: [ 362.983203][ T7523] adq12b [ 362.983206][ T7523] comedi: valid board names for mpc624 driver are: [ 362.983210][ T7523] mpc624 [ 362.983213][ T7523] comedi: valid board names for c6xdigio driver are: [ 362.983217][ T7523] c6xdigio [ 362.983220][ T7523] comedi: valid board names for aio_iiro_16 driver are: [ 362.983224][ T7523] aio_iiro_16 [ 362.983227][ T7523] comedi: valid board names for aio_aio12_8 driver are: [ 362.983231][ T7523] aio_aio12_8 [ 362.983234][ T7523] aio_ai12_8 [ 362.983237][ T7523] aio_ao12_4 [ 362.983240][ T7523] comedi: valid board names for fl512 driver are: [ 362.983244][ T7523] fl512 [ 362.983247][ T7523] comedi: valid board names for dmm32at driver are: [ 362.983251][ T7523] dmm32at [ 362.983254][ T7523] comedi: valid board names for dt282x driver are: [ 362.983258][ T7523] dt2821 [ 362.983261][ T7523] dt2821-f [ 362.983264][ T7523] dt2821-g [ 362.983267][ T7523] dt2823 [ 362.983269][ T7523] dt2824-pgh [ 362.983272][ T7523] dt2824-pgl [ 362.983275][ T7523] dt2825 [ 362.983278][ T7523] dt2827 [ 362.983281][ T7523] dt2828 [ 362.983284][ T7523] dt2829 [ 362.983287][ T7523] dt21-ez [ 362.983290][ T7523] dt23-ez [ 362.983293][ T7523] dt24-ez [ 362.983296][ T7523] dt24-ez-pgl [ 362.983299][ T7523] comedi: valid board names for dt2817 driver are: [ 362.983303][ T7523] dt2817 [ 362.983306][ T7523] comedi: valid board names for dt2815 driver are: [ 362.983310][ T7523] dt2815 [ 362.983313][ T7523] comedi: valid board names for dt2814 driver are: [ 362.983317][ T7523] dt2814 [ 362.983320][ T7523] comedi: valid board names for dt2811 driver are: [ 362.983324][ T7523] dt2811-pgh [ 362.983327][ T7523] dt2811-pgl [ 362.983329][ T7523] comedi: valid board names for dt2801 driver are: [ 362.983333][ T7523] dt2801 [ 362.983336][ T7523] comedi: valid board names for das6402 driver are: [ 362.983341][ T7523] das6402-12 [ 362.983349][ T7523] das6402-16 [ 362.983353][ T7523] comedi: valid board names for das1800 driver are: [ 362.983357][ T7523] das-1701st [ 362.983360][ T7523] das-1701st-da [ 362.983363][ T7523] das-1702st [ 362.983367][ T7523] das-1702st-da [ 362.983370][ T7523] das-1702hr [ 362.983373][ T7523] das-1702hr-da [ 362.983376][ T7523] das-1701ao [ 362.983379][ T7523] das-1702ao [ 362.983382][ T7523] das-1801st [ 362.983385][ T7523] das-1801st-da [ 362.983389][ T7523] das-1802st [ 362.983392][ T7523] das-1802st-da [ 362.983395][ T7523] das-1802hr [ 362.983398][ T7523] das-1802hr-da [ 362.983401][ T7523] das-1801hc [ 362.983405][ T7523] das-1802hc [ 362.983408][ T7523] das-1801ao [ 362.983411][ T7523] das-1802ao [ 362.983414][ T7523] comedi: valid board names for das800 driver are: [ 362.983419][ T7523] das-800 [ 362.983422][ T7523] cio-das800 [ 362.983425][ T7523] das-801 [ 362.983428][ T7523] cio-das801 [ 362.983431][ T7523] das-802 [ 362.983434][ T7523] cio-das802 [ 362.983437][ T7523] cio-das802/16 [ 362.983440][ T7523] comedi: valid board names for isa-das08 driver are: [ 362.983444][ T7523] isa-das08 [ 362.983448][ T7523] das08-pgm [ 362.983451][ T7523] das08-pgh [ 362.983454][ T7523] das08-pgl [ 362.983457][ T7523] das08-aoh [ 362.983460][ T7523] das08-aol [ 362.983463][ T7523] das08-aom [ 362.983466][ T7523] das08/jr-ao [ 362.983470][ T7523] das08jr-16-ao [ 362.983473][ T7523] pc104-das08 [ 362.983476][ T7523] das08jr/16 [ 362.983479][ T7523] comedi: valid board names for das16m1 driver are: [ 362.983484][ T7523] das16m1 [ 362.983487][ T7523] comedi: valid board names for dac02 driver are: [ 362.983491][ T7523] dac02 [ 362.983494][ T7523] comedi: valid board names for rti802 driver are: [ 362.983498][ T7523] rti802 [ 362.983501][ T7523] comedi: valid board names for rti800 driver are: [ 362.983505][ T7523] rti800 [ 362.983509][ T7523] rti815 [ 362.983512][ T7523] comedi: valid board names for pcm3724 driver are: [ 362.983516][ T7523] pcm3724 [ 362.983519][ T7523] comedi: valid board names for pcl818 driver are: [ 362.983523][ T7523] pcl818l [ 362.983526][ T7523] pcl818h [ 362.983529][ T7523] pcl818hd [ 362.983532][ T7523] pcl818hg [ 362.983535][ T7523] pcl818 [ 362.983539][ T7523] pcl718 [ 362.983542][ T7523] pcm3718 [ 362.983545][ T7523] comedi: valid board names for pcl816 driver are: [ 362.983549][ T7523] pcl816 [ 362.983552][ T7523] pcl814b [ 362.983555][ T7523] comedi: valid board names for pcl812 driver are: [ 362.983559][ T7523] pcl812 [ 362.983562][ T7523] pcl812pg [ 362.983565][ T7523] acl8112pg [ 362.983568][ T7523] acl8112dg [ 362.983571][ T7523] acl8112hg [ 362.983574][ T7523] a821pgl [ 362.983577][ T7523] a821pglnda [ 362.983580][ T7523] a821pgh [ 362.983583][ T7523] a822pgl [ 362.983586][ T7523] a822pgh [ 362.983589][ T7523] a823pgl [ 362.983591][ T7523] a823pgh [ 362.983594][ T7523] pcl813 [ 362.983597][ T7523] pcl813b [ 362.983600][ T7523] acl8113 [ 362.983603][ T7523] iso813 [ 362.983606][ T7523] acl8216 [ 362.983609][ T7523] a826pg [ 362.983612][ T7523] comedi: valid board names for pcl730 driver are: [ 362.983616][ T7523] pcl730 [ 362.983618][ T7523] iso730 [ 362.983621][ T7523] acl7130 [ 362.983624][ T7523] pcm3730 [ 362.983627][ T7523] pcl725 [ 362.983630][ T7523] p8r8dio [ 362.983633][ T7523] acl7225b [ 362.983636][ T7523] p16r16dio [ 362.983639][ T7523] pcl733 [ 362.983641][ T7523] pcl734 [ 362.983644][ T7523] opmm-1616-xt [ 362.983648][ T7523] pearl-mm-p [ 362.983650][ T7523] ir104-pbf [ 362.983654][ T7523] comedi: valid board names for pcl726 driver are: [ 362.983657][ T7523] pcl726 [ 362.983660][ T7523] pcl727 [ 362.983663][ T7523] pcl728 [ 362.983666][ T7523] acl6126 [ 362.983669][ T7523] acl6128 [ 362.983672][ T7523] comedi: valid board names for pcl724 driver are: [ 362.983676][ T7523] pcl724 [ 362.983679][ T7523] pcl722 [ 362.983682][ T7523] pcl731 [ 362.983684][ T7523] acl7122 [ 362.983687][ T7523] acl7124 [ 362.983690][ T7523] pet48dio [ 362.983693][ T7523] pcmio48 [ 362.983696][ T7523] onyx-mm-dio [ 362.983700][ T7523] comedi: valid board names for pcl711 driver are: [ 362.983704][ T7523] pcl711 [ 362.983706][ T7523] pcl711b [ 362.983709][ T7523] acl8112hg [ 362.983712][ T7523] acl8112dg [ 362.983715][ T7523] comedi: valid board names for amplc_pc263 driver are: [ 362.983719][ T7523] pc263 [ 362.983722][ T7523] comedi: valid board names for amplc_pc236 driver are: [ 362.983726][ T7523] pc36at [ 362.983729][ T7523] comedi: valid board names for amplc_dio200 driver are: [ 362.983733][ T7523] pc212e [ 362.983736][ T7523] pc214e [ 362.983739][ T7523] pc215e [ 362.983742][ T7523] pc218e [ 362.983745][ T7523] pc272e [ 362.983748][ T7523] comedi: valid board names for comedi_parport driver are: [ 362.983752][ T7523] comedi_parport [ 362.983755][ T7523] comedi: valid board names for comedi_test driver are: [ 362.983759][ T7523] comedi_test [ 362.983762][ T7523] comedi: valid board names for comedi_bond driver are: [ 362.983766][ T7523] comedi_bond [ 364.638985][ T7534] syz.5.302 (7534): drop_caches: 2 [ 370.532237][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.532360][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.532590][ T7267] bridge_slave_0: entered allmulticast mode [ 370.540214][ T7267] bridge_slave_0: entered promiscuous mode [ 371.184124][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.184198][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.184364][ T7267] bridge_slave_1: entered allmulticast mode [ 371.185791][ T7267] bridge_slave_1: entered promiscuous mode [ 371.832229][ T6367] hsr_slave_0: left promiscuous mode [ 372.812127][ T6367] hsr_slave_1: left promiscuous mode [ 372.812996][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.813018][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.895461][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.895487][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.120606][ T6367] veth1_macvtap: left promiscuous mode [ 375.120712][ T6367] veth0_macvtap: left promiscuous mode [ 375.120970][ T6367] veth1_vlan: left promiscuous mode [ 375.121145][ T6367] veth0_vlan: left promiscuous mode [ 375.450025][ T7607] overlayfs: overlapping lowerdir path [ 375.827675][ T7608] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 376.961678][ T7615] ceph: No mds server is up or the cluster is laggy [ 377.102554][ T7619] vxfs: WRONG superblock magic 00000000 at 1 [ 377.102842][ T7619] vxfs: WRONG superblock magic 00000000 at 8 [ 377.102857][ T7619] vxfs: can't find superblock. [ 377.495094][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.502832][ T991] libceph: connect (1)[c::]:6789 error -101 [ 377.503027][ T991] libceph: mon0 (1)[c::]:6789 connect error [ 377.902483][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 378.599416][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.612877][ T991] libceph: connect (1)[c::]:6789 error -101 [ 378.613080][ T991] libceph: mon0 (1)[c::]:6789 connect error [ 378.632034][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.086368][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.229092][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.275237][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 379.275440][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 379.438051][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.612263][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 379.640500][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.934269][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.832893][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.832963][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.027184][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.043833][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.045175][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.046745][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.047479][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.533405][ T37] audit: type=1326 audit(1759296262.040:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc04bd4eec9 code=0x0 [ 387.223948][ T5132] Bluetooth: hci5: command tx timeout [ 387.955257][ T7676] random: crng reseeded on system resumption [ 389.901162][ T5132] Bluetooth: hci5: command tx timeout [ 391.968529][ T5132] Bluetooth: hci5: command tx timeout [ 392.665697][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.825134][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.082639][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 393.086133][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 393.100154][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 393.102189][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 393.153293][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 393.155040][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 393.165918][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 393.167683][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 393.167728][ T7694] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 393.203614][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.230837][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.349787][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.596667][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.839956][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.062968][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.388353][ T5132] Bluetooth: hci5: command tx timeout [ 398.172552][ T7701] comedi comedi3: Buffer allocation failed [ 400.614875][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.791928][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.299509][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.650322][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.374703][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.854087][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.199196][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.262234][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.923190][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.992175][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.409974][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.143392][ T7773] atomic_op ffff88805e4e6218 conn xmit_atomic 0000000000000000 [ 417.116163][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 417.119213][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 417.120505][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 417.120788][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 417.121734][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 417.121938][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 417.122751][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 417.122944][ T7823] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 417.122962][ T7823] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 423.857898][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 425.096373][ T7872] evm: overlay not supported [ 425.103915][ T37] audit: type=1804 audit(1759296300.650:27): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.378" name="/newroot/96/bus/file0" dev="overlay" ino=540 res=1 errno=0 [ 430.524112][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 434.542493][ T7891] syz.5.384 (7891) used obsolete PPPIOCDETACH ioctl [ 434.567340][ T7895] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 434.567378][ T7895] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 434.567396][ T7895] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 435.566168][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 435.966880][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.967076][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.967273][ T7647] bridge_slave_0: entered allmulticast mode [ 435.969915][ T7647] bridge_slave_0: entered promiscuous mode [ 435.976478][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.976600][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.976768][ T7647] bridge_slave_1: entered allmulticast mode [ 435.979211][ T7647] bridge_slave_1: entered promiscuous mode [ 436.463621][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.467692][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.553353][ T6367] bridge_slave_1: left allmulticast mode [ 436.553378][ T6367] bridge_slave_1: left promiscuous mode [ 436.553612][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.622953][ T6367] bridge_slave_0: left allmulticast mode [ 436.622971][ T6367] bridge_slave_0: left promiscuous mode [ 436.623154][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.687493][ T6367] bridge_slave_1: left allmulticast mode [ 436.687511][ T6367] bridge_slave_1: left promiscuous mode [ 436.687655][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.753944][ T6367] bridge_slave_0: left allmulticast mode [ 436.753962][ T6367] bridge_slave_0: left promiscuous mode [ 436.754138][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.990499][ T6367] bond0 (unregistering): Released all slaves [ 437.143005][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.223648][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.286903][ T6367] bond0 (unregistering): Released all slaves [ 437.490405][ T7647] team0: Port device team_slave_0 added [ 437.494665][ T7647] team0: Port device team_slave_1 added [ 438.028687][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 438.172965][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 438.509359][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.509370][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.509384][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.522347][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.522360][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.522382][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.756425][ T7647] hsr_slave_0: entered promiscuous mode [ 438.758346][ T7647] hsr_slave_1: entered promiscuous mode [ 438.759082][ T7647] debugfs: 'hsr0' already exists in 'hsr' [ 438.759101][ T7647] Cannot create hsr debugfs directory [ 439.658476][ T7647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.691411][ T7647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.745735][ T7647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.791528][ T7647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.447704][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 440.455010][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 440.474963][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 440.484997][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 440.485745][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 440.979269][ T7971] chnl_net:caif_netlink_parms(): no params data found [ 441.701090][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.701169][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.701314][ T7971] bridge_slave_0: entered allmulticast mode [ 441.711589][ T7971] bridge_slave_0: entered promiscuous mode [ 441.915338][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.915438][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.915596][ T7971] bridge_slave_1: entered allmulticast mode [ 441.917074][ T7971] bridge_slave_1: entered promiscuous mode [ 442.221313][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.227126][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.410616][ T7971] team0: Port device team_slave_0 added [ 442.418635][ T7971] team0: Port device team_slave_1 added [ 442.522306][ T5831] Bluetooth: hci2: command tx timeout [ 442.578231][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.578242][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.578254][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.600130][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.600145][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.600168][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.950341][ T7971] hsr_slave_0: entered promiscuous mode [ 442.963006][ T7971] hsr_slave_1: entered promiscuous mode [ 442.963862][ T7971] debugfs: 'hsr0' already exists in 'hsr' [ 442.963882][ T7971] Cannot create hsr debugfs directory [ 443.163387][ T6371] bridge_slave_1: left allmulticast mode [ 443.163415][ T6371] bridge_slave_1: left promiscuous mode [ 443.163663][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.235546][ T6371] bridge_slave_0: left allmulticast mode [ 443.235565][ T6371] bridge_slave_0: left promiscuous mode [ 443.238645][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.734035][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.815739][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.874574][ T6371] bond0 (unregistering): Released all slaves [ 444.265409][ T6371] hsr_slave_0: left promiscuous mode [ 444.302521][ T6371] hsr_slave_1: left promiscuous mode [ 444.303374][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.370632][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.602263][ T5831] Bluetooth: hci2: command tx timeout [ 444.974299][ T6371] team0 (unregistering): Port device team_slave_1 removed [ 445.078522][ T6371] team0 (unregistering): Port device team_slave_0 removed [ 445.257939][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.258007][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.682160][ T5831] Bluetooth: hci2: command tx timeout [ 446.894529][ T7971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 446.949590][ T7971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 446.988477][ T7971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.024126][ T7971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 447.280601][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.321302][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.347471][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.347683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.363415][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.367210][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.476629][ T7971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.842582][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.261274][ T7971] veth0_vlan: entered promiscuous mode [ 448.273738][ T7971] veth1_vlan: entered promiscuous mode [ 448.345793][ T7971] veth0_macvtap: entered promiscuous mode [ 448.359540][ T7971] veth1_macvtap: entered promiscuous mode [ 448.399166][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.416769][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.457784][ T6367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.460219][ T6367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.460484][ T6367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.460520][ T6367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.762256][ T5831] Bluetooth: hci2: command tx timeout [ 448.767671][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.767695][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.831772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.831790][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.191741][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.533298][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.613946][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.663253][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.951260][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.235962][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.894557][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.375095][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.601992][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.481099][ T8120] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 455.703148][ T5831] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 456.806775][ T8138] syz.1.393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 477.682700][ T8297] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 477.841743][ T5905] IPVS: starting estimator thread 0... [ 477.942223][ T8303] IPVS: using max 8 ests per chain, 19200 per kthread [ 482.757715][ T8325] ubi31: attaching mtd0 [ 482.760891][ T8325] ubi31: scanning is finished [ 482.901882][ T8325] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 482.901908][ T8325] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 482.901925][ T8325] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 482.901982][ T8325] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 482.902047][ T8325] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 482.902064][ T8325] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 482.902081][ T8325] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 320884403 [ 482.902100][ T8325] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 482.974867][ T8338] ubi31: background thread "ubi_bgt31d" started, PID 8338 [ 490.872729][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.895151][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.896617][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.899050][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.900663][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.883389][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.206743][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.209297][ T5132] Bluetooth: hci3: command tx timeout [ 494.182727][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.555065][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.699231][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.721876][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.780428][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 495.136096][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.170063][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.310942][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.386038][ T5831] Bluetooth: hci3: command tx timeout [ 495.612174][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.760821][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.697152][ T5132] Bluetooth: hci3: command tx timeout [ 498.440353][ T8430] vxfs: WRONG superblock magic 00000000 at 1 [ 498.453393][ T8430] vxfs: WRONG superblock magic 00000000 at 8 [ 498.453439][ T8430] vxfs: can't find superblock. [ 498.487372][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.982930][ T8428] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 499.076018][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.741372][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.742352][ T5831] Bluetooth: hci3: command tx timeout [ 499.891364][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.142341][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.244442][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.546159][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.690225][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.431794][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.844936][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.010163][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 502.099205][ T6371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.621637][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.920048][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.025284][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.124830][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.257646][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.375395][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.765366][ T6371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.281746][ T6371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.958005][ T6371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.718562][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.725240][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.914512][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 507.938519][ T6371] bridge_slave_1: left allmulticast mode [ 507.938546][ T6371] bridge_slave_1: left promiscuous mode [ 507.938811][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.979677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d704000: rx timeout, send abort [ 507.979881][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d704000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 508.073625][ T6371] bridge_slave_0: left allmulticast mode [ 508.073651][ T6371] bridge_slave_0: left promiscuous mode [ 508.073902][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.216853][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.317526][ T8515] vxfs: WRONG superblock magic 00000000 at 1 [ 509.321267][ T8515] vxfs: WRONG superblock magic 00000000 at 8 [ 509.321307][ T8515] vxfs: can't find superblock. [ 509.350905][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.379674][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.673249][ T8512] ceph: No mds server is up or the cluster is laggy [ 509.674000][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.676624][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 509.676814][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 510.034289][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.511546][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.538817][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.599125][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.709012][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.270317][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.329070][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.413392][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.942802][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.342273][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.530196][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.743620][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.011331][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.407397][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.633948][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.958182][ T8541] syz.6.475 (8541) used greatest stack depth: 16344 bytes left [ 519.107928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c532800: rx timeout, send abort [ 519.110958][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c532800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 519.230986][ T37] audit: type=1326 audit(1759296394.800:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.2.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc04bd4eec9 code=0x0 [ 522.622772][ T8596] comedi comedi3: pcl730: I/O port conflict (0x5,4) [ 528.581875][ T8626] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 528.582328][ T8626] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 528.583255][ T8626] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 528.584016][ T8626] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 528.584388][ T8626] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 528.584780][ T8626] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 528.585161][ T8626] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 528.585574][ T8626] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 528.586419][ T8626] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 528.586880][ T8626] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 528.629689][ T8626] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 535.324157][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.547887][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.606545][ T6371] bond0 (unregistering): Released all slaves [ 535.889645][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.915605][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.945737][ T8377] bridge_slave_0: entered allmulticast mode [ 536.459573][ T8377] bridge_slave_0: entered promiscuous mode [ 536.708030][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.708162][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.708365][ T8377] bridge_slave_1: entered allmulticast mode [ 536.757897][ T8377] bridge_slave_1: entered promiscuous mode [ 539.076508][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.838193][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.250731][ T8700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.769641][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 548.792527][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 548.794648][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 548.797881][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 548.801706][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 553.033237][ T5132] Bluetooth: hci5: command tx timeout [ 555.082246][ T5132] Bluetooth: hci5: command tx timeout [ 555.579232][ T6371] hsr_slave_0: left promiscuous mode [ 555.706807][ T6371] hsr_slave_1: left promiscuous mode [ 555.707425][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.707441][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.919643][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.919669][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.858502][ T6371] veth1_macvtap: left promiscuous mode [ 556.858565][ T6371] veth0_macvtap: left promiscuous mode [ 556.858747][ T6371] veth1_vlan: left promiscuous mode [ 556.858846][ T6371] veth0_vlan: left promiscuous mode [ 557.171817][ T5132] Bluetooth: hci5: command tx timeout [ 559.678205][ T5132] Bluetooth: hci5: command tx timeout [ 559.752837][ T8841] syz.5.539 (8841) used greatest stack depth: 16152 bytes left [ 565.483449][ T8750] Bluetooth: hci2: command 0x0406 tx timeout [ 566.340489][ T8750] Bluetooth: hci5: command 0x0405 tx timeout [ 568.978776][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.978819][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.324504][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.789756][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.295067][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.407182][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.029099][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.119391][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.326952][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.373546][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.942689][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.319636][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.523675][ T8967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.338816][ T6371] team0 (unregistering): Port device team_slave_1 removed [ 593.600999][ T9077] 9pnet_fd: Insufficient options for proto=fd [ 596.682823][ T6371] team0 (unregistering): Port device team_slave_0 removed [ 603.225196][ T37] audit: type=1326 audit(1759296478.320:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 603.225284][ T37] audit: type=1326 audit(1759296478.340:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 603.225324][ T37] audit: type=1326 audit(1759296478.340:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 603.225363][ T37] audit: type=1326 audit(1759296478.340:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 603.752175][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 603.912404][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 603.919852][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.919883][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.919939][ T5905] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 603.919962][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.499118][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.562885][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.569942][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.633864][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.650362][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.771950][ T5905] usb 3-1: config 0 descriptor?? [ 604.861841][ T5905] usb 3-1: can't set config #0, error -71 [ 604.977874][ T5905] usb 3-1: USB disconnect, device number 2 [ 607.535945][ T8880] Bluetooth: hci3: command tx timeout [ 608.242811][ T9088] syz_tun: entered allmulticast mode [ 610.316419][ T8880] Bluetooth: hci3: command tx timeout [ 612.373069][ T8880] Bluetooth: hci3: command tx timeout [ 614.442183][ T8880] Bluetooth: hci3: command tx timeout [ 615.252179][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 615.435524][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 616.289545][ T5819] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 616.289575][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.289595][ T5819] usb 3-1: Product: syz [ 616.289609][ T5819] usb 3-1: Manufacturer: syz [ 616.289623][ T5819] usb 3-1: SerialNumber: syz [ 616.439634][ T5819] usb 3-1: config 0 descriptor?? [ 616.677956][ T5819] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 616.677997][ T5819] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 617.164687][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 617.818321][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 617.973137][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.973707][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.456225][ T5819] usb 3-1: USB disconnect, device number 3 [ 619.986943][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.038280][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.320506][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.455050][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.524602][ T6371] IPVS: stop unused estimator thread 0... [ 620.623264][ T9265] futex_wake_op: syz.6.635 tries to shift op by -1; fix this program [ 620.878773][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.081339][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.260965][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.927382][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.752409][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.784682][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.784806][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.784998][ T9136] bridge_slave_0: entered allmulticast mode [ 622.789061][ T9136] bridge_slave_0: entered promiscuous mode [ 622.823847][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.823973][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.824291][ T9136] bridge_slave_1: entered allmulticast mode [ 622.834230][ T9136] bridge_slave_1: entered promiscuous mode [ 623.164306][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.878934][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.919923][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.064424][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.362259][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.907658][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.330340][ T6371] bridge_slave_1: left allmulticast mode [ 626.330367][ T6371] bridge_slave_1: left promiscuous mode [ 626.343152][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.243659][ T6371] bridge_slave_0: left allmulticast mode [ 628.243686][ T6371] bridge_slave_0: left promiscuous mode [ 628.244785][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.572665][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.572733][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.450250][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 632.373490][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.603355][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.081410][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.201980][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.537272][ T9345] block device autoloading is deprecated and will be removed. [ 635.555188][ T9345] tmpfs: Bad value for 'mpol' [ 635.687194][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.858207][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.913703][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.999374][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.219014][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.265422][ T9347] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 636.320604][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.463729][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.464792][ T9347] qnx6: wrong signature (magic) in superblock #1. [ 636.464804][ T9347] qnx6: unable to read the first superblock [ 636.746236][ T9358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.396546][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.563606][ T9356] syz.5.658 uses obsolete (PF_INET,SOCK_PACKET) [ 637.870313][ T6371] bond0 (unregistering): Released all slaves [ 638.908633][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.848691][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.008792][ T9363] fuse: root generation should be zero [ 641.779525][ T9373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.034236][ T9136] team0: Port device team_slave_0 added [ 660.083675][ T9136] team0: Port device team_slave_1 added [ 663.752190][ T988] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 664.279227][ T988] usb 1-1: Using ep0 maxpacket: 32 [ 664.342247][ T988] usb 1-1: config 0 has an invalid interface number: 169 but max is 0 [ 664.342320][ T988] usb 1-1: config 0 has no interface number 0 [ 664.342768][ T988] usb 1-1: config 0 interface 169 has no altsetting 0 [ 664.756082][ T988] usb 1-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 664.756112][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.756131][ T988] usb 1-1: Product: syz [ 664.756144][ T988] usb 1-1: Manufacturer: syz [ 664.756156][ T988] usb 1-1: SerialNumber: syz [ 664.812907][ T988] usb 1-1: config 0 descriptor?? [ 664.813780][ T988] usb 1-1: can't set config #0, error -71 [ 665.072527][ T988] usb 1-1: USB disconnect, device number 4 [ 667.899253][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 668.594414][ T9480] syz_tun: entered allmulticast mode [ 668.622331][ T9489] input: syz0 as /devices/virtual/input/input7 [ 668.733579][ T9491] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 670.252855][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.684'. [ 670.627572][ T9495] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 672.854995][ T9509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.545981][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 675.566266][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 675.567581][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 675.570323][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 675.662241][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.882344][ T5831] Bluetooth: hci3: command tx timeout [ 680.247978][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 682.810513][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 684.631196][ T5912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 684.842179][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 685.493886][ T1161] bridge_slave_1: left allmulticast mode [ 685.493922][ T1161] bridge_slave_1: left promiscuous mode [ 685.494166][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.473460][ T5831] Bluetooth: hci3: command 0x041b tx timeout [ 687.562583][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.564637][ T1161] bridge_slave_0: left allmulticast mode [ 687.564659][ T1161] bridge_slave_0: left promiscuous mode [ 687.565732][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.843685][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.856212][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.909478][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.276478][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.479591][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.847182][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.918245][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.170788][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.220497][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.526346][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.775507][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.856388][ T8880] Bluetooth: hci4: connection err: -111 [ 691.405715][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.405785][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.541087][ T8880] Bluetooth: hci3: command 0x041b tx timeout [ 691.605455][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.711'. [ 691.853097][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.525581][ T9644] Failed to get privilege flags for destination (handle=0x2:0x0) [ 693.684435][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.364040][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.981602][ T1161] bond0 (unregistering): Released all slaves [ 696.537149][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 701.039730][ T9693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.477796][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 709.519970][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.731862][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.854140][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.186930][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.379713][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.828835][ T9726] overlayfs: statfs failed on './file0' [ 710.928760][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.818514][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.270099][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.299822][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.536728][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.939038][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.107575][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.269783][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.559169][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.586965][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 713.868708][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.208965][ T9752] comedi comedi0: No channels found! [ 718.241112][ T9770] Process accounting resumed [ 720.102690][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.104433][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.107616][ T9526] bridge_slave_0: entered allmulticast mode [ 720.538226][ T9526] bridge_slave_0: entered promiscuous mode [ 720.559307][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.561942][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.578717][ T9526] bridge_slave_1: entered allmulticast mode [ 720.620865][ T9526] bridge_slave_1: entered promiscuous mode [ 722.279038][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.292462][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.672601][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.337772][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.618524][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.929853][ T9822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.295347][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.640170][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.322978][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.798418][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.262257][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.083629][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.170954][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.372025][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.806723][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.933828][ T8880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.939140][ T8880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.941800][ T8880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.962234][ T8880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.974686][ T8880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 729.298915][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.538677][ T9871] binder: 9862:9871 ioctl c0306201 0 returned -14 [ 729.610888][ T9871] delete_channel: no stack [ 731.196666][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.212297][ T8880] Bluetooth: hci3: command tx timeout [ 732.517775][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.334666][ T8880] Bluetooth: hci3: command tx timeout [ 734.208193][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.372794][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.782670][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.952173][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.110492][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.232626][ T9900] rdma_op ffff888029bafa70 conn xmit_rdma 0000000000000000 [ 735.781723][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.782680][ T8880] Bluetooth: hci3: command tx timeout [ 735.927467][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.6.764'. [ 735.971035][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.118181][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.691518][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.362267][ T6373] bridge_slave_1: left allmulticast mode [ 737.362295][ T6373] bridge_slave_1: left promiscuous mode [ 737.362546][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.395074][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.687533][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.585009][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.588442][ T8880] Bluetooth: hci3: command tx timeout [ 738.645565][ T6373] bridge_slave_0: left allmulticast mode [ 738.645591][ T6373] bridge_slave_0: left promiscuous mode [ 738.645849][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.745189][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.135790][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.202674][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 740.295540][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.295566][ T31] usb 3-1: config 0 has no interfaces? [ 740.295595][ T31] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 740.295617][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.484774][ T31] usb 3-1: config 0 descriptor?? [ 743.840869][ T31] usb 3-1: USB disconnect, device number 4 [ 744.735897][ T6373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.072929][ T6373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.686474][ T6373] bond0 (unregistering): Released all slaves [ 749.353388][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 752.676507][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.676651][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.712142][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 753.022141][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 753.716697][ T31] usb 3-1: device descriptor read/64, error -71 [ 756.998948][T10037] hub 8-0:1.0: USB hub found [ 757.009145][T10037] hub 8-0:1.0: 1 port detected [ 763.853331][T10069] ufs: You didn't specify the type of your ufs filesystem [ 763.853331][T10069] [ 763.853331][T10069] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 763.853331][T10069] [ 763.853331][T10069] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 763.853566][T10069] ufs: ufstype=old is supported read-only [ 770.695703][ T9855] chnl_net:caif_netlink_parms(): no params data found [ 776.103036][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.786446][ C1] vkms_vblank_simulate: vblank timer overrun [ 777.150797][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.093190][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.353737][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.574415][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.743046][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.777545][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.540130][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.900749][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.636839][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.434958][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.435088][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.435308][ T9855] bridge_slave_0: entered allmulticast mode [ 782.447163][ T9855] bridge_slave_0: entered promiscuous mode [ 782.491557][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.491694][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.491912][ T9855] bridge_slave_1: entered allmulticast mode [ 782.587796][ T9855] bridge_slave_1: entered promiscuous mode [ 782.732167][ T6031] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 782.980898][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 782.981383][ T6031] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.984632][ T6031] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 782.985070][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.395347][ T6031] usb 6-1: config 0 descriptor?? [ 783.443142][ T6031] usb 6-1: can't set config #0, error -71 [ 783.483201][ T6031] usb 6-1: USB disconnect, device number 2 [ 785.023095][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.173285][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.050390][ T8880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 791.064504][ T8898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 791.070336][ T8898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 791.073142][ T8898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 791.073881][ T8898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.082265][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 793.172206][ T5831] Bluetooth: hci3: command tx timeout [ 795.256200][ T5132] Bluetooth: hci3: command tx timeout [ 796.072803][ T3727] bridge_slave_1: left allmulticast mode [ 796.072829][ T3727] bridge_slave_1: left promiscuous mode [ 796.073081][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.320365][ T3727] bridge_slave_0: left allmulticast mode [ 797.320392][ T3727] bridge_slave_0: left promiscuous mode [ 797.320625][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.002465][ T5831] Bluetooth: hci3: command tx timeout [ 798.006281][ T5132] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 800.053362][ T5132] Bluetooth: hci3: command tx timeout [ 801.403972][T10308] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 802.055256][ T8898] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 802.055340][ T8898] Bluetooth: hci2: Injecting HCI hardware error event [ 802.060106][ T5831] Bluetooth: hci2: hardware error 0x00 [ 803.788440][ T8898] Bluetooth: hci3: command 0x0405 tx timeout [ 806.752811][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.582315][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 808.448213][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.053981][ T3727] bond0 (unregistering): Released all slaves [ 815.012881][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.012948][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.988500][ T8898] Bluetooth: hci3: command 0x0405 tx timeout [ 819.176953][ T6031] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 819.322127][ T6031] usb 7-1: Using ep0 maxpacket: 32 [ 819.324464][ T6031] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.324487][ T6031] usb 7-1: config 0 has no interfaces? [ 819.324516][ T6031] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 819.324539][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.331057][ T6031] usb 7-1: config 0 descriptor?? [ 820.758613][ T988] usb 7-1: USB disconnect, device number 3 [ 822.404952][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 826.208095][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 826.376614][T10444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.999721][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.120734][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 827.123754][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.566555][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.038658][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.538087][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.247026][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.373186][T10466] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 829.373212][T10466] CIFS mount error: No usable UNC path provided in device string! [ 829.373212][T10466] [ 829.373457][T10466] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 829.478467][T10248] chnl_net:caif_netlink_parms(): no params data found [ 829.721532][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.933092][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.880'. [ 830.318554][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.531456][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.204362][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.421637][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.330746][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.500383][T10248] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.500511][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.500737][T10248] bridge_slave_0: entered allmulticast mode [ 832.528033][T10248] bridge_slave_0: entered promiscuous mode [ 832.800207][T10248] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.800943][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.837974][T10248] bridge_slave_1: entered allmulticast mode [ 832.882319][T10248] bridge_slave_1: entered promiscuous mode [ 832.923487][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.347642][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.980079][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.868670][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.109342][T10248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.128505][T10248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.981692][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.818002][T10248] team0: Port device team_slave_0 added [ 837.253991][T10248] team0: Port device team_slave_1 added [ 838.599170][T10521] Process accounting resumed [ 838.783103][T10248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.783117][T10248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.783140][T10248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.785432][T10248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.785444][T10248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.785466][T10248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.689502][T10248] hsr_slave_0: entered promiscuous mode [ 841.691717][T10248] hsr_slave_1: entered promiscuous mode [ 841.705210][T10248] debugfs: 'hsr0' already exists in 'hsr' [ 841.705234][T10248] Cannot create hsr debugfs directory [ 842.822672][ T988] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 843.088841][ T988] usb 7-1: unable to get BOS descriptor or descriptor too short [ 843.090549][ T988] usb 7-1: not running at top speed; connect to a high speed hub [ 843.091708][ T988] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.091788][ T988] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 843.091829][ T988] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 843.094195][ T988] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.094220][ T988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.094239][ T988] usb 7-1: Product: syz [ 843.094253][ T988] usb 7-1: Manufacturer: syz [ 843.094267][ T988] usb 7-1: SerialNumber: syz [ 844.278040][T10248] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 844.310536][T10248] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 844.382945][T10248] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 844.429577][T10248] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 846.304593][ T988] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 847.596285][ T988] usb 7-1: USB disconnect, device number 4 [ 847.730009][ T7984] udevd[7984]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.316631][T10581] Process accounting resumed [ 849.318710][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 850.439736][ T5912] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 850.439766][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.514897][ T5912] usb 3-1: config 0 descriptor?? [ 851.231241][T10602] ufs: You didn't specify the type of your ufs filesystem [ 851.231241][T10602] [ 851.231241][T10602] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 851.231241][T10602] [ 851.231241][T10602] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 851.231278][T10602] ufs: ufstype=old is supported read-only [ 851.876326][ T5912] ath6kl: Unsupported hardware version: 0x0 [ 851.884647][ T5912] ath6kl: Failed to init ath6kl core: -22 [ 851.885504][ T5912] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 852.057164][ T8898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 852.060361][ T8898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 852.061685][ T8898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 852.064514][ T8898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 852.065283][ T8898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 853.650434][ T5905] usb 3-1: USB disconnect, device number 7 [ 853.673083][T10607] chnl_net:caif_netlink_parms(): no params data found [ 854.133429][T10636] Bluetooth: Invalid esc byte 0x02 [ 854.209239][T10635] (syz.5.912,10635,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 854.209295][T10635] (syz.5.912,10635,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 854.615288][ T5831] Bluetooth: hci5: command tx timeout [ 856.862695][ T5831] Bluetooth: hci5: command tx timeout [ 858.991024][ T5831] Bluetooth: hci5: command tx timeout [ 859.775168][T10662] program syz.2.918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.271648][ T5831] Bluetooth: hci5: command tx timeout [ 861.865826][T10675] ufs: You didn't specify the type of your ufs filesystem [ 861.865826][T10675] [ 861.865826][T10675] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 861.865826][T10675] [ 861.865826][T10675] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 861.866046][T10675] ufs: ufstype=old is supported read-only [ 862.493307][T10677] comedi comedi3: comedi_config --init_data is deprecated [ 862.867430][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.954235][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.110446][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.067483][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.426251][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.675108][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.816728][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.701908][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.912450][T10709] tmpfs: Bad value for 'mode' [ 869.522132][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.350508][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.387755][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.466763][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.568937][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.602778][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.734521][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.922252][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.015257][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.781009][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.920948][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.231708][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.447984][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.328021][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.328091][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.404851][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.404981][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.405218][T10607] bridge_slave_0: entered allmulticast mode [ 875.643359][T10607] bridge_slave_0: entered promiscuous mode [ 875.838330][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.839298][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.863395][T10607] bridge_slave_1: entered allmulticast mode [ 876.016207][T10607] bridge_slave_1: entered promiscuous mode [ 882.443441][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.654100][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.687788][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.316063][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.355585][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.467698][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.567598][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.772400][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.015803][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.069433][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.513992][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.017904][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.292917][T10607] team0: Port device team_slave_0 added [ 888.308572][T10607] team0: Port device team_slave_1 added [ 891.014316][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.014331][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.014355][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.022412][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.022427][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.022451][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.090884][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 893.098532][T10826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.139685][T10607] hsr_slave_0: entered promiscuous mode [ 893.140386][T10607] hsr_slave_1: entered promiscuous mode [ 893.140858][T10607] debugfs: 'hsr0' already exists in 'hsr' [ 893.140872][T10607] Cannot create hsr debugfs directory [ 893.969926][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.671002][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.384799][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.636771][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.711151][T10842] block nbd2: shutting down sockets [ 896.983901][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.084145][T10853] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 897.935450][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.054767][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.499149][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.585152][T10853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 898.755257][ T13] bridge_slave_1: left allmulticast mode [ 898.755283][ T13] bridge_slave_1: left promiscuous mode [ 898.755541][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.079497][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.145096][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.580311][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.622294][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.103584][ T13] bridge_slave_0: left allmulticast mode [ 900.103611][ T13] bridge_slave_0: left promiscuous mode [ 900.103861][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.448771][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.6.969'. [ 906.774069][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.015163][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.515069][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.644179][T10889] syz.2.970 (10889) used greatest stack depth: 15736 bytes left [ 917.071315][ T8898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 917.089086][ T8898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 917.090543][ T8898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 917.105421][ T8898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 917.106176][ T8898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 919.162599][ T8898] Bluetooth: hci3: command tx timeout [ 919.768536][T10944] ptrace attach of "./syz-executor exec"[6531] was attempted by "./syz-executor exec"[10944] [ 921.245549][ T8898] Bluetooth: hci3: command tx timeout [ 921.285747][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.007804][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.389593][ T8898] Bluetooth: hci3: command tx timeout [ 924.077519][ T13] bond0 (unregistering): Released all slaves [ 925.512116][ T8898] Bluetooth: hci3: command tx timeout [ 927.795221][T10984] Process accounting resumed [ 928.319779][ T13] hsr_slave_0: left promiscuous mode [ 929.597129][ T13] hsr_slave_1: left promiscuous mode [ 929.598168][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.965349][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.308587][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 934.759669][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.379808][T11043] Process accounting resumed [ 935.463124][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.829634][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.829677][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.340519][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.313795][ T5912] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 942.733142][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 943.099245][ T5912] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 943.099273][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.099292][ T5912] usb 1-1: Product: syz [ 943.099305][ T5912] usb 1-1: Manufacturer: syz [ 943.099318][ T5912] usb 1-1: SerialNumber: syz [ 943.173735][ T5912] usb 1-1: config 0 descriptor?? [ 943.179973][ T5912] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 944.504397][ T5912] usb 1-1: Found UVC 0.00 device syz (0d49:7000) [ 944.504435][ T5912] usb 1-1: No valid video chain found. [ 944.582156][ T5912] usb 1-1: USB disconnect, device number 5 [ 946.985431][T11088] random: crng reseeded on system resumption [ 949.319129][T11095] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 949.360821][ T13] team0 (unregistering): Port device team_slave_1 removed [ 949.916602][T11102] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1019'. [ 950.683700][ T8898] Bluetooth: hci0: command 0x0406 tx timeout [ 952.061197][ T13] team0 (unregistering): Port device team_slave_0 removed [ 959.036642][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 963.728914][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.144320][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.703128][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.777449][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.930360][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.869945][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.942685][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.617069][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.703153][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.158166][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.477804][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.164552][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.580574][ C1] vkms_vblank_simulate: vblank timer overrun [ 969.507918][ C1] vkms_vblank_simulate: vblank timer overrun [ 972.761174][T11198] overlayfs: failed to resolve './file1': -2 [ 977.143184][T11249] overlayfs: missing 'lowerdir' [ 978.398493][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 978.471381][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 978.483045][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 978.507159][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 978.511677][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 979.132488][ T13] bridge_slave_1: left allmulticast mode [ 979.132515][ T13] bridge_slave_1: left promiscuous mode [ 979.132766][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.098973][T11259] qrtr: Invalid version 2 [ 980.101756][ T13] bridge_slave_0: left allmulticast mode [ 980.101780][ T13] bridge_slave_0: left promiscuous mode [ 980.140991][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.112756][T11277] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 981.252998][ T5831] Bluetooth: hci5: command tx timeout [ 984.273206][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 984.273250][ T5831] Bluetooth: hci5: command tx timeout [ 986.883079][ T8898] Bluetooth: hci5: command tx timeout [ 987.926162][ T37] audit: type=1326 audit(1759296862.940:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926214][ T37] audit: type=1326 audit(1759296862.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926256][ T37] audit: type=1326 audit(1759296862.940:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926296][ T37] audit: type=1326 audit(1759296862.940:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926336][ T37] audit: type=1326 audit(1759296862.940:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926375][ T37] audit: type=1326 audit(1759296862.940:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926416][ T37] audit: type=1326 audit(1759296862.940:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926463][ T37] audit: type=1326 audit(1759296862.940:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926502][ T37] audit: type=1326 audit(1759296862.940:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 987.926541][ T37] audit: type=1326 audit(1759296862.950:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb866efeec9 code=0x7ffc0000 [ 988.868196][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.022782][T11330] binder: BINDER_SET_CONTEXT_MGR already set [ 989.022846][T11330] binder: 11326:11330 ioctl 4018620d 2000000002c0 returned -16 [ 989.032072][T11330] binder: 11326:11330 ioctl c0306201 200000000000 returned -14 [ 989.157668][ T5831] Bluetooth: hci5: command tx timeout [ 995.749505][ T5831] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 996.402771][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.666358][ T13] bond0 (unregistering): Released all slaves [ 996.694732][T11359] random: crng reseeded on system resumption [ 998.370142][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.370211][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.713098][ T13] hsr_slave_0: left promiscuous mode [ 1000.835318][ T13] hsr_slave_1: left promiscuous mode [ 1000.980129][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.229985][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.131687][T11410] netlink: 'syz.2.1078': attribute type 2 has an invalid length. [ 1003.131709][T11410] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 1003.150188][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 1003.719505][T11392] block nbd5: shutting down sockets [ 1008.545958][T11439] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1012.236715][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1013.738652][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1017.956888][T11492] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1019.132359][T11504] hub 1-0:1.0: USB hub found [ 1019.138339][T11504] hub 1-0:1.0: 1 port detected [ 1025.213998][T11529] ubi31: detaching mtd0 [ 1026.195989][T11529] ubi31: mtd0 is detached [ 1026.305330][T11258] chnl_net:caif_netlink_parms(): no params data found [ 1030.734958][T11557] Process accounting resumed [ 1030.828650][T11559] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1031.904450][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.904581][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.904794][T11258] bridge_slave_0: entered allmulticast mode [ 1031.921818][T11258] bridge_slave_0: entered promiscuous mode [ 1033.043946][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.044087][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.044325][T11258] bridge_slave_1: entered allmulticast mode [ 1033.046963][T11258] bridge_slave_1: entered promiscuous mode [ 1033.907032][T11582] overlayfs: failed to resolve './file0': -2 [ 1034.648502][ T8898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1034.711615][ T8898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1034.722526][ T8898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1034.731161][ T8898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1034.731921][ T8898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1036.908041][T11603] binder: 11592:11603 ioctl c018620c 200000000000 returned -22 [ 1036.949103][ T5831] Bluetooth: hci1: command tx timeout [ 1038.144795][T11615] 9pnet_virtio: no channels available for device syz [ 1038.774084][T11617] trusted_key: syz.0.1120 sent an empty control message without MSG_MORE. [ 1039.002301][ T5831] Bluetooth: hci1: command tx timeout [ 1039.196853][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 1040.198117][ T8898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1040.227470][ T8898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1040.231206][ T8898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1040.264937][ T8898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1040.270650][ T8898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1041.632964][ T8898] Bluetooth: hci1: command tx timeout [ 1042.835227][ T8898] Bluetooth: hci3: command tx timeout [ 1042.995966][T11654] ubi31: attaching mtd0 [ 1043.066053][T11654] ubi31: scanning is finished [ 1043.645654][ T8898] Bluetooth: hci1: command tx timeout [ 1044.517681][T11660] program syz.6.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.669857][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.721859][T11579] chnl_net:caif_netlink_parms(): no params data found [ 1044.742432][T11660] program syz.6.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.742929][T11660] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1045.329976][ T8898] Bluetooth: hci3: command tx timeout [ 1045.387724][T11654] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1046.963426][T11674] tmpfs: Bad value for 'mpol' [ 1047.794530][ T8898] Bluetooth: hci3: command tx timeout [ 1050.024465][ T8898] Bluetooth: hci3: command tx timeout [ 1051.648946][T11692] ceph: No mds server is up or the cluster is laggy [ 1051.654771][T11696] vxfs: WRONG superblock magic 00000000 at 1 [ 1051.655169][T11696] vxfs: WRONG superblock magic 00000000 at 8 [ 1051.655185][T11696] vxfs: can't find superblock. [ 1058.260146][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 1058.971743][T11732] ALSA: mixer_oss: invalid OSS volume '' [ 1059.062767][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.501809][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 1059.777537][T11757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1059.781093][T11757] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1060.232820][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.232891][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.826414][T11769] Malformed UNC in devname [ 1064.826414][T11769] [ 1064.826736][T11769] CIFS: VFS: Malformed UNC in devname [ 1069.036230][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1148'. [ 1069.063464][T11779] Process accounting resumed [ 1069.360071][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.502445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.765643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.819633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.886177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.126158][T11822] netlink: 780 bytes leftover after parsing attributes in process `syz.0.1153'. [ 1075.650616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.961731][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.340454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.933213][T11834] loop6: detected capacity change from 0 to 7 [ 1077.496183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.671856][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.672053][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.700569][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.700603][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.723066][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.723101][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.727057][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.727089][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.727276][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.727301][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.727475][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.727496][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.727627][T11834] ldm_validate_partition_table(): Disk read failed. [ 1077.808269][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.808292][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.821931][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.821963][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.827477][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.827507][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.833252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1077.833283][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1077.833725][T11834] Dev loop6: unable to read RDB block 0 [ 1077.836004][T11834] loop6: unable to read partition table [ 1077.836239][T11834] loop6: partition table beyond EOD, truncated [ 1077.836291][T11834] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 1078.160936][T11579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.161072][T11579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.161293][T11579] bridge_slave_0: entered allmulticast mode [ 1078.164634][T11579] bridge_slave_0: entered promiscuous mode [ 1078.446647][T11579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.446831][T11579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.447019][T11579] bridge_slave_1: entered allmulticast mode [ 1078.450209][T11579] bridge_slave_1: entered promiscuous mode [ 1078.841346][T11847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.962210][T11844] Process accounting resumed [ 1079.713122][T11846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1079.924828][T11579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.955427][T11579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.207501][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1162'. [ 1087.032285][T11579] team0: Port device team_slave_0 added [ 1087.142310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.156010][T11579] team0: Port device team_slave_1 added [ 1087.157540][T11885] futex_wake_op: syz.6.1165 tries to shift op by -1; fix this program [ 1088.987677][T11910] futex_wake_op: syz.5.1168 tries to shift op by -1; fix this program [ 1090.264455][ T13] bridge_slave_1: left allmulticast mode [ 1090.264484][ T13] bridge_slave_1: left promiscuous mode [ 1090.264792][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.346822][T11914] Process accounting resumed [ 1090.690415][ T13] bridge_slave_0: left allmulticast mode [ 1090.690441][ T13] bridge_slave_0: left promiscuous mode [ 1090.713791][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.730039][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.750805][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.772456][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1093.778173][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1093.780901][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1094.238235][T11942] Malformed UNC in devname [ 1094.238235][T11942] [ 1094.238307][T11942] CIFS: VFS: Malformed UNC in devname [ 1095.532286][T11947] Malformed UNC in devname [ 1095.532286][T11947] [ 1095.532330][T11947] CIFS: VFS: Malformed UNC in devname [ 1096.280920][ T5831] Bluetooth: hci5: command tx timeout [ 1098.372137][ T5831] Bluetooth: hci5: command tx timeout [ 1103.054243][ T5831] Bluetooth: hci5: command tx timeout [ 1105.083933][ T5831] Bluetooth: hci5: command tx timeout [ 1105.089466][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1105.722641][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1105.746473][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1105.747609][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1105.748357][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1107.882190][ T5831] Bluetooth: hci1: command tx timeout [ 1109.504781][T11999] Malformed UNC in devname [ 1109.504781][T11999] [ 1109.504852][T11999] CIFS: VFS: Malformed UNC in devname [ 1109.973319][ T5831] Bluetooth: hci1: command tx timeout [ 1112.485633][ T5831] Bluetooth: hci1: command tx timeout [ 1114.539552][T12017] binder: 12015:12017 ioctl 40046205 0 returned -22 [ 1114.540061][ T5831] Bluetooth: hci1: command tx timeout [ 1114.572663][T12013] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1188'. [ 1114.796003][T12014] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1115.913181][ T6031] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1116.042708][ T6031] usb 1-1: device descriptor read/64, error -71 [ 1116.862417][ T6031] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1116.992218][ T6031] usb 1-1: device descriptor read/64, error -71 [ 1117.112302][ T6031] usb usb1-port1: attempt power cycle [ 1117.722285][ T8898] Bluetooth: hci1: command 0x0405 tx timeout [ 1117.817926][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.642997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.058052][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.209063][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.241733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.740262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.197619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.315556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.623732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.760545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.918682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.053610][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.949995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.978714][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.978782][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.121601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.143206][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.398151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.410404][ T13] bond0 (unregistering): Released all slaves [ 1123.250553][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1197'. [ 1126.834446][T12078] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1126.834446][T12078] The task syz.0.1201 (12078) triggered the difference, watch for misbehavior. [ 1129.561363][T12093] overlayfs: failed to resolve './file0': -2 [ 1132.733671][T12101] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1133.537363][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.706343][T12131] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1212'. [ 1139.222219][ T13] hsr_slave_0: left promiscuous mode [ 1139.300102][ T13] hsr_slave_1: left promiscuous mode [ 1139.301012][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.301036][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.872871][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.872892][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.122169][ T13] veth1_macvtap: left promiscuous mode [ 1141.122279][ T13] veth0_macvtap: left promiscuous mode [ 1141.122902][ T13] veth1_vlan: left promiscuous mode [ 1141.123083][ T13] veth0_vlan: left promiscuous mode [ 1141.425092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.642169][T12163] random: crng reseeded on system resumption [ 1141.808401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.839011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.914266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.332220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.475088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.670588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1143.212489][T12174] Malformed UNC in devname [ 1143.212489][T12174] [ 1143.212631][T12174] CIFS: VFS: Malformed UNC in devname [ 1145.402564][T12187] Malformed UNC in devname [ 1145.402564][T12187] [ 1145.402584][T12187] CIFS: VFS: Malformed UNC in devname [ 1150.358455][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1150.376266][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1150.393229][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1150.394119][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1150.395477][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1150.546966][T12223] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1150.774343][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 1150.774360][ T37] audit: type=1326 audit(1759297255.131:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 1150.774401][ T37] audit: type=1326 audit(1759297255.131:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 1150.774438][ T37] audit: type=1326 audit(1759297255.131:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 1150.774475][ T37] audit: type=1326 audit(1759297255.131:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f772407eec9 code=0x7ffc0000 [ 1152.517228][ T8898] Bluetooth: hci3: command tx timeout [ 1153.973350][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1154.229664][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1154.535698][ T8898] Bluetooth: hci3: command tx timeout [ 1156.648898][ T5831] Bluetooth: hci3: command tx timeout [ 1157.945807][T12252] libceph: resolve '. [ 1157.945807][T12252] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1157.945807][T12252] ' (ret=-3): failed [ 1158.687910][ T8898] Bluetooth: hci3: command tx timeout [ 1159.216271][T12265] Malformed UNC in devname [ 1159.216271][T12265] [ 1159.216554][T12265] CIFS: VFS: Malformed UNC in devname [ 1162.573538][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1162.607828][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1162.610048][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1162.611210][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1162.614013][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1162.698373][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1162.715645][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1162.743848][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1162.754779][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1162.772389][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1163.113051][T12289] Malformed UNC in devname [ 1163.113051][T12289] [ 1163.113098][T12289] CIFS: VFS: Malformed UNC in devname [ 1166.102099][ T5831] Bluetooth: hci6: command tx timeout [ 1166.104835][ T5831] Bluetooth: hci7: command tx timeout [ 1166.415473][T12175] lo speed is unknown, defaulting to 1000 [ 1166.417572][T12175] lo speed is unknown, defaulting to 1000 [ 1166.420507][T12175] lo speed is unknown, defaulting to 1000 [ 1166.428618][T12175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1166.445272][T12175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1166.515168][T12175] lo speed is unknown, defaulting to 1000 [ 1166.518769][T12175] lo speed is unknown, defaulting to 1000 [ 1166.521736][T12175] lo speed is unknown, defaulting to 1000 [ 1166.524652][T12175] lo speed is unknown, defaulting to 1000 [ 1166.527439][T12175] lo speed is unknown, defaulting to 1000 [ 1166.530317][T12175] lo speed is unknown, defaulting to 1000 [ 1166.533212][T12175] lo speed is unknown, defaulting to 1000 [ 1166.536032][T12175] lo speed is unknown, defaulting to 1000 [ 1168.122303][ T8898] Bluetooth: hci7: command tx timeout [ 1168.122337][ T8898] Bluetooth: hci6: command tx timeout [ 1168.123505][T12175] syz_tun (unregistering): left allmulticast mode [ 1168.396396][T12280] lo speed is unknown, defaulting to 1000 [ 1170.507330][ T5831] Bluetooth: hci6: command tx timeout [ 1170.507368][ T5831] Bluetooth: hci7: command tx timeout [ 1171.368933][T12278] lo speed is unknown, defaulting to 1000 [ 1171.426749][T12217] lo speed is unknown, defaulting to 1000 [ 1172.782589][ T8898] Bluetooth: hci6: command tx timeout [ 1172.911276][ T8898] Bluetooth: hci7: command tx timeout [ 1174.724675][T12345] Malformed UNC in devname [ 1174.724675][T12345] [ 1174.724814][T12345] CIFS: VFS: Malformed UNC in devname [ 1182.499666][ T13] IPVS: stop unused estimator thread 0... [ 1182.526792][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.526861][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.022948][T12278] chnl_net:caif_netlink_parms(): no params data found [ 1186.259931][T12280] chnl_net:caif_netlink_parms(): no params data found [ 1187.729337][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.135951][T12217] chnl_net:caif_netlink_parms(): no params data found [ 1189.971686][T11609] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1190.349514][T11609] usb 6-1: Using ep0 maxpacket: 32 [ 1190.351848][T11609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1190.367892][T11609] usb 6-1: config 56 has an invalid interface number: 177 but max is 0 [ 1190.367918][T11609] usb 6-1: config 56 has no interface number 0 [ 1190.367980][T11609] usb 6-1: config 56 interface 177 has no altsetting 0 [ 1190.370459][T11609] usb 6-1: New USB device found, idVendor=1782, idProduct=4d10, bcdDevice=6d.76 [ 1190.370485][T11609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.370512][T11609] usb 6-1: Product: syz [ 1190.370526][T11609] usb 6-1: Manufacturer: syz [ 1190.370539][T11609] usb 6-1: SerialNumber: syz [ 1190.460442][T12406] Malformed UNC in devname [ 1190.460442][T12406] [ 1190.460493][T12406] CIFS: VFS: Malformed UNC in devname [ 1191.045043][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.152225][T11609] usb 6-1: can't set config #56, error -71 [ 1191.158341][T11609] usb 6-1: USB disconnect, device number 3 [ 1191.464205][T12412] kAFS: No cell specified [ 1193.252131][T12415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1195.410226][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.815995][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.843130][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.843300][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.843465][T12278] bridge_slave_0: entered allmulticast mode [ 1195.845114][T12278] bridge_slave_0: entered promiscuous mode [ 1195.957876][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.958008][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.958215][T12278] bridge_slave_1: entered allmulticast mode [ 1195.975607][T12278] bridge_slave_1: entered promiscuous mode [ 1196.317763][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.318472][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.318744][T12280] bridge_slave_0: entered allmulticast mode [ 1196.321511][T12280] bridge_slave_0: entered promiscuous mode [ 1196.534844][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.534972][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.535262][T12217] bridge_slave_0: entered allmulticast mode [ 1196.538059][T12217] bridge_slave_0: entered promiscuous mode [ 1196.540542][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.540660][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.540841][T12280] bridge_slave_1: entered allmulticast mode [ 1196.551890][T12280] bridge_slave_1: entered promiscuous mode [ 1196.561433][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.594831][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.594988][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.595219][T12217] bridge_slave_1: entered allmulticast mode [ 1196.602666][T12217] bridge_slave_1: entered promiscuous mode [ 1198.178484][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.203196][T12470] Bluetooth: MGMT ver 1.23 [ 1201.569714][T11609] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1201.762638][T11609] usb 6-1: Using ep0 maxpacket: 32 [ 1201.789550][T11609] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 1201.789627][T11609] usb 6-1: config 0 has no interface number 0 [ 1201.789985][T11609] usb 6-1: config 0 interface 169 has no altsetting 0 [ 1201.839870][T11609] usb 6-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1201.839950][T11609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.839995][T11609] usb 6-1: Product: syz [ 1201.840033][T11609] usb 6-1: Manufacturer: syz [ 1201.840071][T11609] usb 6-1: SerialNumber: syz [ 1202.154199][T11609] usb 6-1: config 0 descriptor?? [ 1202.184793][T11609] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1203.741601][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.841570][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.845905][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.848823][T12278] team0: Port device team_slave_0 added [ 1204.022498][ T6031] usb 6-1: USB disconnect, device number 4 [ 1205.077082][T12278] team0: Port device team_slave_1 added [ 1205.132563][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.700677][T12497] ubi31: attaching mtd0 [ 1205.734114][T12497] ubi31: scanning is finished [ 1205.897984][T12497] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1205.898678][T12497] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1205.898705][T12497] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1205.898731][T12497] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1205.898740][T12497] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1205.898749][T12497] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1205.898757][T12497] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 320884403 [ 1205.898768][T12497] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1205.907519][T12498] ubi31: background thread "ubi_bgt31d" started, PID 12498 [ 1206.049225][T12280] team0: Port device team_slave_0 added [ 1206.159230][T12280] team0: Port device team_slave_1 added [ 1206.662931][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.663388][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.663496][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.666331][T12217] team0: Port device team_slave_0 added [ 1209.547430][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.547449][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.547474][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.825090][T12217] team0: Port device team_slave_1 added [ 1209.835854][ T13] bridge_slave_1: left allmulticast mode [ 1209.835880][ T13] bridge_slave_1: left promiscuous mode [ 1209.836123][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.920094][ T13] bridge_slave_0: left allmulticast mode [ 1209.920122][ T13] bridge_slave_0: left promiscuous mode [ 1209.920386][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.066551][ T13] bridge_slave_1: left allmulticast mode [ 1210.066578][ T13] bridge_slave_1: left promiscuous mode [ 1210.066826][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.144128][ T13] bridge_slave_0: left allmulticast mode [ 1210.144156][ T13] bridge_slave_0: left promiscuous mode [ 1210.144401][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.557122][ T13] bridge_slave_1: left allmulticast mode [ 1210.557407][ T13] bridge_slave_1: left promiscuous mode [ 1210.634248][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.453577][ T13] bridge_slave_0: left allmulticast mode [ 1211.453605][ T13] bridge_slave_0: left promiscuous mode [ 1211.453858][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.070417][T12525] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1212.908148][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1212.911876][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1212.921367][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1212.933033][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1212.939926][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1215.072258][ T8898] Bluetooth: hci1: command tx timeout [ 1215.243103][T12537] capability: warning: `syz.0.1284' uses deprecated v2 capabilities in a way that may be insecure [ 1217.625448][ T8898] Bluetooth: hci1: command tx timeout [ 1219.669727][ T8898] Bluetooth: hci1: command tx timeout [ 1221.722181][ T8898] Bluetooth: hci1: command tx timeout [ 1221.864773][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1221.871238][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1221.874323][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1221.877185][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1221.878530][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.053726][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.077876][T12571] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.077891][T12571] binder: 12568:12571 ioctl 4018620d 200000000040 returned -16 [ 1222.183741][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.186657][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.189110][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.190883][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1222.191618][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1222.212859][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1222.301205][ T13] bond0 (unregistering): Released all slaves [ 1222.531275][ T13] bond0 (unregistering): Released all slaves [ 1223.492861][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.034964][ T5831] Bluetooth: hci2: command tx timeout [ 1226.036324][ T5831] Bluetooth: hci3: command tx timeout [ 1226.073212][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.154729][ T13] bond0 (unregistering): Released all slaves [ 1226.523089][T12597] Malformed UNC in devname [ 1226.523089][T12597] [ 1226.523158][T12597] CIFS: VFS: Malformed UNC in devname [ 1227.100974][T11609] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1227.209397][ T13] bond0 (unregistering): Released all slaves [ 1227.361694][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.361710][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.361734][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.502043][ T5831] Bluetooth: hci3: command tx timeout [ 1228.502076][ T5831] Bluetooth: hci2: command tx timeout [ 1230.542491][T12611] Malformed UNC in devname [ 1230.542491][T12611] [ 1230.542536][T12611] CIFS: VFS: Malformed UNC in devname [ 1231.159647][ T8898] Bluetooth: hci2: command tx timeout [ 1231.159680][ T8898] Bluetooth: hci3: command tx timeout [ 1231.832862][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1300'. [ 1231.867546][T12526] lo speed is unknown, defaulting to 1000 [ 1232.105561][T12572] lo speed is unknown, defaulting to 1000 [ 1233.048198][T12578] lo speed is unknown, defaulting to 1000 [ 1233.162235][ T5831] Bluetooth: hci3: command tx timeout [ 1233.162267][ T5831] Bluetooth: hci2: command tx timeout [ 1234.554918][T12630] random: crng reseeded on system resumption [ 1236.057014][T12648] Malformed UNC in devname [ 1236.057014][T12648] [ 1236.057085][T12648] CIFS: VFS: Malformed UNC in devname [ 1236.695348][ T8898] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1238.504547][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1238.579445][T12665] netlink: 'syz.5.1307': attribute type 2 has an invalid length. [ 1238.661695][T12666] sctp: [Deprecated]: syz.5.1307 (pid 12666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1238.661695][T12666] Use struct sctp_sack_info instead [ 1238.703370][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1239.092211][ T5912] usb 1-1: config 0 has an invalid interface number: 169 but max is 0 [ 1239.092240][ T5912] usb 1-1: config 0 has no interface number 0 [ 1239.092291][ T5912] usb 1-1: config 0 interface 169 has no altsetting 0 [ 1239.099860][ T5912] usb 1-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1239.099889][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.099909][ T5912] usb 1-1: Product: syz [ 1239.099922][ T5912] usb 1-1: Manufacturer: syz [ 1239.099936][ T5912] usb 1-1: SerialNumber: syz [ 1239.128707][ T5912] usb 1-1: config 0 descriptor?? [ 1239.247293][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.846400][T12672] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1240.578757][T12672] orangefs_mount: mount request failed with -4 [ 1240.584739][T11706] usb 1-1: USB disconnect, device number 10 [ 1241.182628][ T8898] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 1244.049988][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.050058][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.916830][ T13] hsr_slave_0: left promiscuous mode [ 1247.952295][ T13] hsr_slave_1: left promiscuous mode [ 1247.953242][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.953267][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.805348][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.805375][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.093879][ T13] veth1_macvtap: left promiscuous mode [ 1249.093987][ T13] veth0_macvtap: left promiscuous mode [ 1249.094241][ T13] veth1_vlan: left promiscuous mode [ 1249.094415][ T13] veth0_vlan: left promiscuous mode [ 1253.323217][ T8898] block nbd0: Receive control failed (result -32) [ 1253.810760][T12757] ------------[ cut here ]------------ [ 1253.810783][T12757] WARNING: CPU: 1 PID: 12757 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1253.810829][T12757] Modules linked in: [ 1253.810864][T12757] CPU: 1 UID: 0 PID: 12757 Comm: syz.5.1322 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1253.810887][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1253.810904][T12757] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1253.810931][T12757] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1253.810950][T12757] RSP: 0018:ffffc90003f4f8e0 EFLAGS: 00010283 [ 1253.810967][T12757] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1253.810982][T12757] RDX: ffffc9000f749000 RSI: 0000000000000119 RDI: 000000000000011a [ 1253.810995][T12757] RBP: ffffc90003f4fa70 R08: 0000000000000000 R09: 0000000000000000 [ 1253.811009][T12757] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 1253.811024][T12757] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803cd86791 [ 1253.811038][T12757] FS: 00007f772229c6c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 1253.811055][T12757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1253.811069][T12757] CR2: 0000001b34f09ff8 CR3: 0000000034a92000 CR4: 00000000003526f0 [ 1253.811087][T12757] Call Trace: [ 1253.811099][T12757] [ 1253.811115][T12757] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1253.811152][T12757] ? __pfx_cgroup_freeze+0x10/0x10 [ 1253.811183][T12757] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1253.811212][T12757] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1253.811240][T12757] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1253.811275][T12757] ? mutex_lock_nested+0x154/0x1d0 [ 1253.811299][T12757] ? cgroup_kn_lock_live+0x13c/0x230 [ 1253.811338][T12757] cgroup_freeze_write+0x156/0x1c0 [ 1253.811362][T12757] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1253.811379][T12757] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1253.811399][T12757] ? cgroup_file_write+0x383/0x740 [ 1253.811428][T12757] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1253.811450][T12757] cgroup_file_write+0x39b/0x740 [ 1253.811485][T12757] ? __pfx_cgroup_file_write+0x10/0x10 [ 1253.811528][T12757] ? __pfx_cgroup_file_write+0x10/0x10 [ 1253.811553][T12757] kernfs_fop_write_iter+0x3b0/0x540 [ 1253.811588][T12757] vfs_write+0x5d5/0xb40 [ 1253.811618][T12757] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1253.811645][T12757] ? __pfx_vfs_write+0x10/0x10 [ 1253.811665][T12757] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1253.811701][T12757] ? mutex_lock_nested+0x154/0x1d0 [ 1253.811724][T12757] ? fdget_pos+0x253/0x320 [ 1253.811761][T12757] ksys_write+0x14b/0x260 [ 1253.811788][T12757] ? __pfx_ksys_write+0x10/0x10 [ 1253.811808][T12757] ? rcu_is_watching+0x15/0xb0 [ 1253.811837][T12757] ? do_syscall_64+0xbe/0x3b0 [ 1253.811861][T12757] do_syscall_64+0xfa/0x3b0 [ 1253.811882][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.811901][T12757] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1253.811920][T12757] ? clear_bhb_loop+0x60/0xb0 [ 1253.811944][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.812012][T12757] RIP: 0033:0x7f772407eec9 [ 1253.812038][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.812055][T12757] RSP: 002b:00007f772229c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.812076][T12757] RAX: ffffffffffffffda RBX: 00007f77242d6180 RCX: 00007f772407eec9 [ 1253.812091][T12757] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1253.812104][T12757] RBP: 00007f7724101f91 R08: 0000000000000000 R09: 0000000000000000 [ 1253.812117][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.812129][T12757] R13: 00007f77242d6218 R14: 00007f77242d6180 R15: 00007fff51234368 [ 1253.812164][T12757] [ 1253.812184][T12757] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1253.812199][T12757] CPU: 1 UID: 0 PID: 12757 Comm: syz.5.1322 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1253.812222][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1253.812234][T12757] Call Trace: [ 1253.812242][T12757] [ 1253.812250][T12757] dump_stack_lvl+0x99/0x250 [ 1253.812271][T12757] ? __asan_memcpy+0x40/0x70 [ 1253.812291][T12757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.812310][T12757] ? __pfx__printk+0x10/0x10 [ 1253.812351][T12757] vpanic+0x281/0x750 [ 1253.812369][T12757] ? __pfx__printk+0x10/0x10 [ 1253.812392][T12757] ? __pfx_vpanic+0x10/0x10 [ 1253.812412][T12757] ? is_bpf_text_address+0x26/0x2b0 [ 1253.812445][T12757] panic+0xb9/0xc0 [ 1253.812464][T12757] ? __pfx_panic+0x10/0x10 [ 1253.812500][T12757] __warn+0x31b/0x4b0 [ 1253.812519][T12757] ? cgroup_freeze+0x80a/0xf90 [ 1253.812547][T12757] ? cgroup_freeze+0x80a/0xf90 [ 1253.812572][T12757] report_bug+0x2be/0x4f0 [ 1253.812600][T12757] ? cgroup_freeze+0x80a/0xf90 [ 1253.812625][T12757] ? cgroup_freeze+0x80a/0xf90 [ 1253.812650][T12757] ? cgroup_freeze+0x80c/0xf90 [ 1253.812675][T12757] handle_bug+0x84/0x160 [ 1253.812697][T12757] exc_invalid_op+0x1a/0x50 [ 1253.812719][T12757] asm_exc_invalid_op+0x1a/0x20 [ 1253.812737][T12757] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1253.812762][T12757] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1253.812779][T12757] RSP: 0018:ffffc90003f4f8e0 EFLAGS: 00010283 [ 1253.812796][T12757] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1253.812810][T12757] RDX: ffffc9000f749000 RSI: 0000000000000119 RDI: 000000000000011a [ 1253.812824][T12757] RBP: ffffc90003f4fa70 R08: 0000000000000000 R09: 0000000000000000 [ 1253.812837][T12757] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 1253.812852][T12757] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803cd86791 [ 1253.812875][T12757] ? cgroup_freeze+0x809/0xf90 [ 1253.812914][T12757] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1253.812948][T12757] ? __pfx_cgroup_freeze+0x10/0x10 [ 1253.812972][T12757] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1253.813001][T12757] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1253.813029][T12757] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1253.813064][T12757] ? mutex_lock_nested+0x154/0x1d0 [ 1253.813087][T12757] ? cgroup_kn_lock_live+0x13c/0x230 [ 1253.813126][T12757] cgroup_freeze_write+0x156/0x1c0 [ 1253.813149][T12757] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1253.813167][T12757] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1253.813193][T12757] ? cgroup_file_write+0x383/0x740 [ 1253.813224][T12757] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1253.813245][T12757] cgroup_file_write+0x39b/0x740 [ 1253.813280][T12757] ? __pfx_cgroup_file_write+0x10/0x10 [ 1253.813323][T12757] ? __pfx_cgroup_file_write+0x10/0x10 [ 1253.813348][T12757] kernfs_fop_write_iter+0x3b0/0x540 [ 1253.813383][T12757] vfs_write+0x5d5/0xb40 [ 1253.813412][T12757] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1253.813439][T12757] ? __pfx_vfs_write+0x10/0x10 [ 1253.813459][T12757] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1253.813494][T12757] ? mutex_lock_nested+0x154/0x1d0 [ 1253.813517][T12757] ? fdget_pos+0x253/0x320 [ 1253.813553][T12757] ksys_write+0x14b/0x260 [ 1253.813580][T12757] ? __pfx_ksys_write+0x10/0x10 [ 1253.813600][T12757] ? rcu_is_watching+0x15/0xb0 [ 1253.813628][T12757] ? do_syscall_64+0xbe/0x3b0 [ 1253.813652][T12757] do_syscall_64+0xfa/0x3b0 [ 1253.813673][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.813691][T12757] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1253.813711][T12757] ? clear_bhb_loop+0x60/0xb0 [ 1253.813735][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.813754][T12757] RIP: 0033:0x7f772407eec9 [ 1253.813771][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.813787][T12757] RSP: 002b:00007f772229c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.813807][T12757] RAX: ffffffffffffffda RBX: 00007f77242d6180 RCX: 00007f772407eec9 [ 1253.813822][T12757] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1253.813835][T12757] RBP: 00007f7724101f91 R08: 0000000000000000 R09: 0000000000000000 [ 1253.813847][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.813860][T12757] R13: 00007f77242d6218 R14: 00007f77242d6180 R15: 00007fff51234368 [ 1253.813894][T12757] [ 1253.814163][T12757] Kernel Offset: disabled