last executing test programs: 19m29.330372021s ago: executing program 32 (id=86): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x100, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) memfd_secret(0x0) ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) unshare(0x40020000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x2, "ee0f"}, &(0x7f00000000c0)=0x26) 19m29.031660291s ago: executing program 33 (id=85): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2) 15m48.784211214s ago: executing program 1 (id=612): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x6a, 0x1, {0xe4b, 0x11e41e76, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 15m41.815697741s ago: executing program 1 (id=628): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$netlink(0x10, 0x3, 0x0) 15m41.230991596s ago: executing program 4 (id=629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) recvmmsg(r2, &(0x7f0000000840), 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES16, @ANYRESHEX=r0, @ANYBLOB="0800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15m39.731691898s ago: executing program 4 (id=636): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xf5ad}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1f0000001300034700bb65e1c3e4ffff0600030001000000450000002500", 0x1e}], 0x1) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) 15m37.137090284s ago: executing program 6 (id=638): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x8000, 0x8}, {0x40000, 0xfffffffe}]}, 0x14, 0x1) socket$inet6(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x108c0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) read$FUSE(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) 15m32.821317386s ago: executing program 6 (id=640): timer_create(0x3, 0x0, &(0x7f0000000180)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 15m32.509583756s ago: executing program 4 (id=642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0xd, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x4, 0xf, "806200"}) r4 = syz_open_pts(r2, 0x20800) dup3(r4, r2, 0x0) syz_pidfd_open(0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/209, 0xd1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) socket$rds(0x15, 0x5, 0x0) 15m32.297898163s ago: executing program 6 (id=643): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$autofs(0xffffff9c, 0x0, 0x80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x33fe0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8feb010018000000ee947b9e5062d0cbccc2c551a85d000000000c0000000ce7e2f568c4bc52"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value=0xf6}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xffffffff, 0x0, 0x0, 0x1}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x804, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3100680, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xc}) 15m31.264242728s ago: executing program 4 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x0, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}}, 0x0) 15m28.219454589s ago: executing program 1 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 15m27.838386198s ago: executing program 4 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m27.668504053s ago: executing program 1 (id=651): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) 15m27.152977314s ago: executing program 1 (id=653): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000005b40), 0x0, 0x1}) 15m26.932464448s ago: executing program 4 (id=654): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000020c0)=""/4092, 0x88c) 15m26.908600869s ago: executing program 6 (id=655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0xd, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x4, 0xf, "806200"}) r4 = syz_open_pts(r2, 0x20800) dup3(r4, r2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/209, 0xd1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) socket$rds(0x15, 0x5, 0x0) 15m26.490203056s ago: executing program 1 (id=656): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$netlink(0x10, 0x3, 0x0) 15m25.341265092s ago: executing program 6 (id=658): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 15m25.185635845s ago: executing program 6 (id=659): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xf5ad}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1f0000001300034700bb65e1c3e4ffff0600030001000000450000002500", 0x1e}], 0x1) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) 15m11.464095842s ago: executing program 34 (id=654): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000020c0)=""/4092, 0x88c) 15m11.3085274s ago: executing program 35 (id=656): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socket$netlink(0x10, 0x3, 0x0) 15m9.527788785s ago: executing program 36 (id=659): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xf5ad}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1f0000001300034700bb65e1c3e4ffff0600030001000000450000002500", 0x1e}], 0x1) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) 13m1.486335554s ago: executing program 3 (id=847): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a4000ff", @ANYRES32, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 13m0.389586343s ago: executing program 3 (id=850): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 12m59.18949709s ago: executing program 3 (id=854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0xd, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x4, 0xf, "806200"}) r4 = syz_open_pts(r2, 0x20800) dup3(r4, r2, 0x0) syz_pidfd_open(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/209, 0xd1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) socket$rds(0x15, 0x5, 0x0) 12m55.608100078s ago: executing program 3 (id=855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 12m54.312459505s ago: executing program 3 (id=859): timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 12m54.058092071s ago: executing program 3 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000000c0)=0x8, 0x4) ioctl$FIBMAP(r3, 0x401870cb, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_compaction_try_to_compact_pages\x00', r5}, 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) close$binfmt(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @link_local}) write$tun(r2, &(0x7f0000001300)=ANY=[], 0x1080) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="096f32359f000000050000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r6}, 0x38) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {0x1, 0x1}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 12m38.574355887s ago: executing program 37 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000000c0)=0x8, 0x4) ioctl$FIBMAP(r3, 0x401870cb, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_compaction_try_to_compact_pages\x00', r5}, 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) close$binfmt(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @link_local}) write$tun(r2, &(0x7f0000001300)=ANY=[], 0x1080) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="096f32359f000000050000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r6}, 0x38) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {0x1, 0x1}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 9m54.47297353s ago: executing program 5 (id=1209): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x147d, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x1, 0x34f, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x799b, 0xcca2, 0x44, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r8, &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="03011100c064f759dfc48fc0dd9341f1b513d346ee74cf45afecdf6905e4693b05d6580e0d8cb23c23837210a299d0ac60f1ace2af5a359ab50bbe94f467fba7552a56d21cac8057874e0409f4431afaeb0765326d2c63461e34ad400d79811f811e363f42b63f"], 0xd, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004009959e40c16c39e100", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) 9m53.350607012s ago: executing program 5 (id=1212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020204d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x300, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) gettid() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40010140, 0x0) 9m49.950171085s ago: executing program 5 (id=1218): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000002980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001700)=""/59, 0x3b}], 0x6}, 0x3}], 0x1, 0x10002, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) 9m49.055997605s ago: executing program 5 (id=1219): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x84, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x44, '\x00', 0x4, 0x9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 9m48.932096673s ago: executing program 5 (id=1220): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)="c774e1", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000001f4761ad9339e3c77ccf018b6990478b000000dfae276499d2459c68ac32c91871618c0bedbddb663de945dfcdff2e51abe10460fa0ebc0057badb6e316506900864fc08197deb314c738ceee309af6ed5e161fe14a5dec3c03a00e48f75ee482c368be40d49a416004d91f4c666161fa5d0f55847b0708dfdf9772f7fdf230fcd82dbf4c8dc3898b73a2d3bdb07e1f7a26036fdd73b0611502d651565758e43c6047d68c4713540b276e94dacb6be93be1248027373f21e3f5be31e65ad9062ee6ea3098e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 9m44.936584243s ago: executing program 5 (id=1223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 9m29.544845606s ago: executing program 38 (id=1223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 5m29.90183562s ago: executing program 2 (id=1679): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mknod$loop(0x0, 0xc000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sigaltstack(&(0x7f0000000000)={0xfffffffffffffffc}, 0x0) sigaltstack(&(0x7f0000000f00)={0x0, 0x80000002}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xd}, 0xa) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) 5m28.824115439s ago: executing program 2 (id=1680): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) 5m28.508360426s ago: executing program 2 (id=1682): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x1b13, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x3d}, @timestamp, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x2}, @sack_perm], 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$tipc(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x400000008, {0x1, 0xfffffffffffffffd, 0x2200, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d79, 0x1, 0x4, 0x1000, 0x7f, r7, r8, 0xcb, 0xa4a}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="7cfedf", 0x3, 0x91, 0x0, 0x0) 5m27.356279927s ago: executing program 2 (id=1685): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x300, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) gettid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40010140, 0x0) 5m18.251507961s ago: executing program 2 (id=1703): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="124bcde21492698796a60200003400000004000000020000000000000031c35f33693c47108fd6a95f91a9614cc0b2ac576ba9d7ac2ad256c4ca3a57874ee90e6843f28d503298788371db070c316b1b4a312418d8566a90c131f32e61d0972c48ac1ae255", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0xa3) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffffff6, 0x3fe, 0xfffffffd, 0x7ff, 0x3, "04ae080000000000007800000500080100", 0x4, 0x200}) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) bpf$MAP_CREATE(0x2000000000000013, &(0x7f0000000140), 0x48) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000000100)={0x1f}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r7, 0x0, 0x6, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x309642, 0x0) ioctl$TCSBRKP(r11, 0x5425, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r13 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r12, r13, 0x0, 0x20000023896) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) close_range(r10, r6, 0x0) write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0'}, 0xb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20) 5m16.061688769s ago: executing program 2 (id=1707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2a28bd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) 4m55.941716719s ago: executing program 39 (id=1707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2a28bd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) 4m22.879998352s ago: executing program 0 (id=1781): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=""/242, 0xf2) 4m20.470276907s ago: executing program 8 (id=1784): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x0, 0x0, @ioapic={0x4, 0x2, 0x100, 0x6, 0x0, [{0x1, 0x4, 0x8e, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x1}, {0x9, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0xd, '\x00', 0x9}, {0x5, 0xe, 0x6}, {0x6, 0x9, 0xf}, {0x6, 0x8, 0x2, '\x00', 0x9}, {0x4, 0x10, 0xc, '\x00', 0x7f}, {0x1, 0x4, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xe0, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x2, '\x00', 0x47}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x16, 0x3, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f, '\x00', 0x2}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x6, '\x00', 0x7}, {0x6, 0x9, 0x7}, {0x40, 0x0, 0x7, '\x00', 0xe}]}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 4m19.460566567s ago: executing program 0 (id=1786): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 4m19.397715994s ago: executing program 8 (id=1789): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) 4m17.899985752s ago: executing program 8 (id=1790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) 4m17.523985329s ago: executing program 8 (id=1791): socket$inet(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0) 4m16.043938782s ago: executing program 8 (id=1794): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050228bd7000fbdbd61bdea2cedf25120000001800018014000200626f6e645f736c6176655f3100000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x1, 0x3}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x204894, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 4m15.798162191s ago: executing program 0 (id=1795): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)=""/73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000040)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m12.703761261s ago: executing program 8 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) timer_create(0x0, 0x0, 0x0) r5 = openat$mixer(0xffffff9c, &(0x7f00000007c0), 0x300, 0x0) fcntl$lock(r5, 0x6, &(0x7f00000004c0)={0x1, 0x3, 0xf, 0x3}) socket$kcm(0x2, 0x1000000000000005, 0x0) chdir(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)={0x38, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x117}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4m12.69516672s ago: executing program 0 (id=1798): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x0, 0x0, @ioapic={0x4, 0x2, 0x100, 0x6, 0x0, [{0x1, 0x4, 0x8e, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x1}, {0x9, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0xd, '\x00', 0x9}, {0x5, 0xe, 0x6}, {0x6, 0x9, 0xf}, {0x6, 0x8, 0x2, '\x00', 0x9}, {0x4, 0x10, 0xc, '\x00', 0x7f}, {0x1, 0x4, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xe0, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x2, '\x00', 0x47}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x16, 0x3, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f, '\x00', 0x2}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x6, '\x00', 0x7}, {0x6, 0x9, 0x7}, {0x40, 0x0, 0x7, '\x00', 0xe}]}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 4m11.45740269s ago: executing program 0 (id=1800): r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, 0x0) 4m9.887887584s ago: executing program 0 (id=1801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) 3m57.635581006s ago: executing program 40 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) timer_create(0x0, 0x0, 0x0) r5 = openat$mixer(0xffffff9c, &(0x7f00000007c0), 0x300, 0x0) fcntl$lock(r5, 0x6, &(0x7f00000004c0)={0x1, 0x3, 0xf, 0x3}) socket$kcm(0x2, 0x1000000000000005, 0x0) chdir(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)={0x38, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x117}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m54.5946332s ago: executing program 41 (id=1801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) 1m29.559883258s ago: executing program 9 (id=2001): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000001f4761ad9339e3c77ccf018b6990478b000000dfae276499d2459c68ac32c91871618c0bedbddb663de945dfcdff2e51abe10460fa0ebc0057badb6e316506900864fc08197deb314c738ceee309af6ed5e161fe14a5dec3c03a00e48f75ee482c368be40d49a416004d91f4c666161fa5d0f55847b0708dfdf9772f7fdf230fcd82dbf4c8dc3898b73a2d3bdb07e1f7a26036fdd73b0611502d651565758e43c6047d68c4713540b276e94dacb6be93be1248027373f21e3f5be31e65ad9062ee6ea3098e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, &(0x7f0000000040)=0xf, r1, &(0x7f00000000c0)=0x7, 0x3d, 0x6) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0xa4}}, 0x0) 1m28.03455309s ago: executing program 9 (id=2002): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) chroot(&(0x7f0000000480)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) close_range(r0, r2, 0x0) 1m27.599855712s ago: executing program 9 (id=2003): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = dup(r0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) read$FUSE(r3, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000040)={0x18, 0x0, r5, {0x6}}, 0x18) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m26.311780078s ago: executing program 9 (id=2005): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0) 1m26.03945039s ago: executing program 9 (id=2006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 1m24.200763938s ago: executing program 9 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 1m8.747763955s ago: executing program 42 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 4.688052981s ago: executing program 7 (id=2062): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 3.425613538s ago: executing program 7 (id=2063): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) setresgid(0xee00, 0xee01, 0x0) r4 = gettid() kcmp(0x0, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2.372117994s ago: executing program 7 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='projid_map\x00') 1.446379908s ago: executing program 7 (id=2065): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x20004800) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20) listen(r0, 0xfffffff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) 270.932366ms ago: executing program 7 (id=2066): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c0) 0s ago: executing program 7 (id=2067): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.928818][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.482231][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 862.652328][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 863.752623][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 863.882240][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 864.992062][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 865.102233][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 865.794406][T11875] ip6gretap0: entered promiscuous mode [ 866.152030][T11895] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1421'. [ 866.164568][T11715] team0: Port device team_slave_0 added [ 866.307048][T11715] team0: Port device team_slave_1 added [ 866.752660][T11715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.752680][T11715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.752710][T11715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.756733][T11715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.756748][T11715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.756775][T11715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.101185][T11906] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1423'. [ 867.860924][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.875205][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.876505][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.877989][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.878848][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 868.027940][T11715] hsr_slave_0: entered promiscuous mode [ 868.029359][T11715] hsr_slave_1: entered promiscuous mode [ 868.030335][T11715] debugfs: 'hsr0' already exists in 'hsr' [ 868.030361][T11715] Cannot create hsr debugfs directory [ 868.827438][T11435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 868.941719][T11435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 869.177019][T11435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.213759][T11913] vcan0: entered allmulticast mode [ 870.214108][T11914] vcan0: left allmulticast mode [ 870.320230][ T5797] Bluetooth: hci0: command tx timeout [ 870.392976][T11435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.511627][T10327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.511652][T10327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.884013][T11715] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 873.089449][ T5797] Bluetooth: hci0: command tx timeout [ 873.126902][T11943] binder: 11942:11943 ioctl c0306201 2000000003c0 returned -14 [ 873.238272][T11715] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 873.339994][T11947] wg2: entered promiscuous mode [ 873.340021][T11947] wg2: entered allmulticast mode [ 873.351599][T11715] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.527471][T11715] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 874.807777][T11954] vcan0: entered allmulticast mode [ 874.808134][T11955] vcan0: left allmulticast mode [ 874.828267][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 874.839898][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 874.845327][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 874.848205][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 874.850497][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 874.986349][T11908] chnl_net:caif_netlink_parms(): no params data found [ 875.111500][ T5807] Bluetooth: hci0: command tx timeout [ 875.179867][T11972] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.437192][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.225110][T11979] netem: change failed [ 876.442965][T11908] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.443073][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.443283][T11908] bridge_slave_0: entered allmulticast mode [ 876.445314][T11908] bridge_slave_0: entered promiscuous mode [ 876.560499][T11908] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.560639][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.560883][T11908] bridge_slave_1: entered allmulticast mode [ 876.609060][T11908] bridge_slave_1: entered promiscuous mode [ 877.111387][ T5807] Bluetooth: hci2: command tx timeout [ 877.191383][ T5807] Bluetooth: hci0: command tx timeout [ 877.251803][T11991] wg2: entered promiscuous mode [ 877.251832][T11991] wg2: entered allmulticast mode [ 877.280090][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.605084][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.065393][T11908] team0: Port device team_slave_0 added [ 878.149430][T11908] team0: Port device team_slave_1 added [ 878.536623][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.536641][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.536669][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.800660][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.800679][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.800707][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.191724][ T5807] Bluetooth: hci2: command tx timeout [ 879.294893][T11908] hsr_slave_0: entered promiscuous mode [ 879.310925][T11908] hsr_slave_1: entered promiscuous mode [ 879.321960][T11908] debugfs: 'hsr0' already exists in 'hsr' [ 879.321988][T11908] Cannot create hsr debugfs directory [ 879.649816][T11959] chnl_net:caif_netlink_parms(): no params data found [ 880.228586][T11715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.651434][ T5868] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 880.804203][ T5868] usb 8-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 880.804240][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.809624][ T5868] usb 8-1: config 0 descriptor?? [ 880.845344][ T5868] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 880.998595][ T5868] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 881.045239][ T5868] usb 8-1: USB disconnect, device number 16 [ 881.066703][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.066921][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.067172][T11959] bridge_slave_0: entered allmulticast mode [ 881.076155][T11959] bridge_slave_0: entered promiscuous mode [ 881.114584][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.114688][T11959] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.114835][T11959] bridge_slave_1: entered allmulticast mode [ 881.116721][T11959] bridge_slave_1: entered promiscuous mode [ 881.271514][ T5807] Bluetooth: hci2: command tx timeout [ 881.325825][T11715] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.528267][T11959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.592865][T11959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.606171][T12037] loop3: detected capacity change from 0 to 7 [ 881.617080][T12037] Dev loop3: unable to read RDB block 7 [ 881.617126][T12037] loop3: unable to read partition table [ 881.617364][T12037] loop3: partition table beyond EOD, truncated [ 881.617383][T12037] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 882.228421][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.228583][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.361555][ T5807] Bluetooth: hci2: command tx timeout [ 883.789176][T11959] team0: Port device team_slave_0 added [ 883.974326][T11959] team0: Port device team_slave_1 added [ 883.977107][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.977234][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.169017][T11959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.169035][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.169063][T11959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.185086][T11959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.185106][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.185139][T11959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.624558][T11959] hsr_slave_0: entered promiscuous mode [ 884.626040][T11959] hsr_slave_1: entered promiscuous mode [ 884.627088][T11959] debugfs: 'hsr0' already exists in 'hsr' [ 884.627114][T11959] Cannot create hsr debugfs directory [ 884.674977][T12062] loop3: detected capacity change from 0 to 7 [ 884.688974][T11893] Dev loop3: unable to read RDB block 7 [ 884.689020][T11893] loop3: unable to read partition table [ 884.689289][T11893] loop3: partition table beyond EOD, truncated [ 884.693145][T12062] Dev loop3: unable to read RDB block 7 [ 884.693199][T12062] loop3: unable to read partition table [ 884.693469][T12062] loop3: partition table beyond EOD, truncated [ 884.693491][T12062] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 885.584063][ T3565] bridge_slave_1: left allmulticast mode [ 885.584094][ T3565] bridge_slave_1: left promiscuous mode [ 885.584292][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.673785][ T3565] bridge_slave_0: left allmulticast mode [ 885.673817][ T3565] bridge_slave_0: left promiscuous mode [ 885.674090][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.738036][ T3565] bridge_slave_1: left allmulticast mode [ 885.738061][ T3565] bridge_slave_1: left promiscuous mode [ 885.747883][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.813617][ T3565] bridge_slave_0: left allmulticast mode [ 885.813642][ T3565] bridge_slave_0: left promiscuous mode [ 885.813831][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.472668][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.552451][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.654177][ T3565] bond0 (unregistering): Released all slaves [ 887.062128][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.111438][ T5797] Bluetooth: hci0: command 0x0c20 tx timeout [ 887.111853][ T9868] Bluetooth: hci4: command 0x1003 tx timeout [ 887.112024][ T5807] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 887.112498][T12070] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 887.213993][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.318849][ T3565] bond0 (unregistering): Released all slaves [ 888.285079][T12087] ieee802154 phy0 wpan0: encryption failed: -22 [ 889.137987][T12092] loop3: detected capacity change from 0 to 7 [ 889.144381][T12092] Dev loop3: unable to read RDB block 7 [ 889.144435][T12092] loop3: unable to read partition table [ 889.144679][T12092] loop3: partition table beyond EOD, truncated [ 889.144717][T12092] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 889.211590][ T3565] hsr_slave_0: left promiscuous mode [ 889.253063][ T3565] hsr_slave_1: left promiscuous mode [ 889.253834][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.302271][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.462191][ T3565] hsr_slave_0: left promiscuous mode [ 889.481500][ T3565] hsr_slave_1: left promiscuous mode [ 889.483455][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.522188][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.232291][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 890.385259][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 891.592354][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 891.752465][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 893.723473][T11715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.852486][T11832] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 894.021336][T11832] usb 8-1: Using ep0 maxpacket: 8 [ 894.023781][T11832] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 894.023842][T11832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 894.023865][T11832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 894.023889][T11832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 894.023912][T11832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.023954][T11832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 894.023977][T11832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.253068][T12105] netlink: 'syz.7.1479': attribute type 3 has an invalid length. [ 894.253299][T12105] netlink: 'syz.7.1479': attribute type 3 has an invalid length. [ 894.259315][T11832] usb 8-1: usb_control_msg returned -32 [ 894.259365][T11832] usbtmc 8-1:16.0: can't read capabilities [ 894.861004][T11715] veth0_vlan: entered promiscuous mode [ 894.915194][T11715] veth1_vlan: entered promiscuous mode [ 895.074041][T11715] veth0_macvtap: entered promiscuous mode [ 895.088621][T11715] veth1_macvtap: entered promiscuous mode [ 895.130145][T11715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.210450][T11715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.265929][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.266611][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.266654][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.266713][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.587234][T11908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.648940][T11908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.689064][T11908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 895.890878][T11908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 896.106450][ T7413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.106472][ T7413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.215769][T11959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.265061][T11959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.295307][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.295330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.299104][T11959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.354550][T11959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.550855][T11794] usb 8-1: USB disconnect, device number 17 [ 896.845632][T12142] loop3: detected capacity change from 0 to 7 [ 896.858914][T12142] Dev loop3: unable to read RDB block 7 [ 896.858970][T12142] loop3: unable to read partition table [ 896.859215][T12142] loop3: partition table beyond EOD, truncated [ 896.859236][T12142] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 898.251757][T12174] netlink: 'syz.8.1487': attribute type 12 has an invalid length. [ 898.450702][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.517116][T11959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.539147][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.565462][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.566407][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.605980][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.606229][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.628018][T11959] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.664369][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.664519][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.697260][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.697505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.623119][T12186] wireguard0: entered promiscuous mode [ 900.623259][T12186] wireguard0: entered allmulticast mode [ 901.165824][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 901.314567][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 901.323765][ T31] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 901.323836][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 901.323860][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 901.323886][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 901.323912][ T31] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.323982][ T31] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 901.324028][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.549480][T12194] netlink: 'syz.8.1491': attribute type 3 has an invalid length. [ 901.549805][T12194] netlink: 'syz.8.1491': attribute type 3 has an invalid length. [ 901.571469][ T31] usb 9-1: usb_control_msg returned -32 [ 901.571521][ T31] usbtmc 9-1:16.0: can't read capabilities [ 901.815065][T11959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.906708][T11959] veth0_vlan: entered promiscuous mode [ 901.933989][T11959] veth1_vlan: entered promiscuous mode [ 902.011780][T11959] veth0_macvtap: entered promiscuous mode [ 902.049851][T11959] veth1_macvtap: entered promiscuous mode [ 902.187131][T11959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.214990][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.235463][T11959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.289744][ T9452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.292154][ T9452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.294797][ T9452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.295210][ T9452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.578051][T10057] usb 9-1: USB disconnect, device number 2 [ 907.638842][T11908] veth0_vlan: entered promiscuous mode [ 907.664177][ T9460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.664266][ T9460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.877721][T11908] veth1_vlan: entered promiscuous mode [ 908.304781][ T7413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.304803][ T7413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.629939][T11908] veth0_macvtap: entered promiscuous mode [ 908.692068][T11908] veth1_macvtap: entered promiscuous mode [ 908.748764][T12260] fuse: Bad value for 'user_id' [ 908.748820][T12260] fuse: Bad value for 'user_id' [ 909.743918][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.802999][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.108008][ T9452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.111086][ T2918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.141316][ T2918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.031352][ T2918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.594567][T12298] loop3: detected capacity change from 0 to 7 [ 916.525396][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.525419][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.702732][ T9452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.702755][ T9452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.801823][T12411] vxfs: WRONG superblock magic 00000000 at 1 [ 924.805446][T12411] vxfs: WRONG superblock magic 00000000 at 8 [ 924.805493][T12411] vxfs: can't find superblock. [ 925.161052][T12410] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 930.961445][T11832] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 931.278466][T11832] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 931.278505][T11832] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 931.278533][T11832] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 931.278577][T11832] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 931.278601][T11832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.342824][T12491] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 931.383584][T11832] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 931.742559][ T5797] Bluetooth: hci2: command 0x0405 tx timeout [ 936.556985][ T5839] usb 9-1: USB disconnect, device number 3 [ 936.752751][ T38] audit: type=1326 audit(2000000237.270:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12537 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28befeec9 code=0x7ffc0000 [ 936.752814][ T38] audit: type=1326 audit(2000000237.270:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12537 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa28befeec9 code=0x7ffc0000 [ 936.752864][ T38] audit: type=1326 audit(2000000237.270:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12537 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28befeec9 code=0x7ffc0000 [ 936.884946][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.571340][ T9296] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 937.721347][ T9296] usb 8-1: Using ep0 maxpacket: 32 [ 937.723932][ T9296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.723983][ T9296] usb 8-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 937.724009][ T9296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.777921][ T9296] usb 8-1: config 0 descriptor?? [ 938.445814][T12564] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 938.476771][ T5839] usb 8-1: USB disconnect, device number 18 [ 944.553185][T12625] syz.8.1583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 945.381479][ T5883] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 945.531464][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 945.534154][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 945.561653][ T5883] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 945.561686][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.561707][ T5883] usb 9-1: Product: syz [ 945.561724][ T5883] usb 9-1: Manufacturer: syz [ 945.561739][ T5883] usb 9-1: SerialNumber: syz [ 945.614333][ T5883] usb 9-1: config 0 descriptor?? [ 945.620467][ T5883] hub 9-1:0.0: bad descriptor, ignoring hub [ 945.620509][ T5883] hub 9-1:0.0: probe with driver hub failed with error -5 [ 945.657596][ T5883] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input16 [ 946.466802][T12659] input: syz1 as /devices/virtual/input/input17 [ 946.780100][T12666] overlayfs: failed to resolve './file1': -2 [ 949.151473][ T9301] usb 9-1: USB disconnect, device number 4 [ 950.072805][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.403791][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.109271][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.421459][T12743] netlink: 'syz.8.1609': attribute type 10 has an invalid length. [ 959.518252][T12743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.551519][T12743] team0: Port device bond0 added [ 960.317448][ T9460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.317535][ T9460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.950562][ C1] vkms_vblank_simulate: vblank timer overrun [ 962.975503][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.115682][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.329164][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.927243][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.102089][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1618'. [ 964.102707][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1618'. [ 964.635727][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 964.927875][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.138409][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.677601][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.935912][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.446433][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.830113][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.544543][T12866] tun0: tun_chr_ioctl cmd 1074025675 [ 971.544566][T12866] tun0: persist enabled [ 971.545453][T12866] tun0: tun_chr_ioctl cmd 1074025675 [ 971.554874][T12866] tun0: persist enabled [ 972.953983][T12874] ceph: No mds server is up or the cluster is laggy [ 972.967313][T12875] vxfs: WRONG superblock magic 00000000 at 1 [ 972.969395][T12875] vxfs: WRONG superblock magic 00000000 at 8 [ 972.969453][T12875] vxfs: can't find superblock. [ 973.025012][T11832] libceph: connect (1)[c::]:6789 error -101 [ 973.054730][T11832] libceph: mon0 (1)[c::]:6789 connect error [ 973.324881][ T31] libceph: connect (1)[c::]:6789 error -101 [ 973.325092][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 973.744500][T12882] fuse: Bad value for 'rootmode' [ 976.114002][T12924] vxfs: WRONG superblock magic 00000000 at 1 [ 976.114315][T12924] vxfs: WRONG superblock magic 00000000 at 8 [ 976.114334][T12924] vxfs: can't find superblock. [ 976.645992][T12923] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 977.041619][T12919] trusted_key: encrypted_key: key user:syz not found [ 977.156047][T12933] fuse: Unknown parameter 'use00000000000000000000' [ 984.094508][T12996] vxfs: WRONG superblock magic 00000000 at 1 [ 984.097439][T12996] vxfs: WRONG superblock magic 00000000 at 8 [ 984.097481][T12996] vxfs: can't find superblock. [ 984.458626][T12995] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 984.665824][T13003] fuse: Unknown parameter 'use00000000000000000000' [ 985.404127][ T7413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.404150][ T7413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.831132][ T5807] Bluetooth: hci2: command 0x0405 tx timeout [ 988.105879][T13028] tun0: tun_chr_ioctl cmd 1074025675 [ 988.106022][T13028] tun0: persist enabled [ 988.108626][T13023] tun0: tun_chr_ioctl cmd 1074025675 [ 988.108646][T13023] tun0: persist enabled [ 989.920047][T13034] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 990.151336][T13021] Bluetooth: hci0: command 0x0c20 tx timeout [ 990.814244][T13061] vxfs: WRONG superblock magic 00000000 at 1 [ 990.817072][T13061] vxfs: WRONG superblock magic 00000000 at 8 [ 990.817117][T13061] vxfs: can't find superblock. [ 990.923599][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 991.202409][T13060] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 991.223682][T13059] fuse: Unknown parameter 'use00000000000000000000' [ 991.281369][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 991.283972][ T31] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 991.284067][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 991.284092][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 991.284119][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 991.284145][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.284194][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 991.284219][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.717266][T13047] netlink: 'syz.0.1674': attribute type 3 has an invalid length. [ 991.717597][T13047] netlink: 'syz.0.1674': attribute type 3 has an invalid length. [ 992.036141][ T31] usb 1-1: usb_control_msg returned -32 [ 992.036191][ T31] usbtmc 1-1:16.0: can't read capabilities [ 993.848269][T11832] usb 1-1: USB disconnect, device number 2 [ 994.457222][T13106] fuse: Unknown parameter 'user_i00000000000000000000' [ 995.221837][T13115] vxfs: WRONG superblock magic 00000000 at 1 [ 995.224784][T13115] vxfs: WRONG superblock magic 00000000 at 8 [ 995.224827][T13115] vxfs: can't find superblock. [ 995.500412][T13114] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 995.681754][T13107] tun1: tun_chr_ioctl cmd 1074025675 [ 995.681780][T13107] tun1: persist enabled [ 995.682004][T13107] tun1: tun_chr_ioctl cmd 1074025675 [ 995.682020][T13107] tun1: persist enabled [ 998.965618][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.107442][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.143265][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.776878][T10057] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 999.929168][T10057] usb 1-1: Using ep0 maxpacket: 8 [ 999.938128][T10057] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 999.938189][T10057] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.938207][T10057] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 999.938225][T10057] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 999.938241][T10057] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.938272][T10057] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 999.938288][T10057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.238421][T13138] netlink: 'syz.0.1694': attribute type 3 has an invalid length. [ 1000.238640][T13138] netlink: 'syz.0.1694': attribute type 3 has an invalid length. [ 1000.257462][T10057] usb 1-1: usb_control_msg returned -32 [ 1000.257510][T10057] usbtmc 1-1:16.0: can't read capabilities [ 1000.567945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.732198][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.333342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.573425][ T9868] Bluetooth: hci2: command 0x0405 tx timeout [ 1001.780855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.157220][T13170] fuse: Unknown parameter 'user_i00000000000000000000' [ 1003.274920][T11794] usb 1-1: USB disconnect, device number 3 [ 1003.597557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.720828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.830425][T13191] tun1: tun_chr_ioctl cmd 1074025675 [ 1003.830452][T13191] tun1: persist enabled [ 1003.876070][T13179] tun1: tun_chr_ioctl cmd 1074025675 [ 1003.876094][T13179] tun1: persist enabled [ 1008.701287][T13189] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 1009.284057][T13224] fuse: Unknown parameter 'user_i00000000000000000000' [ 1015.301551][ T31] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1015.452338][ T31] usb 10-1: Using ep0 maxpacket: 8 [ 1015.469922][ T31] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1015.470099][ T31] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.470157][ T31] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1015.470222][ T31] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1015.470282][ T31] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.470359][ T31] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.470414][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.674377][T13239] netlink: 'syz.9.1714': attribute type 3 has an invalid length. [ 1016.674549][T13239] netlink: 'syz.9.1714': attribute type 3 has an invalid length. [ 1016.681469][ T31] usb 10-1: usb_control_msg returned -32 [ 1016.681530][ T31] usbtmc 10-1:16.0: can't read capabilities [ 1017.315489][ T31] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1017.481486][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 1017.576232][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1018.226605][ T31] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1018.226639][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.226660][ T31] usb 8-1: Product: syz [ 1018.226675][ T31] usb 8-1: Manufacturer: syz [ 1018.226691][ T31] usb 8-1: SerialNumber: syz [ 1018.269322][ T31] usb 8-1: config 0 descriptor?? [ 1018.293804][ T31] hub 8-1:0.0: bad descriptor, ignoring hub [ 1018.293847][ T31] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1018.338241][ T31] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input18 [ 1025.451651][T11801] usb 10-1: USB disconnect, device number 14 [ 1025.792060][T13286] fuse: Unknown parameter 'user_id00000000000000000000' [ 1026.215928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.668045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.081243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.254763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.830889][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1027.851030][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1027.860749][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1027.872858][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1027.893365][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1028.251322][ T5883] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1028.408738][ T5883] usb 9-1: config 0 has an invalid interface number: 169 but max is 0 [ 1028.408769][ T5883] usb 9-1: config 0 has no interface number 0 [ 1028.408825][ T5883] usb 9-1: config 0 interface 169 altsetting 0 endpoint 0xB has invalid maxpacket 1205, setting to 64 [ 1028.408855][ T5883] usb 9-1: config 0 interface 169 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1028.408879][ T5883] usb 9-1: config 0 interface 169 altsetting 0 endpoint 0x4 has invalid maxpacket 25717, setting to 1024 [ 1028.408924][ T5883] usb 9-1: New USB device found, idVendor=1410, idProduct=a021, bcdDevice=a7.45 [ 1028.408948][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.553112][ T5883] usb 9-1: config 0 descriptor?? [ 1028.553212][ T5883] usb 9-1: Interface #169 referenced by multiple IADs [ 1028.554746][T13311] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1028.619522][T13307] chnl_net:caif_netlink_parms(): no params data found [ 1028.652547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.041773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.111459][ T9868] Bluetooth: hci2: command 0x0405 tx timeout [ 1029.180548][ T990] usb 9-1: USB disconnect, device number 5 [ 1029.611383][T10057] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1029.763255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.791394][T10057] usb 1-1: Using ep0 maxpacket: 8 [ 1029.794270][T10057] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1029.794344][T10057] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1029.794371][T10057] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1029.794399][T10057] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1029.794428][T10057] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.794480][T10057] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1029.794507][T10057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.880082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.991362][T13021] Bluetooth: hci4: command tx timeout [ 1030.015189][ T31] usb 8-1: USB disconnect, device number 19 [ 1030.101654][T13331] netlink: 'syz.0.1733': attribute type 3 has an invalid length. [ 1030.101876][T13331] netlink: 'syz.0.1733': attribute type 3 has an invalid length. [ 1030.148089][T10057] usb 1-1: usb_control_msg returned -32 [ 1030.148140][T10057] usbtmc 1-1:16.0: can't read capabilities [ 1030.789397][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.789512][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.789735][T13307] bridge_slave_0: entered allmulticast mode [ 1030.825687][T13307] bridge_slave_0: entered promiscuous mode [ 1030.838824][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.839012][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.839223][T13307] bridge_slave_1: entered allmulticast mode [ 1030.863908][T13307] bridge_slave_1: entered promiscuous mode [ 1031.031355][T11801] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1031.153685][T13349] fuse: Unknown parameter 'user_id00000000000000000000' [ 1031.191565][T11801] usb 9-1: Using ep0 maxpacket: 16 [ 1031.193899][T11801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1031.197165][T11801] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1031.197192][T11801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.197211][T11801] usb 9-1: Product: syz [ 1031.197225][T11801] usb 9-1: Manufacturer: syz [ 1031.197240][T11801] usb 9-1: SerialNumber: syz [ 1031.202838][ T2918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.261728][T11801] usb 9-1: config 0 descriptor?? [ 1031.268023][T11801] hub 9-1:0.0: bad descriptor, ignoring hub [ 1031.268059][T11801] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1031.292868][T11801] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input19 [ 1032.072015][T13021] Bluetooth: hci4: command tx timeout [ 1032.528191][ T31] usb 1-1: USB disconnect, device number 4 [ 1034.159716][T13021] Bluetooth: hci4: command tx timeout [ 1036.008910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.105229][ T2918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.124453][T13381] input: syz0 as /devices/virtual/input/input20 [ 1036.204684][T13307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.231490][ T9868] Bluetooth: hci4: command tx timeout [ 1036.247311][T13307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.621480][ T2918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.874942][T13307] team0: Port device team_slave_0 added [ 1037.139052][T13394] fuse: Unknown parameter 'user_id00000000000000000000' [ 1037.171988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.427621][ T2918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.536077][T13307] team0: Port device team_slave_1 added [ 1037.819597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.251360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.252401][ T5868] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1038.407483][ T5868] usb 8-1: Using ep0 maxpacket: 8 [ 1038.409891][ T5868] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1038.409952][ T5868] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.409975][ T5868] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.409999][ T5868] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.410022][ T5868] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.410063][ T5868] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1038.410085][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.311100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.312685][ T5868] usb 8-1: usb_control_msg returned -32 [ 1039.312735][ T5868] usbtmc 8-1:16.0: can't read capabilities [ 1039.321428][ T31] usb 9-1: USB disconnect, device number 6 [ 1039.653908][T13401] netlink: 'syz.7.1748': attribute type 3 has an invalid length. [ 1039.654097][T13401] netlink: 'syz.7.1748': attribute type 3 has an invalid length. [ 1039.689755][T13307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.689769][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.689789][T13307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.577944][T13307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.577958][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.577978][T13307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.999602][T11801] usb 8-1: USB disconnect, device number 20 [ 1043.484239][T13446] fuse: Bad value for 'fd' [ 1045.072202][T13307] hsr_slave_0: entered promiscuous mode [ 1045.090366][T13307] hsr_slave_1: entered promiscuous mode [ 1045.097678][T13307] debugfs: 'hsr0' already exists in 'hsr' [ 1045.097709][T13307] Cannot create hsr debugfs directory [ 1046.248450][T13468] vxfs: WRONG superblock magic 00000000 at 1 [ 1046.248778][T13468] vxfs: WRONG superblock magic 00000000 at 8 [ 1046.248796][T13468] vxfs: can't find superblock. [ 1048.179511][ T2918] bridge_slave_1: left allmulticast mode [ 1048.179543][ T2918] bridge_slave_1: left promiscuous mode [ 1048.179814][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.353969][ T2918] bridge_slave_0: left allmulticast mode [ 1048.353992][ T2918] bridge_slave_0: left promiscuous mode [ 1048.354209][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.584064][ T31] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1048.762597][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1048.802915][ T31] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1048.803731][ T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1048.803758][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1048.803783][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1048.803807][ T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.803851][ T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1048.804934][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.428272][ T31] usb 8-1: usb_control_msg returned -32 [ 1049.428321][ T31] usbtmc 8-1:16.0: can't read capabilities [ 1052.033541][ T38] audit: type=1326 audit(2000000352.550:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13511 comm="syz.8.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc184f6eec9 code=0x7ffc0000 [ 1052.033596][ T38] audit: type=1326 audit(2000000352.550:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13511 comm="syz.8.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc184f6eec9 code=0x7ffc0000 [ 1052.033644][ T38] audit: type=1326 audit(2000000352.550:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13511 comm="syz.8.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc184f6eec9 code=0x7ffc0000 [ 1052.033736][ T38] audit: type=1326 audit(2000000352.560:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13511 comm="syz.8.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc184f6eec9 code=0x7ffc0000 [ 1056.472130][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.583319][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.625445][ T2918] bond0 (unregistering): Released all slaves [ 1056.705712][T13486] netlink: 'syz.7.1764': attribute type 3 has an invalid length. [ 1056.705942][T13486] netlink: 'syz.7.1764': attribute type 3 has an invalid length. [ 1057.052338][T11794] usb 8-1: USB disconnect, device number 21 [ 1058.556880][T10057] libceph: connect (1)[c::]:6789 error -101 [ 1058.557096][T10057] libceph: mon0 (1)[c::]:6789 connect error [ 1058.590504][T13568] vxfs: WRONG superblock magic 00000000 at 1 [ 1058.590795][T13568] vxfs: WRONG superblock magic 00000000 at 8 [ 1058.590812][T13568] vxfs: can't find superblock. [ 1058.703652][T13564] ceph: No mds server is up or the cluster is laggy [ 1059.071366][ T9296] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1059.894648][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.184457][ T9296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1060.184510][ T9296] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1060.184533][ T9296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.197504][ T9296] usb 1-1: config 0 descriptor?? [ 1060.198932][T13572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1060.636392][ T9296] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 1060.636437][ T9296] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 1060.636466][ T9296] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 1060.636492][ T9296] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 1060.636519][ T9296] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 1060.697099][ T9296] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1060.846331][ T9296] usb 1-1: USB disconnect, device number 5 [ 1060.935010][T13588] fido_id[13588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1062.213137][T13604] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1788'. [ 1062.688038][ T990] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1062.871683][ T990] usb 10-1: Using ep0 maxpacket: 8 [ 1062.917504][ T990] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1062.920462][ T990] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1062.920585][ T990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1062.920729][ T990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1062.920850][ T990] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.922653][ T990] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1062.922810][ T990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.812976][ T990] usb 10-1: usb_control_msg returned -32 [ 1063.813051][ T990] usbtmc 10-1:16.0: can't read capabilities [ 1063.942923][T13602] netlink: 'syz.9.1787': attribute type 3 has an invalid length. [ 1063.943164][T13602] netlink: 'syz.9.1787': attribute type 3 has an invalid length. [ 1063.945252][T13604] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1067.761841][T11832] usb 10-1: USB disconnect, device number 15 [ 1068.768022][T13647] syz.0.1795 (13647) used greatest stack depth: 17800 bytes left [ 1069.901341][ T2918] hsr_slave_0: left promiscuous mode [ 1069.960569][ T2918] hsr_slave_1: left promiscuous mode [ 1069.967459][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.967490][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.052729][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.052760][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.563723][ T2918] veth1_macvtap: left promiscuous mode [ 1071.563843][ T2918] veth0_macvtap: left promiscuous mode [ 1071.564154][ T2918] veth1_vlan: left promiscuous mode [ 1071.564345][ T2918] veth0_vlan: left promiscuous mode [ 1071.768615][T13670] vxfs: WRONG superblock magic 00000000 at 1 [ 1071.769744][T13670] vxfs: WRONG superblock magic 00000000 at 8 [ 1071.769765][T13670] vxfs: can't find superblock. [ 1071.881871][T13668] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1073.441402][T11801] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1073.599941][T11801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.599986][T11801] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1073.600002][T11801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.643260][T11801] usb 8-1: config 0 descriptor?? [ 1073.924799][T13687] vxfs: WRONG superblock magic 00000000 at 1 [ 1073.927879][T13687] vxfs: WRONG superblock magic 00000000 at 8 [ 1073.927921][T13687] vxfs: can't find superblock. [ 1074.369497][T13685] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1074.949007][T11801] usbhid 8-1:0.0: can't add hid device: -71 [ 1074.949148][T11801] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1074.960170][T11801] usb 8-1: USB disconnect, device number 22 [ 1081.024519][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1081.024740][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1081.059982][T13723] vxfs: WRONG superblock magic 00000000 at 1 [ 1081.060293][T13723] vxfs: WRONG superblock magic 00000000 at 8 [ 1081.060311][T13723] vxfs: can't find superblock. [ 1081.289415][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1081.289640][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1081.396964][T13720] ceph: No mds server is up or the cluster is laggy [ 1082.360077][T13729] vxfs: WRONG superblock magic 00000000 at 1 [ 1082.363130][T13729] vxfs: WRONG superblock magic 00000000 at 8 [ 1082.363175][T13729] vxfs: can't find superblock. [ 1082.614591][T13727] ceph: No mds server is up or the cluster is laggy [ 1082.810425][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1082.810647][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1082.852155][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1083.452150][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1084.309251][T13021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1084.310957][T13021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1084.333277][T13021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1084.337049][T13021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1084.337958][T13021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1086.102593][T13021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1086.108274][T13021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1086.109604][T13021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1086.119977][T13021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1086.145048][T13021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1086.841337][ T9868] Bluetooth: hci2: command tx timeout [ 1087.419299][T13021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1087.439829][T13021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1087.453311][T13021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1087.472272][T13021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1087.473222][T13021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1087.857387][T13765] vxfs: WRONG superblock magic 00000000 at 1 [ 1087.861891][T13765] vxfs: WRONG superblock magic 00000000 at 8 [ 1087.861938][T13765] vxfs: can't find superblock. [ 1088.227601][T13763] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1088.361392][ T9868] Bluetooth: hci5: command tx timeout [ 1088.872036][T13021] Bluetooth: hci2: command tx timeout [ 1089.611102][T13021] Bluetooth: hci6: command tx timeout [ 1090.401233][T13021] Bluetooth: hci5: command tx timeout [ 1090.951533][T13021] Bluetooth: hci2: command tx timeout [ 1091.685880][T13021] Bluetooth: hci6: command tx timeout [ 1092.478003][T13021] Bluetooth: hci5: command tx timeout [ 1093.465182][T13021] Bluetooth: hci2: command tx timeout [ 1093.751248][T13021] Bluetooth: hci6: command tx timeout [ 1095.034047][T13021] Bluetooth: hci5: command tx timeout [ 1095.917419][T13809] vxfs: WRONG superblock magic 00000000 at 1 [ 1095.924457][T13809] vxfs: WRONG superblock magic 00000000 at 8 [ 1095.924507][T13809] vxfs: can't find superblock. [ 1096.138790][T13807] ceph: No mds server is up or the cluster is laggy [ 1096.330359][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1096.330566][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1096.442847][T13021] Bluetooth: hci6: command tx timeout [ 1104.017024][T13871] vxfs: WRONG superblock magic 00000000 at 1 [ 1104.020070][T13871] vxfs: WRONG superblock magic 00000000 at 8 [ 1104.020114][T13871] vxfs: can't find superblock. [ 1104.376147][T13870] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1105.183182][ T2918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.332101][T13741] chnl_net:caif_netlink_parms(): no params data found [ 1105.342393][T13751] chnl_net:caif_netlink_parms(): no params data found [ 1105.358751][T13760] chnl_net:caif_netlink_parms(): no params data found [ 1105.830273][ T2918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.395693][ T2918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.333275][ T2918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.700658][T13906] syz_tun: entered promiscuous mode [ 1110.700898][T13906] vlan2: entered promiscuous mode [ 1110.711794][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.712082][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.712305][T13741] bridge_slave_0: entered allmulticast mode [ 1110.715160][T13741] bridge_slave_0: entered promiscuous mode [ 1110.719334][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.719445][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.719662][T13751] bridge_slave_0: entered allmulticast mode [ 1110.745530][T13751] bridge_slave_0: entered promiscuous mode [ 1110.754105][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.754260][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.754519][T13760] bridge_slave_0: entered allmulticast mode [ 1110.757656][T13760] bridge_slave_0: entered promiscuous mode [ 1110.794926][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.807969][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.808239][T13741] bridge_slave_1: entered allmulticast mode [ 1110.825119][T13741] bridge_slave_1: entered promiscuous mode [ 1110.852369][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.852480][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.852687][T13751] bridge_slave_1: entered allmulticast mode [ 1110.854605][T13751] bridge_slave_1: entered promiscuous mode [ 1110.856215][T13760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.856343][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.856530][T13760] bridge_slave_1: entered allmulticast mode [ 1110.859393][T13760] bridge_slave_1: entered promiscuous mode [ 1111.871324][T13915] vxfs: WRONG superblock magic 00000000 at 1 [ 1111.888130][T13915] vxfs: WRONG superblock magic 00000000 at 8 [ 1111.888182][T13915] vxfs: can't find superblock. [ 1112.199564][T13914] ceph: No mds server is up or the cluster is laggy [ 1112.386539][T11832] libceph: connect (1)[c::]:6789 error -101 [ 1112.386760][T11832] libceph: mon0 (1)[c::]:6789 connect error [ 1112.634994][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.659996][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.996125][T13922] vcan0: entered allmulticast mode [ 1112.996546][T13922] vcan0: left allmulticast mode [ 1113.013590][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.030659][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.071079][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.168390][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.290915][T13210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.290938][T13210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.307300][T13741] team0: Port device team_slave_0 added [ 1114.363214][T13751] team0: Port device team_slave_0 added [ 1114.399696][T13760] team0: Port device team_slave_0 added [ 1114.608534][T13741] team0: Port device team_slave_1 added [ 1114.617993][T13751] team0: Port device team_slave_1 added [ 1115.537824][T13760] team0: Port device team_slave_1 added [ 1117.431313][T13943] vxfs: WRONG superblock magic 00000000 at 1 [ 1117.434339][T13943] vxfs: WRONG superblock magic 00000000 at 8 [ 1117.434382][T13943] vxfs: can't find superblock. [ 1117.879059][T13942] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1118.362614][ T2918] bridge_slave_1: left allmulticast mode [ 1118.362646][ T2918] bridge_slave_1: left promiscuous mode [ 1118.362921][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.452417][ T2918] bridge_slave_0: left allmulticast mode [ 1118.452441][ T2918] bridge_slave_0: left promiscuous mode [ 1118.452687][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.515767][ T2918] bridge_slave_1: left allmulticast mode [ 1118.515792][ T2918] bridge_slave_1: left promiscuous mode [ 1118.515998][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.572583][ T2918] bridge_slave_0: left allmulticast mode [ 1118.572614][ T2918] bridge_slave_0: left promiscuous mode [ 1118.572798][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.142178][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.232104][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.316007][ T2918] bond0 (unregistering): Released all slaves [ 1121.197469][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.272450][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.332303][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.374033][ T2918] bond0 (unregistering): Released all slaves [ 1122.595634][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.595652][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.595671][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.597033][T13751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.597049][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.597076][T13751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.597635][T13965] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1860'. [ 1122.599617][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.599650][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.599677][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.854473][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.854491][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.854520][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.858426][T13751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.858443][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.858470][T13751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.862309][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.862329][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.862361][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.552372][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1862'. [ 1124.454043][T13975] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1124.454093][T13975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1124.454115][T13975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1125.254218][T13984] vxfs: WRONG superblock magic 00000000 at 1 [ 1125.263595][T13984] vxfs: WRONG superblock magic 00000000 at 8 [ 1125.263678][T13984] vxfs: can't find superblock. [ 1125.662178][T10057] libceph: connect (1)[c::]:6789 error -101 [ 1125.662411][T10057] libceph: mon0 (1)[c::]:6789 connect error [ 1125.731119][T13976] ceph: No mds server is up or the cluster is laggy [ 1125.962074][T10057] libceph: connect (1)[c::]:6789 error -101 [ 1125.996940][T10057] libceph: mon0 (1)[c::]:6789 connect error [ 1126.563582][T13741] hsr_slave_0: entered promiscuous mode [ 1126.580884][T13741] hsr_slave_1: entered promiscuous mode [ 1126.588099][T13741] debugfs: 'hsr0' already exists in 'hsr' [ 1126.588128][T13741] Cannot create hsr debugfs directory [ 1127.056229][T13751] hsr_slave_0: entered promiscuous mode [ 1127.057583][T13751] hsr_slave_1: entered promiscuous mode [ 1127.058506][T13751] debugfs: 'hsr0' already exists in 'hsr' [ 1127.058529][T13751] Cannot create hsr debugfs directory [ 1128.007840][T13760] hsr_slave_0: entered promiscuous mode [ 1128.009406][T13760] hsr_slave_1: entered promiscuous mode [ 1128.010447][T13760] debugfs: 'hsr0' already exists in 'hsr' [ 1128.010473][T13760] Cannot create hsr debugfs directory [ 1131.441279][T11832] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1131.571285][ T2918] hsr_slave_0: left promiscuous mode [ 1131.601292][T11832] usb 8-1: Using ep0 maxpacket: 8 [ 1131.603406][T11832] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1131.603465][T11832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1131.603488][T11832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1131.603512][T11832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.603536][T11832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.603578][T11832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1131.603601][T11832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.684938][ T2918] hsr_slave_1: left promiscuous mode [ 1131.685974][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.744426][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.891420][ T2918] hsr_slave_0: left promiscuous mode [ 1131.923006][T11832] usb 8-1: usb_control_msg returned -32 [ 1131.923057][T11832] usbtmc 8-1:16.0: can't read capabilities [ 1131.971390][ T2918] hsr_slave_1: left promiscuous mode [ 1131.972443][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.972470][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.012326][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.012356][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.112015][ T2918] veth1_macvtap: left promiscuous mode [ 1132.112145][ T2918] veth0_macvtap: left promiscuous mode [ 1132.112417][ T2918] veth1_vlan: left promiscuous mode [ 1132.112606][ T2918] veth0_vlan: left promiscuous mode [ 1132.911862][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1133.082267][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1135.763099][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1135.996746][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1138.602706][T14020] netlink: 'syz.7.1876': attribute type 3 has an invalid length. [ 1138.603851][T14020] netlink: 'syz.7.1876': attribute type 3 has an invalid length. [ 1138.908782][T11794] usb 8-1: USB disconnect, device number 23 [ 1142.651508][T11794] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1142.761493][ T3120] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1142.802244][T11794] usb 8-1: Using ep0 maxpacket: 8 [ 1142.804590][T11794] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1142.804655][T11794] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.804678][T11794] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.804705][T11794] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1142.804729][T11794] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.804775][T11794] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1142.804799][T11794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.915165][ T3120] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1142.915186][ T3120] usb 10-1: config 0 has no interface number 0 [ 1142.915220][ T3120] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.915239][ T3120] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.915306][ T3120] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1142.915323][ T3120] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.938059][ T3120] usb 10-1: config 0 descriptor?? [ 1143.220850][T11794] usb 8-1: usb_control_msg returned -32 [ 1143.220960][T11794] usbtmc 8-1:16.0: can't read capabilities [ 1143.321975][T14056] netlink: 'syz.7.1884': attribute type 3 has an invalid length. [ 1143.322211][T14056] netlink: 'syz.7.1884': attribute type 3 has an invalid length. [ 1143.443115][ T3120] uclogic 0003:256C:006D.0003: item fetching failed at offset 0/5 [ 1143.443985][ T3120] uclogic 0003:256C:006D.0003: parse failed [ 1143.444126][ T3120] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -22 [ 1143.633713][T11832] usb 10-1: USB disconnect, device number 16 [ 1144.350392][ T9868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1144.368649][ T9868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1144.373585][ T9868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1144.387720][ T9868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1144.394602][ T9868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1145.329820][T14064] chnl_net:caif_netlink_parms(): no params data found [ 1145.400900][T11794] usb 8-1: USB disconnect, device number 24 [ 1145.622900][T13751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1145.648877][T13741] netdevsim netdevsim1: probe with driver netdevsim failed with error -12 [ 1145.814649][T13751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1145.951502][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1890'. [ 1146.004685][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1890'. [ 1146.589090][T13021] Bluetooth: hci0: command tx timeout [ 1147.375099][ T9868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.396719][ T9868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.398862][ T9868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1148.143656][ T9868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1148.276618][ T9868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1148.587397][T14064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.587556][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.587834][T14064] bridge_slave_0: entered allmulticast mode [ 1148.630196][T14064] bridge_slave_0: entered promiscuous mode [ 1148.633224][ T9868] Bluetooth: hci0: command tx timeout [ 1148.655822][T14097] ieee802154 phy0 wpan0: encryption failed: -22 [ 1148.843752][T13021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1148.871444][T13021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1148.872927][T13021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1148.878125][T13021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1148.879098][T13021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1150.401609][T13021] Bluetooth: hci2: command tx timeout [ 1150.425874][T14064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.426038][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.426296][T14064] bridge_slave_1: entered allmulticast mode [ 1150.429403][T14064] bridge_slave_1: entered promiscuous mode [ 1150.721210][T13021] Bluetooth: hci0: command tx timeout [ 1150.874961][ T2918] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.952829][T13021] Bluetooth: hci3: command tx timeout [ 1151.126597][T14064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.328449][ T2918] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.351277][T11832] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1151.387920][T14064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.521076][T11832] usb 8-1: Using ep0 maxpacket: 8 [ 1151.538588][T11832] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1151.538656][T11832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.538680][T11832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1151.538706][T11832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1151.538731][T11832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.538775][T11832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1151.538799][T11832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.898096][T11832] usb 8-1: usb_control_msg returned -32 [ 1151.898154][T11832] usbtmc 8-1:16.0: can't read capabilities [ 1152.193706][ T2918] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.234701][T14112] netlink: 'syz.7.1896': attribute type 3 has an invalid length. [ 1152.235047][T14112] netlink: 'syz.7.1896': attribute type 3 has an invalid length. [ 1152.246899][T14064] team0: Port device team_slave_0 added [ 1152.316635][T14064] team0: Port device team_slave_1 added [ 1152.471392][T13021] Bluetooth: hci2: command tx timeout [ 1152.659295][ T2918] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.802145][T13021] Bluetooth: hci0: command tx timeout [ 1153.041546][T13021] Bluetooth: hci3: command tx timeout [ 1153.254481][T14064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.254500][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.254528][T14064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.275294][T14064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.276140][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.276180][T14064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.784316][T14064] hsr_slave_0: entered promiscuous mode [ 1153.786010][T14064] hsr_slave_1: entered promiscuous mode [ 1153.787264][T14064] debugfs: 'hsr0' already exists in 'hsr' [ 1153.787309][T14064] Cannot create hsr debugfs directory [ 1154.194328][T10057] usb 8-1: USB disconnect, device number 25 [ 1154.551462][T13021] Bluetooth: hci2: command tx timeout [ 1155.112005][T13021] Bluetooth: hci3: command tx timeout [ 1156.631309][T13021] Bluetooth: hci2: command tx timeout [ 1157.314321][ T9868] Bluetooth: hci3: command tx timeout [ 1158.222325][T14091] chnl_net:caif_netlink_parms(): no params data found [ 1158.288490][ T2918] bridge_slave_1: left allmulticast mode [ 1158.288521][ T2918] bridge_slave_1: left promiscuous mode [ 1158.288803][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.645589][ T2918] bridge_slave_0: left allmulticast mode [ 1158.645621][ T2918] bridge_slave_0: left promiscuous mode [ 1158.645898][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.351828][ T9868] Bluetooth: hci3: command 0x0405 tx timeout [ 1160.380215][T14203] vxfs: WRONG superblock magic 00000000 at 1 [ 1160.383281][T14203] vxfs: WRONG superblock magic 00000000 at 8 [ 1160.383326][T14203] vxfs: can't find superblock. [ 1160.762521][T14201] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1161.824386][T14211] vxfs: WRONG superblock magic 00000000 at 1 [ 1161.827235][T14211] vxfs: WRONG superblock magic 00000000 at 8 [ 1161.827280][T14211] vxfs: can't find superblock. [ 1162.161858][T14209] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1166.107366][T14243] vxfs: WRONG superblock magic 00000000 at 1 [ 1166.110113][T14243] vxfs: WRONG superblock magic 00000000 at 8 [ 1166.110168][T14243] vxfs: can't find superblock. [ 1166.468631][T14241] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1166.927223][ T2918] team0: Port device bond0 removed [ 1167.907169][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.996577][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.168868][ T2918] bond0 (unregistering): Released all slaves [ 1169.182727][T14099] chnl_net:caif_netlink_parms(): no params data found [ 1172.640240][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.640525][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.640785][T14091] bridge_slave_0: entered allmulticast mode [ 1172.645377][T14091] bridge_slave_0: entered promiscuous mode [ 1172.848630][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.848793][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.849006][T14091] bridge_slave_1: entered allmulticast mode [ 1172.882751][T14091] bridge_slave_1: entered promiscuous mode [ 1173.259687][T14308] vxfs: WRONG superblock magic 00000000 at 1 [ 1173.262729][T14308] vxfs: WRONG superblock magic 00000000 at 8 [ 1173.262774][T14308] vxfs: can't find superblock. [ 1173.572175][T14306] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1174.983828][ T2918] hsr_slave_0: left promiscuous mode [ 1175.633790][ T2918] hsr_slave_1: left promiscuous mode [ 1175.634845][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.634871][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.694823][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.694854][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.959240][ T2918] veth1_macvtap: left promiscuous mode [ 1175.959361][ T2918] veth0_macvtap: left promiscuous mode [ 1175.959622][ T2918] veth1_vlan: left promiscuous mode [ 1175.959805][ T2918] veth0_vlan: left promiscuous mode [ 1177.894726][T10057] libceph: connect (1)[c::]:6789 error -101 [ 1177.894954][T10057] libceph: mon0 (1)[c::]:6789 connect error [ 1177.912736][T10057] libceph: connect (1)[c::]:6789 error -101 [ 1177.948718][T10057] libceph: mon0 (1)[c::]:6789 connect error [ 1178.291900][T10057] libceph: connect (1)[c::]:6789 error -101 [ 1178.292126][T10057] libceph: mon0 (1)[c::]:6789 connect error [ 1178.340230][T14354] ceph: No mds server is up or the cluster is laggy [ 1178.427509][T14359] vxfs: WRONG superblock magic 00000000 at 1 [ 1178.427807][T14359] vxfs: WRONG superblock magic 00000000 at 8 [ 1178.427825][T14359] vxfs: can't find superblock. [ 1182.638318][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.345198][T14382] 9pnet_fd: Insufficient options for proto=fd [ 1184.472673][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1185.172112][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1186.932644][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1946'. [ 1186.932671][T14398] IPv6: NLM_F_CREATE should be specified when creating new route [ 1186.933224][T14398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1186.933239][T14398] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.933505][T14398] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.933538][T14398] IPv6: NLM_F_CREATE should be set when creating new route [ 1189.731663][T14099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.731812][T14099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.732079][T14099] bridge_slave_0: entered allmulticast mode [ 1189.735074][T14099] bridge_slave_0: entered promiscuous mode [ 1189.763369][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.799798][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.800024][T14099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.800265][T14099] bridge_slave_1: entered allmulticast mode [ 1189.824061][T14099] bridge_slave_1: entered promiscuous mode [ 1189.841046][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.457864][T14099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.446581][T14091] team0: Port device team_slave_0 added [ 1192.448222][T14064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1192.817120][T14099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.848112][T14091] team0: Port device team_slave_1 added [ 1193.211409][T14064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1193.704471][T14064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1196.065202][T14064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1196.419498][T14099] team0: Port device team_slave_0 added [ 1196.422231][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.422252][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.422286][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.440432][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.440454][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.440487][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.446764][T14099] team0: Port device team_slave_1 added [ 1197.101357][T14099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.101376][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.101405][T14099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.359506][T14099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.359524][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.359553][T14099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.717214][T14091] hsr_slave_0: entered promiscuous mode [ 1197.718689][T14091] hsr_slave_1: entered promiscuous mode [ 1197.719726][T14091] debugfs: 'hsr0' already exists in 'hsr' [ 1197.719753][T14091] Cannot create hsr debugfs directory [ 1198.250588][T14099] hsr_slave_0: entered promiscuous mode [ 1198.276304][T14099] hsr_slave_1: entered promiscuous mode [ 1198.291438][T14099] debugfs: 'hsr0' already exists in 'hsr' [ 1198.291465][T14099] Cannot create hsr debugfs directory [ 1200.818245][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1962'. [ 1203.062525][T14536] bridge_slave_1: left allmulticast mode [ 1203.062557][T14536] bridge_slave_1: left promiscuous mode [ 1203.062840][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.142818][T14536] bridge_slave_0: left allmulticast mode [ 1203.142850][T14536] bridge_slave_0: left promiscuous mode [ 1203.143145][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.617018][T13021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1205.631561][T13021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1205.641559][T13021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1205.657154][T13021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1205.658509][T13021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1206.561220][ T9301] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1206.725848][ T9301] usb 8-1: Using ep0 maxpacket: 16 [ 1206.731852][T13021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1206.732690][ T9301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1206.749783][T13021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1206.752172][ T9301] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1206.752201][ T9301] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.752222][ T9301] usb 8-1: Product: syz [ 1206.752237][ T9301] usb 8-1: Manufacturer: syz [ 1206.752252][ T9301] usb 8-1: SerialNumber: syz [ 1206.755912][T13021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1206.765039][T13021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1206.767511][ T9301] usb 8-1: config 0 descriptor?? [ 1206.782672][T13021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1206.796965][ T9301] hub 8-1:0.0: bad descriptor, ignoring hub [ 1206.797012][ T9301] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1206.841539][ T9301] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input21 [ 1207.751877][ T9868] Bluetooth: hci4: command tx timeout [ 1209.047424][ T9868] Bluetooth: hci0: command tx timeout [ 1209.834146][ T9868] Bluetooth: hci4: command tx timeout [ 1209.867832][T13021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1209.888094][T13021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1209.894082][T13021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1209.929116][T13021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1209.938783][T13021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1210.070270][ T2918] bridge_slave_1: left allmulticast mode [ 1210.070301][ T2918] bridge_slave_1: left promiscuous mode [ 1210.070584][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.172821][ T2918] bridge_slave_0: left allmulticast mode [ 1210.172850][ T2918] bridge_slave_0: left promiscuous mode [ 1210.173106][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.325809][ T2918] bridge_slave_1: left allmulticast mode [ 1210.325842][ T2918] bridge_slave_1: left promiscuous mode [ 1210.328472][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.331918][ T9301] usb 8-1: USB disconnect, device number 26 [ 1210.433173][ T2918] bridge_slave_0: left allmulticast mode [ 1210.433206][ T2918] bridge_slave_0: left promiscuous mode [ 1210.433455][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.570192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.644268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.698186][ T2918] bridge_slave_1: left allmulticast mode [ 1210.698218][ T2918] bridge_slave_1: left promiscuous mode [ 1210.705123][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.797768][ T2918] bridge_slave_0: left allmulticast mode [ 1210.797800][ T2918] bridge_slave_0: left promiscuous mode [ 1210.798049][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.868291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.202825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.309469][ T9868] Bluetooth: hci0: command tx timeout [ 1212.590031][ T9868] Bluetooth: hci4: command tx timeout [ 1213.212804][T13021] Bluetooth: hci5: command tx timeout [ 1213.262652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.274114][T13021] Bluetooth: hci5: command tx timeout [ 1215.503800][ T9868] Bluetooth: hci4: command tx timeout [ 1215.503864][T13021] Bluetooth: hci0: command tx timeout [ 1217.171846][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.364477][T13021] Bluetooth: hci5: command tx timeout [ 1218.192058][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.237198][ T2918] bond0 (unregistering): Released all slaves [ 1218.401212][T13021] Bluetooth: hci0: command tx timeout [ 1218.502152][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.581927][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.645008][ T2918] bond0 (unregistering): Released all slaves [ 1218.852149][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.321994][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.364125][ T2918] bond0 (unregistering): Released all slaves [ 1219.531186][T13021] Bluetooth: hci5: command tx timeout [ 1220.743026][ T2918] hsr_slave_0: left promiscuous mode [ 1220.773201][ T2918] hsr_slave_1: left promiscuous mode [ 1220.774358][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.822852][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.021480][ T2918] hsr_slave_0: left promiscuous mode [ 1221.341452][ T2918] hsr_slave_1: left promiscuous mode [ 1221.342479][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.392292][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.697437][T14736] vxfs: WRONG superblock magic 00000000 at 1 [ 1221.700473][T14736] vxfs: WRONG superblock magic 00000000 at 8 [ 1221.700517][T14736] vxfs: can't find superblock. [ 1222.042260][T14735] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1223.951129][ T2918] hsr_slave_0: left promiscuous mode [ 1224.063912][ T2918] hsr_slave_1: left promiscuous mode [ 1224.064976][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.100442][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.843982][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1225.002533][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1225.972752][ T38] audit: type=1326 audit(2000000526.390:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1225.973368][ T38] audit: type=1326 audit(2000000526.390:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1225.973734][ T38] audit: type=1326 audit(2000000526.420:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1225.974199][ T38] audit: type=1326 audit(2000000526.420:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1225.974565][ T38] audit: type=1326 audit(2000000526.420:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1227.372053][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1227.531940][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1228.642558][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1228.782476][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1230.021009][T14585] chnl_net:caif_netlink_parms(): no params data found [ 1230.301286][ T5885] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1230.456889][T14567] chnl_net:caif_netlink_parms(): no params data found [ 1230.481220][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 1230.483592][ T5885] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.483626][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1230.483662][ T5885] usb 8-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 1230.483687][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.489654][ T5885] usb 8-1: config 0 descriptor?? [ 1230.985323][ T5885] wacom 0003:056A:00D7.0004: unknown main item tag 0x4 [ 1231.101955][ T9301] usb 8-1: USB disconnect, device number 27 [ 1231.426583][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1998'. [ 1231.854601][T14585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.854745][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.854994][T14585] bridge_slave_0: entered allmulticast mode [ 1231.876346][T14585] bridge_slave_0: entered promiscuous mode [ 1231.941433][T14585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.941593][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.941845][T14585] bridge_slave_1: entered allmulticast mode [ 1231.953160][T14585] bridge_slave_1: entered promiscuous mode [ 1232.071378][ T9301] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1234.022631][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.022965][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.023370][T14567] bridge_slave_0: entered allmulticast mode [ 1234.028192][T14567] bridge_slave_0: entered promiscuous mode [ 1234.095832][T14585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.099680][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.099840][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.100083][T14567] bridge_slave_1: entered allmulticast mode [ 1234.428215][T14567] bridge_slave_1: entered promiscuous mode [ 1234.439261][ T9301] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1234.439303][ T9301] usb 8-1: can't read configurations, error -71 [ 1234.449836][T14585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.083647][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.160934][T14585] team0: Port device team_slave_0 added [ 1235.188264][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.229958][T14585] team0: Port device team_slave_1 added [ 1235.383508][T14886] random: crng reseeded on system resumption [ 1237.658480][T14567] team0: Port device team_slave_0 added [ 1237.673105][T14585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.673123][T14585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.673151][T14585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.675670][T14625] chnl_net:caif_netlink_parms(): no params data found [ 1237.735587][T14567] team0: Port device team_slave_1 added [ 1237.737328][T14585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.737345][T14585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.737374][T14585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.081871][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.585368][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.585388][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.585417][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.945792][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.945810][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.945842][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.101291][ T5868] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1253.199131][T14585] hsr_slave_0: entered promiscuous mode [ 1253.200671][T14585] hsr_slave_1: entered promiscuous mode [ 1253.203705][T14585] debugfs: 'hsr0' already exists in 'hsr' [ 1253.203733][T14585] Cannot create hsr debugfs directory [ 1253.263843][ T5868] usb 8-1: config 0 has an invalid interface number: 169 but max is 0 [ 1253.263872][ T5868] usb 8-1: config 0 has no interface number 0 [ 1253.263927][ T5868] usb 8-1: config 0 interface 169 altsetting 0 endpoint 0xB has invalid maxpacket 1205, setting to 64 [ 1253.263956][ T5868] usb 8-1: config 0 interface 169 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1253.263979][ T5868] usb 8-1: config 0 interface 169 altsetting 0 endpoint 0x4 has invalid maxpacket 25717, setting to 1024 [ 1253.264023][ T5868] usb 8-1: New USB device found, idVendor=1410, idProduct=a021, bcdDevice=a7.45 [ 1253.264045][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.269895][ T5868] usb 8-1: config 0 descriptor?? [ 1253.269975][ T5868] usb 8-1: Interface #169 referenced by multiple IADs [ 1253.271726][T14926] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1253.803333][ T3120] usb 8-1: USB disconnect, device number 30 [ 1253.883453][ T9868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1253.890202][ T9868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1253.902679][ T9868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1253.910647][ T9868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1253.926709][ T9868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1254.972001][T14567] hsr_slave_0: entered promiscuous mode [ 1254.973495][T14567] hsr_slave_1: entered promiscuous mode [ 1254.974482][T14567] debugfs: 'hsr0' already exists in 'hsr' [ 1254.974507][T14567] Cannot create hsr debugfs directory [ 1255.624777][ T38] audit: type=1107 audit(2000000556.110:319): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1256.313828][T14625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.313982][T14625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.314247][T14625] bridge_slave_0: entered allmulticast mode [ 1256.317322][T14625] bridge_slave_0: entered promiscuous mode [ 1256.362862][T14625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.363005][T14625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.363208][T14625] bridge_slave_1: entered allmulticast mode [ 1256.366249][T14625] bridge_slave_1: entered promiscuous mode [ 1256.526505][T13021] Bluetooth: hci2: command tx timeout [ 1257.305675][T14625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.535711][T14625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.563166][T13021] Bluetooth: hci2: command tx timeout [ 1258.636673][ T2918] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.689044][T14625] team0: Port device team_slave_0 added [ 1258.767802][T14625] team0: Port device team_slave_1 added [ 1260.328384][ T2918] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.631186][T13021] Bluetooth: hci2: command tx timeout [ 1260.814152][T14625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.814171][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.814201][T14625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.931270][ T9301] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1261.055653][ T2918] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.092959][T14625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.092978][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.093008][T14625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.149006][ T9301] usb 8-1: config 0 has an invalid interface number: 169 but max is 0 [ 1261.149033][ T9301] usb 8-1: config 0 has no interface number 0 [ 1261.149082][ T9301] usb 8-1: config 0 interface 169 altsetting 0 endpoint 0xB has invalid maxpacket 1205, setting to 64 [ 1261.149111][ T9301] usb 8-1: config 0 interface 169 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1261.149133][ T9301] usb 8-1: config 0 interface 169 altsetting 0 endpoint 0x4 has invalid maxpacket 25717, setting to 1024 [ 1261.149175][ T9301] usb 8-1: New USB device found, idVendor=1410, idProduct=a021, bcdDevice=a7.45 [ 1261.149199][ T9301] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.224238][ T9301] usb 8-1: config 0 descriptor?? [ 1261.224305][ T9301] usb 8-1: Interface #169 referenced by multiple IADs [ 1261.226334][T15046] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1261.433269][ T9301] usb 8-1: USB disconnect, device number 31 [ 1261.550269][ T2918] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.831674][T14625] hsr_slave_0: entered promiscuous mode [ 1261.833469][T14625] hsr_slave_1: entered promiscuous mode [ 1261.834205][T14625] debugfs: 'hsr0' already exists in 'hsr' [ 1261.834228][T14625] Cannot create hsr debugfs directory [ 1261.894824][T14585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1262.218931][T14585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1262.716718][T13021] Bluetooth: hci2: command tx timeout [ 1263.630880][T14585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1263.822934][T14585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1264.195330][T14945] chnl_net:caif_netlink_parms(): no params data found [ 1265.286428][ T9868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1265.290830][ T9868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1265.293547][ T9868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1265.296100][ T9868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1265.297007][ T9868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1266.121678][ T38] audit: type=1326 audit(2000000566.600:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15085 comm="syz.7.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1266.122102][ T38] audit: type=1326 audit(2000000566.600:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15085 comm="syz.7.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1266.122465][ T38] audit: type=1326 audit(2000000566.620:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15085 comm="syz.7.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1267.531157][ T9868] Bluetooth: hci3: command tx timeout [ 1267.933326][T13210] Bluetooth: hci6: Frame reassembly failed (-84) [ 1267.964372][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.964530][T14945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.964750][T14945] bridge_slave_0: entered allmulticast mode [ 1267.970104][T14945] bridge_slave_0: entered promiscuous mode [ 1267.992083][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.992304][T14945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.992618][T14945] bridge_slave_1: entered allmulticast mode [ 1268.001367][T14945] bridge_slave_1: entered promiscuous mode [ 1268.158072][ T5797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1268.194799][ T5797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1268.200135][ T5797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1268.215940][ T5797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1268.228942][ T5797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1268.313821][ T2918] bridge_slave_1: left allmulticast mode [ 1268.313852][ T2918] bridge_slave_1: left promiscuous mode [ 1268.314149][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.416122][ T2918] bridge_slave_0: left allmulticast mode [ 1268.416153][ T2918] bridge_slave_0: left promiscuous mode [ 1268.418785][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.494403][ T2918] bridge_slave_1: left allmulticast mode [ 1268.494427][ T2918] bridge_slave_1: left promiscuous mode [ 1268.494602][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.612644][ T2918] bridge_slave_0: left allmulticast mode [ 1268.612677][ T2918] bridge_slave_0: left promiscuous mode [ 1268.612948][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.696488][ T2918] bridge_slave_1: left allmulticast mode [ 1268.696516][ T2918] bridge_slave_1: left promiscuous mode [ 1268.696738][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.782760][ T2918] bridge_slave_0: left allmulticast mode [ 1268.782791][ T2918] bridge_slave_0: left promiscuous mode [ 1268.783038][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.213147][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1269.233563][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1269.234987][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1269.236190][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1269.237812][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1269.591661][ T5797] Bluetooth: hci3: command tx timeout [ 1270.011361][ T9868] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1270.346664][ T9868] Bluetooth: hci7: command tx timeout [ 1271.132348][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.355293][ T5797] Bluetooth: hci0: command tx timeout [ 1271.522057][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.564787][ T2918] bond0 (unregistering): Released all slaves [ 1271.690568][ T5797] Bluetooth: hci3: command tx timeout [ 1271.882002][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.962015][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.040229][ T2918] bond0 (unregistering): Released all slaves [ 1272.312085][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.391405][ T5797] Bluetooth: hci7: command tx timeout [ 1272.393346][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.464128][ T2918] bond0 (unregistering): Released all slaves [ 1272.972109][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.115898][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.195425][ T2918] bond0 (unregistering): Released all slaves [ 1273.451220][ T5797] Bluetooth: hci0: command tx timeout [ 1273.754641][ T5797] Bluetooth: hci3: command tx timeout [ 1274.130466][T14945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.425288][T14945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.481220][ T5797] Bluetooth: hci7: command tx timeout [ 1274.886356][T14945] team0: Port device team_slave_0 added [ 1274.956400][T14945] team0: Port device team_slave_1 added [ 1275.496855][T14945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.496873][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.496899][T14945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.511214][ T5797] Bluetooth: hci0: command tx timeout [ 1275.585744][T14945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.585764][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.585794][T14945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.037943][ T5797] Bluetooth: hci7: command tx timeout [ 1277.165722][T14945] hsr_slave_0: entered promiscuous mode [ 1277.167222][T14945] hsr_slave_1: entered promiscuous mode [ 1277.168290][T14945] debugfs: 'hsr0' already exists in 'hsr' [ 1277.168317][T14945] Cannot create hsr debugfs directory [ 1278.591113][ T5797] Bluetooth: hci0: command tx timeout [ 1279.812836][ T2918] hsr_slave_0: left promiscuous mode [ 1279.851241][ T2918] hsr_slave_1: left promiscuous mode [ 1279.852357][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.852384][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.892564][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.892594][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.071334][ T2918] hsr_slave_0: left promiscuous mode [ 1280.091214][ T2918] hsr_slave_1: left promiscuous mode [ 1280.092055][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.132053][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.301258][ T2918] hsr_slave_0: left promiscuous mode [ 1280.341257][ T2918] hsr_slave_1: left promiscuous mode [ 1280.342092][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.365290][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.551576][ T2918] hsr_slave_0: left promiscuous mode [ 1280.592775][ T2918] hsr_slave_1: left promiscuous mode [ 1280.593844][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.632913][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.636529][ T38] audit: type=1326 audit(2000000581.160:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15134 comm="syz.7.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1280.636698][ T38] audit: type=1326 audit(2000000581.160:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15134 comm="syz.7.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1280.637219][ T38] audit: type=1326 audit(2000000581.160:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15134 comm="syz.7.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1280.637383][ T38] audit: type=1326 audit(2000000581.160:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15134 comm="syz.7.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1280.637545][ T38] audit: type=1326 audit(2000000581.160:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15134 comm="syz.7.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcc62eec9 code=0x7ffc0000 [ 1280.860673][ T2918] veth1_macvtap: left promiscuous mode [ 1280.860752][ T2918] veth0_macvtap: left promiscuous mode [ 1280.860930][ T2918] veth1_vlan: left promiscuous mode [ 1280.862376][ T2918] veth0_vlan: left promiscuous mode [ 1284.101874][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1284.322997][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1287.352569][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1287.491849][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1288.582077][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1288.742247][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1289.941966][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 1290.104245][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 1293.548502][T15088] chnl_net:caif_netlink_parms(): no params data found [ 1297.712139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.982090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.079716][T15099] chnl_net:caif_netlink_parms(): no params data found [ 1298.169742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.313116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.415468][T15102] chnl_net:caif_netlink_parms(): no params data found [ 1298.576243][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.576447][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.576689][T15088] bridge_slave_0: entered allmulticast mode [ 1298.579441][T15088] bridge_slave_0: entered promiscuous mode [ 1298.883249][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.883413][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.883619][T15088] bridge_slave_1: entered allmulticast mode [ 1298.886394][T15088] bridge_slave_1: entered promiscuous mode [ 1299.009858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.048824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.723255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.817120][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.932951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.962647][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.012453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.073886][T15216] bridge0: entered promiscuous mode [ 1300.074108][T15216] macsec2: entered promiscuous mode [ 1300.077072][T15216] bridge0: port 3(macsec2) entered blocking state [ 1300.077373][T15216] bridge0: port 3(macsec2) entered disabled state [ 1300.077710][T15216] macsec2: entered allmulticast mode [ 1300.077729][T15216] bridge0: entered allmulticast mode [ 1300.139840][T15216] macsec2: left allmulticast mode [ 1300.139867][T15216] bridge0: left allmulticast mode [ 1300.187893][T15216] bridge0: left promiscuous mode [ 1300.264082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.782338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.877493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.261817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.295647][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.295782][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.296031][T15099] bridge_slave_0: entered allmulticast mode [ 1301.298950][T15099] bridge_slave_0: entered promiscuous mode [ 1302.420439][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.420589][T15099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.420834][T15099] bridge_slave_1: entered allmulticast mode [ 1302.445075][T15099] bridge_slave_1: entered promiscuous mode [ 1302.459614][T15088] team0: Port device team_slave_0 added [ 1302.460296][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.460433][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.460634][T15102] bridge_slave_0: entered allmulticast mode [ 1302.497722][T15102] bridge_slave_0: entered promiscuous mode [ 1304.817169][T15088] team0: Port device team_slave_1 added [ 1304.818004][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.818135][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.818282][T15102] bridge_slave_1: entered allmulticast mode [ 1304.820259][T15102] bridge_slave_1: entered promiscuous mode [ 1305.267289][T15099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.269210][T15268] veth0_to_team: entered promiscuous mode [ 1305.526484][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.530122][T15099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.534505][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.534526][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.534558][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.548284][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.568789][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.568811][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.568845][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.833416][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.260372][T15099] team0: Port device team_slave_0 added [ 1306.728080][T15099] team0: Port device team_slave_1 added [ 1306.738510][T15102] team0: Port device team_slave_0 added [ 1307.185706][T15102] team0: Port device team_slave_1 added [ 1307.524495][T15088] hsr_slave_0: entered promiscuous mode [ 1307.526011][T15088] hsr_slave_1: entered promiscuous mode [ 1307.527104][T15088] debugfs: 'hsr0' already exists in 'hsr' [ 1307.527131][T15088] Cannot create hsr debugfs directory [ 1307.557885][T15099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.557902][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.557931][T15099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.705439][T15099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.705457][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.705485][T15099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.126498][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.126517][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.126546][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.207438][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.207455][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.207480][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.492128][T14945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1308.550871][T15099] hsr_slave_0: entered promiscuous mode [ 1308.553131][T15099] hsr_slave_1: entered promiscuous mode [ 1308.554254][T15099] debugfs: 'hsr0' already exists in 'hsr' [ 1308.554283][T15099] Cannot create hsr debugfs directory [ 1308.554539][T14945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1308.622836][T14945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1308.731703][T14945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1308.927395][T15102] hsr_slave_0: entered promiscuous mode [ 1308.928854][T15102] hsr_slave_1: entered promiscuous mode [ 1308.929823][T15102] debugfs: 'hsr0' already exists in 'hsr' [ 1308.929849][T15102] Cannot create hsr debugfs directory [ 1312.829710][T15088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1313.643634][T15088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1313.701004][ T9868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1313.724434][T15088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1313.727193][ T9868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1313.730644][ T9868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1313.758137][ T9868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1313.759239][ T9868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.289429][T15088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1315.831333][ T5797] Bluetooth: hci4: command tx timeout [ 1316.638766][ T2918] bridge_slave_1: left allmulticast mode [ 1316.638798][ T2918] bridge_slave_1: left promiscuous mode [ 1316.639102][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.703406][ T2918] bridge_slave_0: left allmulticast mode [ 1316.703437][ T2918] bridge_slave_0: left promiscuous mode [ 1316.703758][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.795937][ T2918] bridge_slave_1: left allmulticast mode [ 1316.795967][ T2918] bridge_slave_1: left promiscuous mode [ 1316.796224][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.052403][ T2918] bridge_slave_0: left allmulticast mode [ 1317.052427][ T2918] bridge_slave_0: left promiscuous mode [ 1317.052625][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.399927][T15357] vxfs: WRONG superblock magic 00000000 at 1 [ 1317.405856][T15357] vxfs: WRONG superblock magic 00000000 at 8 [ 1317.405914][T15357] vxfs: can't find superblock. [ 1317.861533][T15355] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1318.053887][ T5797] Bluetooth: hci4: command tx timeout [ 1318.107034][ T2918] bridge_slave_1: left allmulticast mode [ 1318.107065][ T2918] bridge_slave_1: left promiscuous mode [ 1318.107316][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.352606][ T2918] bridge_slave_0: left allmulticast mode [ 1318.352630][ T2918] bridge_slave_0: left promiscuous mode [ 1318.352828][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.665535][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.742150][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.813482][ T2918] bond0 (unregistering): Released all slaves [ 1319.331890][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.411997][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.473701][ T2918] bond0 (unregistering): Released all slaves [ 1319.732296][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.811760][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.873804][ T2918] bond0 (unregistering): Released all slaves [ 1320.081913][ T5797] Bluetooth: hci4: command tx timeout [ 1321.131885][T15333] chnl_net:caif_netlink_parms(): no params data found [ 1321.711319][ T2918] hsr_slave_0: left promiscuous mode [ 1322.698197][ T2918] hsr_slave_1: left promiscuous mode [ 1322.699225][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.732205][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.871535][ T2918] hsr_slave_0: left promiscuous mode [ 1322.911264][ T2918] hsr_slave_1: left promiscuous mode [ 1322.913462][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.952337][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.968668][ T5797] Bluetooth: hci4: command tx timeout [ 1322.970030][ T26] ================================================================== [ 1322.970045][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1322.970086][ T26] Read of size 8 at addr ffffc9000cbab090 by task irq_work/1/26 [ 1322.970104][ T26] [ 1322.970124][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1322.970149][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1322.970170][ T26] Call Trace: [ 1322.970182][ T26] [ 1322.970192][ T26] dump_stack_lvl+0x189/0x250 [ 1322.970219][ T26] ? run_irq_workd+0x116/0x190 [ 1322.970244][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1322.970270][ T26] ? __pfx__printk+0x10/0x10 [ 1322.970299][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 1322.970325][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 1322.970352][ T26] print_report+0xca/0x240 [ 1322.970383][ T26] ? run_irq_workd+0x116/0x190 [ 1322.970406][ T26] kasan_report+0x118/0x150 [ 1322.970432][ T26] ? run_irq_workd+0x116/0x190 [ 1322.970459][ T26] run_irq_workd+0x116/0x190 [ 1322.970483][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 1322.970506][ T26] ? schedule+0x91/0x360 [ 1322.970539][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1322.970560][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1322.970579][ T26] smpboot_thread_fn+0x542/0xa60 [ 1322.970600][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1322.970624][ T26] kthread+0x711/0x8a0 [ 1322.970651][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1322.970670][ T26] ? __pfx_kthread+0x10/0x10 [ 1322.970694][ T26] ? rt_spin_unlock+0x150/0x200 [ 1322.970724][ T26] ? rt_spin_unlock+0x161/0x200 [ 1322.970749][ T26] ? __pfx_kthread+0x10/0x10 [ 1322.970775][ T26] ret_from_fork+0x4bc/0x870 [ 1322.970810][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.970848][ T26] ? __switch_to_asm+0x39/0x70 [ 1322.970876][ T26] ? __switch_to_asm+0x33/0x70 [ 1322.970905][ T26] ? __pfx_kthread+0x10/0x10 [ 1322.970931][ T26] ret_from_fork_asm+0x1a/0x30 [ 1322.970971][ T26] [ 1322.970980][ T26] [ 1322.970985][ T26] The buggy address belongs to a vmalloc virtual mapping [ 1322.971005][ T26] Memory state around the buggy address: [ 1322.971029][ T26] ffffc9000cbaaf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1322.971043][ T26] ffffc9000cbab000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1322.971058][ T26] >ffffc9000cbab080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1322.971074][ T26] ^ [ 1322.971086][ T26] ffffc9000cbab100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1322.971100][ T26] ffffc9000cbab180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1322.971111][ T26] ================================================================== [ 1322.971170][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1322.971186][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1322.971209][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1322.971222][ T26] Call Trace: [ 1322.971230][ T26] [ 1322.971238][ T26] dump_stack_lvl+0x99/0x250 [ 1322.971263][ T26] ? __asan_memcpy+0x40/0x70 [ 1322.971294][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1322.971320][ T26] ? __pfx__printk+0x10/0x10 [ 1322.971352][ T26] vpanic+0x237/0x6d0 [ 1322.971371][ T26] ? __pfx_vpanic+0x10/0x10 [ 1322.971397][ T26] panic+0xb9/0xc0 [ 1322.971416][ T26] ? __pfx_panic+0x10/0x10 [ 1322.971436][ T26] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1322.971470][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1322.971509][ T26] ? run_irq_workd+0x116/0x190 [ 1322.971532][ T26] check_panic_on_warn+0x89/0xb0 [ 1322.971558][ T26] ? run_irq_workd+0x116/0x190 [ 1322.971581][ T26] end_report+0x78/0x160 [ 1322.971602][ T26] kasan_report+0x129/0x150 [ 1322.971627][ T26] ? run_irq_workd+0x116/0x190 [ 1322.971654][ T26] run_irq_workd+0x116/0x190 [ 1322.971678][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 1322.971699][ T26] ? schedule+0x91/0x360 [ 1322.971732][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1322.971752][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1322.971772][ T26] smpboot_thread_fn+0x542/0xa60 [ 1322.971793][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1322.971818][ T26] kthread+0x711/0x8a0 [ 1322.971844][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1322.971865][ T26] ? __pfx_kthread+0x10/0x10 [ 1322.971888][ T26] ? rt_spin_unlock+0x150/0x200 [ 1322.971917][ T26] ? rt_spin_unlock+0x161/0x200 [ 1322.971942][ T26] ? __pfx_kthread+0x10/0x10 [ 1322.971966][ T26] ret_from_fork+0x4bc/0x870 [ 1322.972001][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 1322.972045][ T26] ? __switch_to_asm+0x39/0x70 [ 1322.972073][ T26] ? __switch_to_asm+0x33/0x70 [ 1322.972101][ T26] ? __pfx_kthread+0x10/0x10 [ 1322.972126][ T26] ret_from_fork_asm+0x1a/0x30 [ 1322.972173][ T26] [ 1322.972455][ T26] Kernel Offset: disabled