last executing test programs: 10m36.313109957s ago: executing program 1 (id=48): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) listen(0xffffffffffffffff, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f0000000000000300030069510000a401004e000000004000000000000000030300000000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000"], 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x88000}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 10m34.701501229s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 10m30.306948072s ago: executing program 32 (id=36): syz_open_dev$MSR(0x0, 0xea9, 0x0) r0 = dup(0xffffffffffffffff) write$FUSE_DIRENT(r0, 0x0, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket(0x28, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) 10m28.379320279s ago: executing program 1 (id=60): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x401070cd, &(0x7f0000000040)) 10m26.116281201s ago: executing program 1 (id=62): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x40000000001, 0x200400) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xffff, 0x80000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f00000004c0)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd2d, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x800}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @empty, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x1}, 0x3c) 10m21.435430662s ago: executing program 1 (id=69): openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000004b40)={0x7, 0x8, 0xfa00, {r6, 0xffff}}, 0x10) 10m19.763733067s ago: executing program 1 (id=72): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_vhci(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) 10m4.129504433s ago: executing program 33 (id=72): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_vhci(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) 6m53.946295563s ago: executing program 6 (id=424): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') getpgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m49.998400211s ago: executing program 6 (id=434): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c00d46748fe5b3584e6f344a2f1dd649b2dbe34080e4d12e38ce67a2af1e4947cf7a622cf8e"]) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) syz_open_dev$video(&(0x7f0000000540), 0x0, 0xe0901) 6m47.937844515s ago: executing program 6 (id=438): syz_open_dev$MSR(0x0, 0xea9, 0x0) r0 = dup(0xffffffffffffffff) write$FUSE_DIRENT(r0, 0x0, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) 6m46.130261322s ago: executing program 3 (id=442): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000005c0)='bic\x00', 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0xd0, 0xd0, 0x390, 0x2b8, 0x460, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 6m46.129553863s ago: executing program 6 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m38.704963965s ago: executing program 3 (id=457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000"], 0x7c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m37.377620784s ago: executing program 3 (id=460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0xa, @default, 0x2000}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_open_dev$MSR(0x0, 0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000010c0)={0x0, @bt={0x5, 0x6, 0x1, 0x2, 0x2, 0x2, 0x8a2b, 0x7, 0x2, 0x9, 0x7, 0x0, 0x7, 0x5, 0x2, 0x10, {0xd0b, 0x2}, 0x10, 0x8}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000001080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 6m37.376374462s ago: executing program 6 (id=461): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280080001", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 6m33.93231104s ago: executing program 4 (id=463): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r7, @ANYBLOB="95a8096b2f8d1ecce0506bcebd32c99782283a53bef1088ce8387fb0b0f1f3512158d4fdca8697c1678150a84c0b0482a130b047a33b8f42d04e3d812f19689e58868e950ca0f92af28ecedde244f7eb421db64fb923782c7f313291cd30a88c5c9df366196a992108ff3bbaf94dfb8a007adfe90539d5d94beeeec148c4e7428dc2d02c291ec147b5c15bab9807188013642630ac86db5b4b2ec13d3d3935643651e031ef749b79a11387a28bee23943207ac859349f7bb3a5d12b572"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m33.90449879s ago: executing program 6 (id=464): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 6m33.80124919s ago: executing program 3 (id=465): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x37, 0x0, 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m32.219895295s ago: executing program 4 (id=467): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c00d46748fe5b3584e6f344a2f1dd649b2dbe34080e4d12e38ce67a2af1e4947cf7a622cf8e"]) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) syz_open_dev$video(&(0x7f0000000540), 0x0, 0xe0901) 6m32.163455233s ago: executing program 3 (id=468): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 6m27.913108886s ago: executing program 4 (id=474): r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r11, r11], 0x2, r9, r10, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, 0x0, 0x0) shutdown(r1, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d766972746972656e3ce3f16d194cdf7ec5b6a1c3340002d6713ae737efde07617048b4e8c613b516bfcfc104b1a47323663a4b9f50561c0d91cdbc468ad99a8bd7e50535841413a60c753b8455ee89a866cb26d9c637510de5d8c81ac9c8955ff914db9ba43ea938f58191fa31c4876f894f514e167257bdaf5414065f21fea82399a6ed5f3362fb8f346b38bd0ca5e1b9142091ae0d313bacac1d1f2c79f0bbecc096097cc4a06fbd014a61fa1b807d04c2bd9eb222a309aa4aefffc54be34d571896ca6b5356b98c0a1271f47c02bdcb2f55905ce0cad0fb2042cab78f0ac8e1aa7a5b47f99be07fe30645f1c9f717"]) close_range(r0, 0xffffffffffffffff, 0x0) 6m27.896810791s ago: executing program 3 (id=475): syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x7364b11c16f6d300) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x2000000, 0x0) 6m26.283300187s ago: executing program 4 (id=477): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280080001", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 6m24.33825348s ago: executing program 4 (id=480): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="fbff05000000ff"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x0, 0x0, "a59fe4ca", "16eff5d3"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x1, 0x0, 0x8, 0x80, 0x9, 0x6c8}}}, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x40, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x40, 0x19, 0x2, "e96a"}, 0x0, 0x0, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x8}, 0x0}) 6m17.144950811s ago: executing program 34 (id=464): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 6m16.073761129s ago: executing program 4 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m12.334352417s ago: executing program 35 (id=475): syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x7364b11c16f6d300) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x2000000, 0x0) 6m0.70479132s ago: executing program 36 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m19.108201171s ago: executing program 9 (id=744): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x2c000011) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x8002}, 0x0) io_setup(0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fc173600442b00fc020000000000000000000000000000ff0200000000000000000000000000010420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000019c0)={@local, @private1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x40000, 0x40, 0xffff, 0x100, 0xfffffffffffffffe, 0x48000f}) r5 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00'}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0}) r6 = syz_open_procfs(r5, &(0x7f0000019100)='setgroups\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 3m12.714647491s ago: executing program 9 (id=753): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xbc}}, {{@in6=@mcast2, 0x0, 0x2b}, 0xa, @in=@empty}}, 0xe8) close(r3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x7}, {0x0, 0xc9, 0x9, 0x9cf}}}}, 0xf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x0, 0x0, 0xffff}, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e3078fdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c76b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e31183f2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6ab"], 0x0, 0x483, &(0x7f0000000580)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(0x0, 0xa) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r4, @ANYRES16=r2, @ANYRES8=r2], 0xfd, 0x1500, &(0x7f0000001900)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 3m9.503615264s ago: executing program 9 (id=758): syz_io_uring_setup(0x7903, 0x0, &(0x7f0000000180), 0x0) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x2f15934e46889ba4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xa) 3m8.246141114s ago: executing program 2 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x6) userfaultfd(0x80800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)=ANY=[], 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) write$FUSE_INTERRUPT(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) getsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00), 0x4) 3m5.813296582s ago: executing program 2 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 3m3.267686241s ago: executing program 2 (id=767): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRESHEX], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000014040000df070000000100000080000000", @ANYRES32=r0, @ANYBLOB="000000c747"], 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/42, 0x2a}, {&(0x7f0000000900)=""/84, 0x54}, {&(0x7f0000000980)=""/69, 0x45}, {&(0x7f0000000a00)=""/51, 0x33}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000006800010000000000fddbdf250a000000000000000600070003000000100008800c00010000000f000007000008000500", @ANYRES32=r3, @ANYBLOB="6571e819fa317d148bbd778ccf2df63dd7bebab187a5bdf01347808c69ad5d483075003593258ebfe9837c9c02d4af2525d0569102480a2b9a19bddc14f97d1ecf5dcee0ecd62f7c36fe383cddfd5f06dad9bb1fbf0c6732c27b548878614054a8d9e238602cf2e84fcec6e8e2b5ad118b90401ee4a82a11cfd3d289963505c3f3b68c20c7f779ab7d4ce0a19c873c27b17b924fa71f3833dacf14efbde6edea7423234be450ee"], 0x38}}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18060400000000000000000000000000180100002020702500000000002020207b1af8ff00000008bfa100000000000007010000f8ffffffb702000003000000b70300000000f8ff8500000073000000953dbd570f735decbbc4c869eea8fcbf1f97a6eb1f7a2d3fff434bf8cfa56768cc414eadb4055a926352501defc92bb74c611c5a0dde32c57ef30c816e65b05d4de40761db0569cfc7aa7fb368185dde1596ad2cb1eb92f23613ab3eb136943fbe33eee08c2a6a3fd57d28167b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 3m1.521752884s ago: executing program 2 (id=771): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004002000040000000300000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000100000000000000006000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000009500"/96], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) 3m0.376279917s ago: executing program 9 (id=773): r0 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x7ef, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setregid(0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, 0x0, 0x4000000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) eventfd2(0x1f6c, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(0x0, 0x0) 2m57.842247821s ago: executing program 9 (id=776): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 2m56.271158201s ago: executing program 2 (id=780): syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x30) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = getpid() close_range(r1, r3, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x64000080) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="f9ffffff03000000080000000700000080100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2m55.183729864s ago: executing program 9 (id=783): r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, 0x0, 0x0) shutdown(r1, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d766972746972656e3ce3f16d194cdf7ec5b6a1c3340002d6713ae737efde07617048b4e8c613b516bfcfc104b1a47323663a4b9f50561c0d91cdbc468ad99a8bd7e50535841413a60c753b8455ee89a866cb26d9c637510de5d8c81ac9c8955ff914db9ba43ea938f58191fa31c4876f894f514e167257bdaf5414065f21fea82399a6ed5f3362fb8f346b38bd0ca5e1b9142091ae0d313bacac1d1f2c79f0bbecc096097cc4a06fbd014a61fa1b807d04c2bd9eb222a309aa4aefffc54be34d571896ca6b5356b98c0a1271f47c02bdcb2f55905ce0cad0fb2042cab78f0ac8e1aa7a5b47f99be07fe30645f1c9f717"]) close_range(r0, 0xffffffffffffffff, 0x0) 2m50.582975191s ago: executing program 2 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) listen(0xffffffffffffffff, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 2m39.346922034s ago: executing program 37 (id=783): r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, 0x0, 0x0) shutdown(r1, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d766972746972656e3ce3f16d194cdf7ec5b6a1c3340002d6713ae737efde07617048b4e8c613b516bfcfc104b1a47323663a4b9f50561c0d91cdbc468ad99a8bd7e50535841413a60c753b8455ee89a866cb26d9c637510de5d8c81ac9c8955ff914db9ba43ea938f58191fa31c4876f894f514e167257bdaf5414065f21fea82399a6ed5f3362fb8f346b38bd0ca5e1b9142091ae0d313bacac1d1f2c79f0bbecc096097cc4a06fbd014a61fa1b807d04c2bd9eb222a309aa4aefffc54be34d571896ca6b5356b98c0a1271f47c02bdcb2f55905ce0cad0fb2042cab78f0ac8e1aa7a5b47f99be07fe30645f1c9f717"]) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.624165036s ago: executing program 38 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) listen(0xffffffffffffffff, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 1m14.982075038s ago: executing program 5 (id=928): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000006100)='./file0\x00', 0x8020c0, &(0x7f0000000100)=ANY=[], 0xba, 0x1c3, &(0x7f0000000380)="$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") openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x10, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x6, 0x7, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m11.382542244s ago: executing program 5 (id=932): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xbc}}, {{@in6=@mcast2, 0x0, 0x2b}, 0xa, @in=@empty}}, 0xe8) close(r3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x7}, {0x0, 0xc9, 0x9, 0x9cf}}}}, 0xf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x0, 0x0, 0xffff}, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc) 1m9.962400125s ago: executing program 5 (id=933): r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x30) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = getpid() close_range(r2, r4, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x64000080) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="f9ffffff03000000080000000700000080100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 1m8.249864903s ago: executing program 5 (id=935): r0 = socket$inet(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/97, 0x61) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 1m5.619648723s ago: executing program 5 (id=939): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000006100)='./file0\x00', 0x8020c0, &(0x7f0000000100)=ANY=[], 0xba, 0x1c3, &(0x7f0000000380)="$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") openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x10, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x6, 0x7, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) getsockopt$MRT(r2, 0x0, 0xcf, 0x0, 0x0) 1m0.679558935s ago: executing program 5 (id=945): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000000) unshare(0x2a020480) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x6, 0x7}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) openat$cgroup_pressure(r4, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 45.0993164s ago: executing program 39 (id=945): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000000) unshare(0x2a020480) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x6, 0x7}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) openat$cgroup_pressure(r4, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 17.168373749s ago: executing program 0 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0/file0\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000400)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xce2) get_mempolicy(0x0, &(0x7f00000000c0), 0x970f, &(0x7f0000ffb000/0x3000)=nil, 0x2) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000200)=0x7) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x6b7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c) r5 = semget$private(0x0, 0x7, 0x0) semtimedop(r5, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semop(r5, &(0x7f0000000200)=[{0x3, 0xf}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) 12.408669313s ago: executing program 0 (id=996): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$rds(0x15, 0x5, 0x0) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 10.856534003s ago: executing program 0 (id=997): socket(0x11, 0x800000003, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x6, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000000)=0x20004) write$cgroup_devices(r4, &(0x7f0000010140)=ANY=[], 0xffdd) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c00"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 9.365105702s ago: executing program 8 (id=999): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.186625312s ago: executing program 0 (id=1001): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000"], 0x7c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.951291965s ago: executing program 7 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x308, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x498) 8.904843124s ago: executing program 0 (id=1003): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) 7.148580333s ago: executing program 7 (id=1004): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40), 0x8200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x9) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0x0, "c5003f00"}) getpid() 5.815119537s ago: executing program 7 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3}, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000040)={0x66, 0x1, 'client0\x00', 0x2, "7b86aa149ff94bd2", "b5a6753d21438c5ca95a7d36946ff4ea73820aa3358c0134137a768e1e52e700", 0x6, 0x9}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) 5.546606786s ago: executing program 8 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0/file0\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000400)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xce2) get_mempolicy(0x0, &(0x7f00000000c0), 0x970f, &(0x7f0000ffb000/0x3000)=nil, 0x2) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000200)=0x7) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x6b7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c) r5 = semget$private(0x0, 0x7, 0x0) semtimedop(r5, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semop(r5, &(0x7f0000000200)=[{0x3, 0xf}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) 4.873953884s ago: executing program 7 (id=1007): r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d766972746972656e3ce3f16d194cdf7ec5b6a1c3340002d6713ae737efde07617048b4e8c613b516bfcfc104b1a47323663a4b9f50561c0d91cdbc468ad99a8bd7e50535841413a60c753b8455ee89a866cb26d9c637510de5d8c81ac9c8955ff914db9ba43ea938f58191fa31c4876f894f514e167257bdaf5414065f21fea82399a6ed5f3362fb8f346b38bd0ca5e1b9142091ae0d313bacac1d1f2c79f0bbecc096097cc4a06fbd014a61fa1b807d04c2bd9eb222a309aa4aefffc54be34d571896ca6b5356b98c0a1271f47c02bdcb2f55905ce0cad0fb2042cab78f0ac8e1aa7a5b47f99be07fe30645f1c9f717"]) close_range(r0, 0xffffffffffffffff, 0x0) 3.555711608s ago: executing program 7 (id=1008): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x7ff}, 0x1c) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x88000}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 3.456046204s ago: executing program 0 (id=1009): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000640)={@random="1c0323288bb8", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xcc, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x1, 0xb, 0x9, "b7b2347d3fd3d9d22706e1d97935d6630b0b9e2805b9f768f7ecef7801b37e573a4d790c8d42ad5beb188ade7f6d9f1ce2c37cc80741973ed7cf853b6adc179fd61fe32a513e828792751ed1e9f2e1b639a7e96d949707157d28f3501b37e922843337fe361d7a2be289daa7e04a4094e520c4704f8bcf423527c10493e0a8b0188679d361ca1fea1c56019dc7eaa29cf560bda26ad34e25dd36715682c77e624d5d899606d3c78c18e7baf1441fbc048ff926428d385af2c967b485"}}}}}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x33d}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x900) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 2.528327243s ago: executing program 7 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000340)='/dev/cpu/#/msr\x00', &(0x7f0000000380)="521120207ffd0e0d4af1fe2d1a0c15db8e2429c6f47fe53054ad52720c57019bafb96824aa58c3c3417b8d8a0c23da6b2e90f56be7fc6e80a3c295773d5376a88e41216e14f76d29b0cad6ace58d59b79198f77d332ddc20c053e8b164", 0x5d) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x7) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x6b7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semop(0x0, &(0x7f0000000200)=[{0x3, 0xf}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) 1.926307673s ago: executing program 8 (id=1011): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 1.671607228s ago: executing program 8 (id=1012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) 1.478551204s ago: executing program 8 (id=1013): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280080001", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 0s ago: executing program 8 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000309000/0x1000)=nil, 0x800) shmctl$SHM_LOCK(r3, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x2000000000000094, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = inotify_init1(0x80000) inotify_rm_watch(r4, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci2: command tx timeout [ 386.695167][ T5844] Bluetooth: hci1: command tx timeout [ 387.969708][ T6272] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.940334][ T8368] chnl_net:caif_netlink_parms(): no params data found [ 389.114115][ T5844] Bluetooth: hci2: command tx timeout [ 389.123840][ T6272] bridge_slave_1: left allmulticast mode [ 389.129478][ T6272] bridge_slave_1: left promiscuous mode [ 389.152136][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.192189][ T5844] Bluetooth: hci1: command tx timeout [ 389.218860][ T6272] bridge_slave_0: left allmulticast mode [ 389.241885][ T6272] bridge_slave_0: left promiscuous mode [ 389.248273][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.028528][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.037800][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.051375][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.070290][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.085066][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 390.092991][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.286594][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.298853][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.314221][ T6272] bond0 (unregistering): Released all slaves [ 390.349468][ T8343] chnl_net:caif_netlink_parms(): no params data found [ 390.838756][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.881038][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.911693][ T8368] bridge_slave_0: entered allmulticast mode [ 390.932487][ T8368] bridge_slave_0: entered promiscuous mode [ 390.940418][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.949450][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.970977][ T8368] bridge_slave_1: entered allmulticast mode [ 390.981553][ T8368] bridge_slave_1: entered promiscuous mode [ 391.272228][ T5844] Bluetooth: hci1: command tx timeout [ 391.281916][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.152138][ T5844] Bluetooth: hci3: command tx timeout [ 392.310353][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.452135][ T5844] Bluetooth: hci1: command tx timeout [ 393.560032][ T6272] hsr_slave_0: left promiscuous mode [ 394.453227][ T5844] Bluetooth: hci3: command tx timeout [ 394.533404][ T6272] hsr_slave_1: left promiscuous mode [ 394.562729][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.608371][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.652451][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.022756][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.423166][ T6272] veth1_macvtap: left promiscuous mode [ 395.431584][ T6272] veth0_macvtap: left promiscuous mode [ 395.447608][ T6272] veth1_vlan: left promiscuous mode [ 395.460967][ T6272] veth0_vlan: left promiscuous mode [ 396.482224][ T5844] Bluetooth: hci3: command tx timeout [ 397.003849][ T6272] team0 (unregistering): Port device team_slave_1 removed [ 397.034601][ T6272] team0 (unregistering): Port device team_slave_0 removed [ 397.332367][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 397.474047][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.5.511'. [ 397.506989][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.7.513'. [ 398.064446][ T8368] team0: Port device team_slave_0 added [ 398.101204][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.122139][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.129303][ T8343] bridge_slave_0: entered allmulticast mode [ 398.187750][ T8343] bridge_slave_0: entered promiscuous mode [ 398.393579][ T8368] team0: Port device team_slave_1 added [ 398.509309][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.542545][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.562863][ T5844] Bluetooth: hci3: command tx timeout [ 398.592206][ T8343] bridge_slave_1: entered allmulticast mode [ 398.716238][ T8343] bridge_slave_1: entered promiscuous mode [ 400.622158][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.629143][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.872040][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.339369][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.388936][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.454379][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.544706][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.734977][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 402.663251][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.752631][ T8343] team0: Port device team_slave_0 added [ 403.301286][ T8505] vivid-007: disconnect [ 403.340414][ T8368] hsr_slave_0: entered promiscuous mode [ 403.376994][ T8368] hsr_slave_1: entered promiscuous mode [ 403.423892][ T8343] team0: Port device team_slave_1 added [ 403.561360][ T8496] vivid-007: reconnect [ 403.572162][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.590139][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.676677][ T8343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.812312][ T5898] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 404.233346][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.905907][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.959945][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 405.072482][ T5898] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 405.083428][ T8343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.091754][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.151180][ T5898] usb 6-1: Product: syz [ 405.172663][ T5898] usb 6-1: Manufacturer: syz [ 405.177894][ T5898] usb 6-1: SerialNumber: syz [ 405.303891][ T5898] usb 6-1: config 0 descriptor?? [ 405.671403][ T5898] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 406.228534][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 406.445816][ T8343] hsr_slave_0: entered promiscuous mode [ 406.459039][ T8343] hsr_slave_1: entered promiscuous mode [ 406.465355][ T8343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.473505][ T5918] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 406.481488][ T8343] Cannot create hsr debugfs directory [ 407.410559][ T6272] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.453333][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.480194][ T5918] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 407.509674][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.615544][ T6272] bridge0: port 3(netdevsim2) entered disabled state [ 407.621185][ T5918] usb 8-1: config 0 descriptor?? [ 407.723375][ T6272] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 407.733193][ T6272] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 407.749514][ T6272] bridge0: port 3(netdevsim2) entered disabled state [ 408.294860][ T5918] usbhid 8-1:0.0: can't add hid device: -71 [ 408.295979][ T6272] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.305813][ T5918] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 408.374770][ T5918] usb 8-1: USB disconnect, device number 3 [ 408.406333][ T5898] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 408.478990][ T8368] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 408.524519][ T8368] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 408.600763][ T5918] usb 6-1: USB disconnect, device number 9 [ 408.731562][ T6272] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.917464][ T6272] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.959278][ T8368] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 409.156112][ T8563] ip6t_rpfilter: unknown options [ 409.319177][ T8368] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 409.440557][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.477109][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.487799][ T8410] bridge_slave_0: entered allmulticast mode [ 409.504299][ T8410] bridge_slave_0: entered promiscuous mode [ 410.557840][ T8578] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 410.832148][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.839305][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.311056][ T8410] bridge_slave_1: entered allmulticast mode [ 411.319693][ T8410] bridge_slave_1: entered promiscuous mode [ 412.125821][ T6272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.176314][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.233846][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.315116][ T6272] bridge0: port 3(netdevsim2) entered disabled state [ 412.330494][ T6272] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode [ 412.349529][ T6272] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 412.382283][ T6272] bridge0: port 3(netdevsim2) entered disabled state [ 412.633106][ T6272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.673328][ T6272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.773782][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.7.541'. [ 413.785318][ T8410] team0: Port device team_slave_0 added [ 413.837840][ T8602] bridge0: entered promiscuous mode [ 413.901551][ T8602] bridge0: left promiscuous mode [ 414.036056][ T8410] team0: Port device team_slave_1 added [ 414.123771][ T6272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.193915][ T8343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 415.032499][ T8615] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 415.195434][ T8343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 415.482126][ T26] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 415.513938][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.520920][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.611214][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.581765][ T8343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 416.646539][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.655124][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.662140][ T26] usb 8-1: Using ep0 maxpacket: 8 [ 416.681034][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.681623][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.739966][ T8343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 416.780903][ T26] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.833344][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.845683][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.863448][ T26] usb 8-1: Product: syz [ 416.867655][ T26] usb 8-1: Manufacturer: syz [ 416.914173][ T26] usb 8-1: SerialNumber: syz [ 416.960568][ T26] usb 8-1: config 0 descriptor?? [ 417.056943][ T8410] hsr_slave_0: entered promiscuous mode [ 417.102963][ T8410] hsr_slave_1: entered promiscuous mode [ 417.109271][ T8410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.163806][ T8410] Cannot create hsr debugfs directory [ 417.201656][ T26] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 417.239831][ T8637] ip6t_rpfilter: unknown options [ 417.244468][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.286321][ T6272] bridge_slave_1: left allmulticast mode [ 417.300206][ T6272] bridge_slave_1: left promiscuous mode [ 417.367294][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.492676][ T6272] bridge_slave_0: left allmulticast mode [ 417.638693][ T6272] bridge_slave_0: left promiscuous mode [ 417.652539][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.713527][ T6272] bridge_slave_1: left allmulticast mode [ 417.719256][ T6272] bridge_slave_1: left promiscuous mode [ 417.735336][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.778259][ T6272] bridge_slave_0: left allmulticast mode [ 417.806947][ T6272] bridge_slave_0: left promiscuous mode [ 417.823141][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.777742][ T26] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 418.860047][ T26] usb 8-1: USB disconnect, device number 4 [ 419.262954][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 420.093834][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.105073][ T10] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 420.321042][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.342115][ T10] usb 6-1: config 0 descriptor?? [ 421.172354][ T8663] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 422.084066][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.099930][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.127739][ T6272] bond0 (unregistering): Released all slaves [ 422.310104][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.370765][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.390413][ T6272] bond0 (unregistering): Released all slaves [ 422.430151][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 422.475086][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.482215][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.628681][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.635841][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.692792][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 422.698776][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 422.726397][ T8673] ip6t_rpfilter: unknown options [ 422.782113][ T10] usb 6-1: USB disconnect, device number 10 [ 425.164940][ T6272] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 425.552348][ T8699] ip6t_rpfilter: unknown options [ 427.084568][ T8707] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 427.212138][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.556'. [ 432.275532][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.298532][ T8343] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.104947][ T8744] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 435.924078][ T8767] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 436.329196][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.338028][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.346982][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.363613][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.372418][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 436.380176][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.143358][ T6272] hsr_slave_0: left promiscuous mode [ 437.172017][ T6272] hsr_slave_1: left promiscuous mode [ 437.232223][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.239660][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.363669][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.425963][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.600049][ T6272] hsr_slave_0: left promiscuous mode [ 437.688589][ T6272] hsr_slave_1: left promiscuous mode [ 438.152597][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.173566][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.249848][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.272150][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.440130][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.449751][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.457493][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.468282][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.483422][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.490694][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.548011][ T6272] veth1_macvtap: left promiscuous mode [ 438.562324][ T5849] Bluetooth: hci6: command tx timeout [ 438.580160][ T6272] veth0_macvtap: left promiscuous mode [ 438.617555][ T6272] veth1_vlan: left promiscuous mode [ 438.647955][ T6272] veth0_vlan: left promiscuous mode [ 438.696780][ T6272] veth1_macvtap: left promiscuous mode [ 438.722791][ T6272] veth0_macvtap: left promiscuous mode [ 438.728401][ T6272] veth1_vlan: left promiscuous mode [ 438.772971][ T6272] veth0_vlan: left promiscuous mode [ 439.472143][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 439.932954][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.939774][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.552185][ T5849] Bluetooth: hci2: command tx timeout [ 440.632222][ T5849] Bluetooth: hci6: command tx timeout [ 440.873282][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.884453][ T9] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 440.905172][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.881764][ T9] usb 8-1: config 0 descriptor?? [ 441.973421][ T9] usb 8-1: can't set config #0, error -71 [ 442.005303][ T9] usb 8-1: USB disconnect, device number 5 [ 442.577657][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.7.575'. [ 442.632147][ T5849] Bluetooth: hci2: command tx timeout [ 442.682218][ T8630] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 442.712003][ T5849] Bluetooth: hci6: command tx timeout [ 443.671232][ T8817] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 443.883619][ T8630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.288051][ T8630] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 444.305885][ T8630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.322691][ T8630] usb 6-1: config 0 descriptor?? [ 444.401328][ T6272] team0 (unregistering): Port device team_slave_1 removed [ 444.439616][ T6272] team0 (unregistering): Port device team_slave_0 removed [ 444.599738][ T8630] usbhid 6-1:0.0: can't add hid device: -71 [ 444.611593][ T8630] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 444.626043][ T8630] usb 6-1: USB disconnect, device number 11 [ 444.722397][ T5849] Bluetooth: hci2: command tx timeout [ 444.798077][ T5849] Bluetooth: hci6: command tx timeout [ 445.678019][ T6272] team0 (unregistering): Port device team_slave_1 removed [ 445.798653][ T6272] team0 (unregistering): Port device team_slave_0 removed [ 446.750827][ T8813] bridge0: entered promiscuous mode [ 446.760551][ T8813] bridge0: left promiscuous mode [ 446.792335][ T5849] Bluetooth: hci2: command tx timeout [ 448.714952][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 449.518747][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 449.626644][ T8630] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 449.688188][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.697733][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.705656][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.715611][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.715614][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.737060][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 449.744627][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.754966][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.862462][ T8771] bridge_slave_0: entered allmulticast mode [ 449.869744][ T8771] bridge_slave_0: entered promiscuous mode [ 449.877693][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.884869][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.892048][ T8771] bridge_slave_1: entered allmulticast mode [ 449.899060][ T8771] bridge_slave_1: entered promiscuous mode [ 450.003431][ T8630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.028886][ T8630] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 450.997816][ T8630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.213874][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.226493][ T8630] usb 8-1: config 0 descriptor?? [ 451.293672][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.374249][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.383119][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.390432][ T8792] bridge_slave_0: entered allmulticast mode [ 451.404525][ T8792] bridge_slave_0: entered promiscuous mode [ 451.470456][ T8630] usbhid 8-1:0.0: can't add hid device: -71 [ 451.496333][ T8630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 451.544690][ T8771] team0: Port device team_slave_0 added [ 451.553710][ T8630] usb 8-1: USB disconnect, device number 6 [ 451.619641][ T8771] team0: Port device team_slave_1 added [ 451.643614][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.661120][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.692112][ T8792] bridge_slave_1: entered allmulticast mode [ 451.717329][ T8792] bridge_slave_1: entered promiscuous mode [ 452.122593][ T5849] Bluetooth: hci1: command tx timeout [ 452.775768][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.996180][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.097173][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.132933][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 453.285311][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.310799][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.613333][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.661495][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.693916][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.704115][ T10] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 453.717607][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.792052][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.827144][ T10] usb 8-1: config 0 descriptor?? [ 453.967791][ T8792] team0: Port device team_slave_0 added [ 453.978599][ T8792] team0: Port device team_slave_1 added [ 454.019564][ T8771] hsr_slave_0: entered promiscuous mode [ 454.131620][ T8771] hsr_slave_1: entered promiscuous mode [ 454.140788][ T8771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.152114][ T5849] Bluetooth: hci1: command tx timeout [ 454.180867][ T8771] Cannot create hsr debugfs directory [ 454.373033][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.384130][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.410062][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.416948][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.440418][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.448864][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.482961][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.667200][ T8792] hsr_slave_0: entered promiscuous mode [ 454.678948][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.594'. [ 454.683075][ T8792] hsr_slave_1: entered promiscuous mode [ 454.706159][ T8792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.716261][ T8792] Cannot create hsr debugfs directory [ 454.810789][ T8923] bridge0: entered promiscuous mode [ 454.820731][ T8923] bridge0: left promiscuous mode [ 455.804818][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 455.810071][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 455.810857][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 455.942648][ T10] usb 8-1: USB disconnect, device number 7 [ 456.942014][ T8939] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 457.081344][ T5849] Bluetooth: hci1: command tx timeout [ 457.201570][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.596'. [ 459.065037][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.104333][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.122204][ T8877] bridge_slave_0: entered allmulticast mode [ 459.123057][ T5844] Bluetooth: hci1: command tx timeout [ 459.129232][ T8877] bridge_slave_0: entered promiscuous mode [ 459.160307][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.5.600'. [ 459.188903][ T8953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.206390][ T8953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 459.222153][ T8953] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 459.228347][ T8953] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 459.235107][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.242361][ T8953] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 459.248341][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.258030][ T8953] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 459.265595][ T8877] bridge_slave_1: entered allmulticast mode [ 459.276458][ T8877] bridge_slave_1: entered promiscuous mode [ 459.297599][ T8953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.305918][ T8953] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 459.325726][ T8953] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 459.355893][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.383298][ T8953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.482371][ T8953] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.489247][ T8953] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.520772][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.648000][ T8877] team0: Port device team_slave_0 added [ 459.708331][ T8877] team0: Port device team_slave_1 added [ 459.912211][ T5849] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 460.124390][ T2986] bridge_slave_1: left allmulticast mode [ 460.130074][ T2986] bridge_slave_1: left promiscuous mode [ 460.155626][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.174238][ T2986] bridge_slave_0: left allmulticast mode [ 460.179888][ T2986] bridge_slave_0: left promiscuous mode [ 460.192106][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.212406][ T2986] bridge_slave_1: left allmulticast mode [ 460.218058][ T2986] bridge_slave_1: left promiscuous mode [ 460.323035][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.586050][ T2986] bridge_slave_0: left allmulticast mode [ 460.592602][ T2986] bridge_slave_0: left promiscuous mode [ 460.599039][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.664660][ T8970] fuse: Unknown parameter 'grou00000000000000000000' [ 460.792142][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.995906][ T8630] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 461.272126][ T5849] Bluetooth: hci6: command 0x0c1a tx timeout [ 461.278305][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 461.284411][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 461.312255][ T2986] bridge_slave_1: left allmulticast mode [ 461.329465][ T2986] bridge_slave_1: left promiscuous mode [ 461.352134][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 461.352664][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.379787][ T2986] bridge_slave_0: left allmulticast mode [ 461.386154][ T2986] bridge_slave_0: left promiscuous mode [ 461.397520][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.432144][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.476530][ T8630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.534336][ T8630] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 461.630012][ T8630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.885184][ T8630] usb 6-1: config 0 descriptor?? [ 463.352184][ T5140] Bluetooth: hci6: command 0x0c1a tx timeout [ 463.444256][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 463.519524][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.621826][ T8630] usbhid 6-1:0.0: can't add hid device: -71 [ 463.661235][ T8630] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 463.714526][ T8630] usb 6-1: USB disconnect, device number 12 [ 464.379901][ T8987] Falling back ldisc for ttyS3. [ 465.432168][ T5140] Bluetooth: hci6: command 0x0c1a tx timeout [ 465.512125][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 465.602352][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 466.208354][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.727805][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.757178][ T2986] bond0 (unregistering): Released all slaves [ 467.965929][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.102598][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.113167][ T2986] bond0 (unregistering): Released all slaves [ 469.481066][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.494163][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.510988][ T2986] bond0 (unregistering): Released all slaves [ 469.521741][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.530431][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.556555][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.588304][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.598974][ T8630] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 469.611164][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.638239][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.650544][ T8771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.724435][ T9008] netlink: 'syz.5.614': attribute type 4 has an invalid length. [ 469.756447][ T8771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.783672][ T8630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.794789][ T8630] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 469.832408][ T8630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.862876][ T8630] usb 8-1: config 0 descriptor?? [ 469.948814][ T2986] hsr_slave_0: left promiscuous mode [ 469.959693][ T2986] hsr_slave_1: left promiscuous mode [ 469.979759][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.351949][ T9023] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 471.402594][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.772346][ T8630] usbhid 8-1:0.0: can't add hid device: -71 [ 471.778619][ T8630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 471.845394][ T8630] usb 8-1: USB disconnect, device number 8 [ 471.865563][ T2986] hsr_slave_0: left promiscuous mode [ 472.048309][ T2986] hsr_slave_1: left promiscuous mode [ 472.062529][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.901168][ T9035] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 473.007872][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.256366][ T2986] hsr_slave_0: left promiscuous mode [ 473.581576][ T2986] hsr_slave_1: left promiscuous mode [ 473.597727][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.614656][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.631052][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 474.802818][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 477.439188][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 478.703338][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 479.918194][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 479.961156][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 480.422740][ T8771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 480.494518][ T8771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 480.748729][ T8877] hsr_slave_0: entered promiscuous mode [ 480.761263][ T8877] hsr_slave_1: entered promiscuous mode [ 482.152453][ T5900] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 482.475009][ T8792] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 482.596200][ T8792] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 482.620112][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.628935][ T8792] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 482.655145][ T8792] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 482.687791][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.699805][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.711378][ T5900] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 482.721587][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.736045][ T5900] usb 6-1: config 0 descriptor?? [ 482.783098][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.790207][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.810230][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.817333][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.872078][ T5849] Bluetooth: hci3: command 0x1003 tx timeout [ 482.878799][ T5140] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 482.952359][ T5900] usbhid 6-1:0.0: can't add hid device: -71 [ 482.969499][ T5900] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 482.998843][ T5900] usb 6-1: USB disconnect, device number 13 [ 483.260724][ T9099] netlink: 'syz.7.638': attribute type 1 has an invalid length. [ 483.301025][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.638'. [ 483.335238][ T9092] ceph: No mds server is up or the cluster is laggy [ 483.346665][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.360571][ T9094] ceph: No mds server is up or the cluster is laggy [ 483.432118][ T8877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.462750][ T8877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.533925][ T8877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.560771][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.637269][ T8877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.719448][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.726623][ T6250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.014004][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.021123][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.568845][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.720038][ T8792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.765259][ T8792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.812084][ T5900] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 484.976336][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.986086][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.018388][ T5900] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 485.036319][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.053371][ T9120] ip6t_rpfilter: unknown options [ 485.071816][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.114631][ T5900] usb 8-1: config 0 descriptor?? [ 485.124886][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.132010][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.151828][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.158941][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.360795][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.699276][ T8771] veth0_vlan: entered promiscuous mode [ 485.754387][ T8771] veth1_vlan: entered promiscuous mode [ 485.876530][ T8771] veth0_macvtap: entered promiscuous mode [ 485.919202][ T8771] veth1_macvtap: entered promiscuous mode [ 485.985773][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.005655][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.018765][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.029927][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.040678][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.059339][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.121344][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.188831][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.222197][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.268625][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.302238][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.344701][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.369792][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.394309][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.428914][ T8771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.467474][ T8771] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.494865][ T8771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.527024][ T8771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.715203][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.878104][ T5900] usbhid 8-1:0.0: can't add hid device: -71 [ 486.911422][ T5900] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 486.976324][ T5900] usb 8-1: USB disconnect, device number 9 [ 486.993971][ T8792] veth0_vlan: entered promiscuous mode [ 487.126998][ T9142] loop0: detected capacity change from 0 to 128 [ 487.993553][ T5140] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 488.002340][ T8877] veth0_vlan: entered promiscuous mode [ 488.018434][ T8877] veth1_vlan: entered promiscuous mode [ 488.282392][ T9142] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 488.295253][ T9142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.342365][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.345948][ T8792] veth1_vlan: entered promiscuous mode [ 489.350195][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.626725][ T8877] veth0_macvtap: entered promiscuous mode [ 489.661765][ T8792] veth0_macvtap: entered promiscuous mode [ 489.667817][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.697339][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.771073][ T8877] veth1_macvtap: entered promiscuous mode [ 489.907339][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.049520][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.110461][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.189224][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.275708][ T5900] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 490.281644][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.385866][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.409319][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.441378][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.482184][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.522208][ T5900] usb 8-1: Using ep0 maxpacket: 8 [ 490.542401][ T5900] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 490.554016][ T8792] veth1_macvtap: entered promiscuous mode [ 490.560849][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.573399][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.593429][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.629395][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.632078][ T5900] usb 8-1: Product: syz [ 490.683883][ T5900] usb 8-1: Manufacturer: syz [ 490.688565][ T5900] usb 8-1: SerialNumber: syz [ 490.696022][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.731442][ T5900] usb 8-1: config 0 descriptor?? [ 490.781374][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.850013][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.892181][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.004833][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.020916][ T5900] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 491.266866][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.380226][ T8877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.437706][ T8877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.489726][ T8877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.533868][ T8877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.646599][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.672365][ T970] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 491.687893][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.724270][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.734925][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.744895][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.755722][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.765882][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.776885][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.799428][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.819629][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.833715][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.862626][ T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.909653][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.915637][ T970] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 492.022187][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.056263][ T970] usb 6-1: config 0 descriptor?? [ 492.062124][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.129915][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.170445][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.191778][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.206123][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.237262][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.841758][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.350272][ T5900] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 493.352000][ T970] usbhid 6-1:0.0: can't add hid device: -71 [ 493.382043][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.410564][ T970] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 493.414243][ T5900] usb 8-1: USB disconnect, device number 10 [ 493.432045][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.475827][ T970] usb 6-1: USB disconnect, device number 14 [ 493.503263][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.588101][ T8792] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.600784][ T8792] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.610427][ T8792] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.636691][ T8792] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.123528][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.131380][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.382340][ T9201] loop0: detected capacity change from 0 to 2048 [ 494.428863][ T9201] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 494.680804][ T9201] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 495.041097][ T9201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.070363][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.119508][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.182713][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.211794][ T9217] loop5: detected capacity change from 0 to 512 [ 495.251479][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.253366][ T5900] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 495.302948][ T9217] EXT4-fs: Ignoring removed mblk_io_submit option [ 495.343123][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.366081][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.382646][ T9217] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 495.533922][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.544543][ T9217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a854e11c, mo2=0002] [ 495.552683][ T5900] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 495.552717][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.554710][ T5900] usb 8-1: config 0 descriptor?? [ 495.590845][ T9217] System zones: 1-12 [ 495.610964][ T9217] EXT4-fs (loop5): orphan cleanup on readonly fs [ 495.625373][ T9217] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.656: Inode bitmap for bg 0 marked uninitialized [ 495.654670][ T9217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 496.369502][ T9235] loop9: detected capacity change from 0 to 4096 [ 497.161218][ T9235] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.201565][ T9235] fs-verity (loop9, inode 16): fs-verity keyring is empty, rejecting signed file! [ 497.648373][ T9233] netlink: 'syz.2.658': attribute type 4 has an invalid length. [ 497.966191][ T5900] usbhid 8-1:0.0: can't add hid device: -71 [ 498.002062][ T5900] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 498.065874][ T5900] usb 8-1: USB disconnect, device number 11 [ 498.133305][ T8792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.519916][ T9252] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 499.673862][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.7.661'. [ 501.389066][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397160][ T8630] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 501.397364][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.273920][ T8630] usb 9-1: config 0 has an invalid interface number: 23 but max is 0 [ 502.325167][ T8630] usb 9-1: config 0 has no interface number 0 [ 502.372403][ T8630] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 502.392176][ T8630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.400549][ T8630] usb 9-1: Product: syz [ 502.405229][ T8630] usb 9-1: Manufacturer: syz [ 502.409840][ T8630] usb 9-1: SerialNumber: syz [ 502.429857][ T8630] usb 9-1: config 0 descriptor?? [ 502.443907][ T8630] ftdi_sio 9-1:0.23: FTDI USB Serial Device converter detected [ 502.523594][ T8630] usb 9-1: Detected SIO [ 502.545104][ T8630] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 502.691833][ T8630] usb 9-1: USB disconnect, device number 2 [ 502.731793][ T8630] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 502.768759][ T8630] ftdi_sio 9-1:0.23: device disconnected [ 503.810482][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.806222][ T9307] loop2: detected capacity change from 0 to 2048 [ 505.847704][ T9307] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 505.888293][ T9307] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 506.425766][ T9307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.502152][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 509.352005][ T9332] mkiss: ax0: crc mode is auto. [ 511.347205][ T5900] usb 3-1: device descriptor read/all, error -71 [ 517.662161][ T9383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.720279][ T9383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.757003][ T9383] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 517.822561][ T9383] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 517.828572][ T9383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.932165][ T9383] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 518.544258][ T9413] vivid-007: disconnect [ 519.672017][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.750780][ T9399] vivid-007: reconnect [ 519.755235][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 519.836127][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.842233][ T5140] Bluetooth: hci6: command 0x0c1a tx timeout [ 519.848256][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 520.105876][ T9422] loop5: detected capacity change from 0 to 128 [ 520.128830][ T5140] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 520.136686][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.169594][ T9422] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 520.191806][ T9422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.875995][ T9432] loop8: detected capacity change from 0 to 128 [ 522.142379][ T5849] Bluetooth: hci6: unexpected event for opcode 0x1407 [ 522.295706][ T9432] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 522.748841][ T9432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.314385][ T9441] loop5: detected capacity change from 0 to 4096 [ 524.035317][ T9423] netlink: 'syz.7.697': attribute type 4 has an invalid length. [ 524.043128][ T8630] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 525.031332][ T9441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.060695][ T8630] usb 10-1: Using ep0 maxpacket: 8 [ 525.337862][ T8630] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 525.452274][ T8630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.514652][ T8630] usb 10-1: Product: syz [ 525.518920][ T8630] usb 10-1: Manufacturer: syz [ 525.824352][ T8630] usb 10-1: SerialNumber: syz [ 525.989329][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.176828][ T8630] usb 10-1: config 0 descriptor?? [ 526.751285][ T8630] usb 10-1: can't set config #0, error -71 [ 526.792239][ T8630] usb 10-1: USB disconnect, device number 2 [ 527.860955][ T9466] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 528.173289][ T9470] loop0: detected capacity change from 0 to 4096 [ 528.302079][ T9470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.385415][ T9470] fs-verity (loop0, inode 16): fs-verity keyring is empty, rejecting signed file! [ 529.002378][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.572022][ T8630] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 529.581414][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 529.581432][ T30] audit: type=1326 audit(1741848011.097:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 529.692043][ T30] audit: type=1326 audit(1741848011.097:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 529.699996][ T9490] ip6t_rpfilter: unknown options [ 529.966907][ T8630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.998143][ T9497] bridge0: port 3(netdevsim2) entered blocking state [ 530.005347][ T9497] bridge0: port 3(netdevsim2) entered disabled state [ 530.017149][ T9497] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 530.042431][ T9497] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 530.063448][ T9497] bridge0: port 3(netdevsim2) entered blocking state [ 530.070465][ T9497] bridge0: port 3(netdevsim2) entered forwarding state [ 530.079850][ T30] audit: type=1326 audit(1741848011.097:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 530.218488][ T8630] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 530.268926][ T8630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.285694][ T30] audit: type=1326 audit(1741848011.097:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 530.322424][ T8630] usb 6-1: config 0 descriptor?? [ 530.333751][ T30] audit: type=1326 audit(1741848011.097:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 530.363854][ T30] audit: type=1326 audit(1741848011.137:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 530.943297][ T30] audit: type=1326 audit(1741848011.137:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 531.046387][ T8630] usbhid 6-1:0.0: can't add hid device: -71 [ 531.058681][ T8630] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 531.072002][ T30] audit: type=1326 audit(1741848011.137:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 531.110163][ T8630] usb 6-1: USB disconnect, device number 15 [ 531.155010][ T30] audit: type=1326 audit(1741848011.137:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 531.282043][ T30] audit: type=1326 audit(1741848011.137:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37358d169 code=0x7ffc0000 [ 532.497413][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.7.713'. [ 533.424900][ T9523] mkiss: ax0: crc mode is auto. [ 536.152363][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 537.088366][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.118020][ T9] usb 9-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 537.169343][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.233074][ T9] usb 9-1: config 0 descriptor?? [ 537.537331][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 538.495694][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 538.540500][ T9] usb 9-1: USB disconnect, device number 3 [ 539.408735][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 539.408757][ T30] audit: type=1326 audit(1741848020.927:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 539.554827][ T30] audit: type=1326 audit(1741848020.927:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 539.684569][ T30] audit: type=1326 audit(1741848020.927:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 539.810533][ T30] audit: type=1326 audit(1741848020.927:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 539.880027][ T30] audit: type=1326 audit(1741848020.927:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 540.182040][ T30] audit: type=1326 audit(1741848020.927:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 540.210584][ T30] audit: type=1326 audit(1741848020.927:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 540.256829][ T30] audit: type=1326 audit(1741848020.927:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 540.389049][ T9590] vivid-007: disconnect [ 540.824803][ T9581] vivid-007: reconnect [ 540.839316][ T30] audit: type=1326 audit(1741848020.927:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 541.050890][ T30] audit: type=1326 audit(1741848020.927:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.9.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f4f15b8d169 code=0x7ffc0000 [ 541.098161][ T9592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.162428][ T9592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 541.262297][ T9592] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 541.382499][ T9592] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 541.388533][ T9592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.581261][ T9606] mkiss: ax0: crc mode is auto. [ 542.573993][ T9592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.112152][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.193724][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout [ 543.357509][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 543.432221][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 543.439462][ T5849] Bluetooth: hci6: command 0x0c1a tx timeout [ 544.642875][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 545.075805][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 545.088244][ T9633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.131760][ T5140] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 546.118024][ T9638] loop2: detected capacity change from 0 to 512 [ 546.310990][ T9638] EXT4-fs: Ignoring removed mblk_io_submit option [ 546.551396][ T9638] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 547.291960][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 547.476333][ T9638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a854e11c, mo2=0002] [ 547.513287][ T9638] System zones: 1-12 [ 547.552198][ T9638] EXT4-fs (loop2): orphan cleanup on readonly fs [ 547.560436][ T9638] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.736: Inode bitmap for bg 0 marked uninitialized [ 547.789291][ T5140] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11 [ 547.880483][ T9638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 547.912948][ T9654] ip6t_rpfilter: unknown options [ 549.352076][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 549.642813][ T9669] loop5: detected capacity change from 0 to 4096 [ 549.792220][ T9669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.840834][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 549.869580][ T9669] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file! [ 550.876887][ T9682] loop7: detected capacity change from 0 to 512 [ 550.889903][ T9682] EXT4-fs: Ignoring removed mblk_io_submit option [ 550.942777][ T9682] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 551.047798][ T9682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a854e11c, mo2=0002] [ 551.056210][ T9682] System zones: 1-12 [ 551.061140][ T9682] EXT4-fs (loop7): orphan cleanup on readonly fs [ 551.067541][ T9682] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.745: Inode bitmap for bg 0 marked uninitialized [ 551.091148][ T9682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 551.161694][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.407232][ T9683] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 551.852288][ T7405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.913593][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 556.479015][ T9714] fuse: Bad value for 'fd' [ 557.105557][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 557.105572][ T30] audit: type=1326 audit(1741848038.617:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 557.186355][ T30] audit: type=1326 audit(1741848038.617:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 557.341276][ T5140] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 557.349498][ T9726] loop9: detected capacity change from 0 to 128 [ 557.389828][ T9726] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 557.497853][ T9726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.608966][ T8877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.886455][ T30] audit: type=1326 audit(1741848038.807:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f3ad8bad0 code=0x7ffc0000 [ 559.248421][ T30] audit: type=1326 audit(1741848038.807:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f3ad8bad0 code=0x7ffc0000 [ 559.412165][ T30] audit: type=1326 audit(1741848038.807:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 559.438514][ T30] audit: type=1326 audit(1741848038.827:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 559.533658][ T30] audit: type=1326 audit(1741848038.827:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 559.865648][ T30] audit: type=1326 audit(1741848041.057:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 560.918164][ T30] audit: type=1326 audit(1741848041.057:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3ad8d169 code=0x7ffc0000 [ 562.758579][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.766290][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.804174][ T9765] vivid-007: disconnect [ 562.933020][ T9749] vivid-007: reconnect [ 563.390108][ T9771] loop5: detected capacity change from 0 to 512 [ 563.399061][ T9771] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.796849][ T9771] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 563.823578][ T9771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a854e11c, mo2=0002] [ 563.831605][ T9771] System zones: 1-12 [ 563.837599][ T9771] EXT4-fs (loop5): orphan cleanup on readonly fs [ 563.843997][ T9771] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.765: Inode bitmap for bg 0 marked uninitialized [ 563.858227][ T9771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.927182][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.960858][ T9819] fuse: Bad value for 'fd' [ 568.731408][ T9831] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 569.562424][ T9827] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 569.725409][ T9827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 569.732611][ T9827] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 569.744573][ T9827] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 569.847521][ T9827] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 569.928030][ T9827] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.158627][ T9827] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 570.208820][ T9827] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.612570][ T5979] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 571.473278][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.792001][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 571.792059][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 571.832686][ T5979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.857365][ T5979] usb 9-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 571.912570][ T5979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.002023][ T5140] Bluetooth: hci6: command 0x0c1a tx timeout [ 572.008927][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 572.242091][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 572.787170][ T5979] usb 9-1: config 0 descriptor?? [ 572.823391][ T5979] usb 9-1: can't set config #0, error -71 [ 572.867718][ T5979] usb 9-1: USB disconnect, device number 4 [ 572.964099][ T9872] ip6t_rpfilter: unknown options [ 573.832049][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 574.071978][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 576.653570][ T9901] fuse: Bad value for 'rootmode' [ 577.654953][ T9902] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 578.362613][ T9925] vivid-007: disconnect [ 578.477455][ T9928] mkiss: ax0: crc mode is auto. [ 579.113325][ T9911] vivid-007: reconnect [ 580.061500][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.794'. [ 582.562035][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 582.762734][ T9958] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.798'. [ 582.781271][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.811537][ T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 582.841023][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.893465][ T9] usb 6-1: config 0 descriptor?? [ 585.038395][ T5140] Bluetooth: hci6: unexpected event for opcode 0x042f [ 585.046224][ T5140] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 586.556736][ T9980] fuse: Bad value for 'rootmode' [ 587.283341][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 587.289870][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 587.313733][ T9] usb 6-1: USB disconnect, device number 16 [ 588.952331][ T8630] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 589.773564][T10002] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 589.958061][ T8630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.968242][ T8630] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 590.007605][ T8630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.273115][ T8630] usb 8-1: config 0 descriptor?? [ 591.652024][ T8630] usbhid 8-1:0.0: can't add hid device: -71 [ 592.192252][ T8630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 592.279748][ T8630] usb 8-1: USB disconnect, device number 12 [ 593.532015][ T8630] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 593.582173][ T8766] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 593.763716][ T8630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.803454][ T8766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.816009][ T8630] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 593.834607][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.838657][ T8766] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 593.844837][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.858653][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.867144][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.871794][ T8630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.874824][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 593.889660][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.924195][ T8766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.956258][ T8630] usb 8-1: config 0 descriptor?? [ 594.043968][ T8766] usb 6-1: config 0 descriptor?? [ 594.385587][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.633813][ T36] bridge0: port 3(netdevsim2) entered disabled state [ 596.024027][T10047] fuse: Bad value for 'rootmode' [ 596.062992][ T5849] Bluetooth: hci2: command tx timeout [ 596.782666][ T8766] usbhid 6-1:0.0: can't add hid device: -71 [ 596.788693][ T8766] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 596.823778][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): left allmulticast mode [ 596.835039][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 596.843627][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.854301][ T8630] usbhid 8-1:0.0: can't add hid device: -71 [ 596.860291][ T8630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 596.868407][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): left promiscuous mode [ 596.880929][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.890391][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.898205][ T5140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 596.905497][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.914495][ T36] bridge0: port 3(netdevsim2) entered disabled state [ 596.942926][ T8766] usb 6-1: USB disconnect, device number 17 [ 597.008829][ T8630] usb 8-1: USB disconnect, device number 13 [ 597.028638][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.111997][ T5849] Bluetooth: hci2: command tx timeout [ 598.151828][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.255737][T10065] loop5: detected capacity change from 0 to 512 [ 598.276100][T10065] EXT4-fs: Ignoring removed mblk_io_submit option [ 598.314107][T10065] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 598.394433][T10065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a854e11c, mo2=0002] [ 598.403042][T10065] System zones: 1-12 [ 598.408254][T10065] EXT4-fs (loop5): orphan cleanup on readonly fs [ 598.414851][T10065] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.820: Inode bitmap for bg 0 marked uninitialized [ 598.465412][T10065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.035711][ T5849] Bluetooth: hci1: command tx timeout [ 599.105257][T10067] loop8: detected capacity change from 0 to 2048 [ 599.126618][T10067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.160319][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.194450][ T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.554523][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'. [ 599.648181][T10087] bond0: entered promiscuous mode [ 599.662037][T10087] bond_slave_0: entered promiscuous mode [ 599.679380][T10087] bond_slave_1: entered promiscuous mode [ 599.707699][T10087] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 599.755852][T10087] bond0: left promiscuous mode [ 599.799003][T10087] bond_slave_0: left promiscuous mode [ 600.163539][T10087] bond_slave_1: left promiscuous mode [ 600.255284][ T5849] Bluetooth: hci2: command tx timeout [ 601.113506][ T5849] Bluetooth: hci1: command tx timeout [ 601.266478][T10104] fuse: Unknown parameter 'use00000000000000000000' [ 602.039181][ T36] bridge_slave_1: left allmulticast mode [ 602.236961][ T36] bridge_slave_1: left promiscuous mode [ 602.268277][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.312013][ T5140] Bluetooth: hci2: command tx timeout [ 603.192936][ T5140] Bluetooth: hci1: command tx timeout [ 603.362590][ T36] bridge_slave_0: left allmulticast mode [ 603.368272][ T36] bridge_slave_0: left promiscuous mode [ 603.448492][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.834904][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.833'. [ 605.106505][T10123] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 605.439825][ T5140] Bluetooth: hci1: command tx timeout [ 606.003338][ T5140] Bluetooth: hci6: unexpected event for opcode 0x042f [ 606.193057][ T5140] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 606.354784][T10133] fuse: Bad value for 'fd' [ 608.096845][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.460211][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.586250][ T36] bond0 (unregistering): Released all slaves [ 608.879021][T10027] chnl_net:caif_netlink_parms(): no params data found [ 610.637425][T10159] fuse: Unknown parameter 'use00000000000000000000' [ 613.095613][ T30] audit: type=1326 audit(1741848094.617:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.144805][ T30] audit: type=1326 audit(1741848094.637:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.174406][ T30] audit: type=1326 audit(1741848094.637:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.228586][ T30] audit: type=1326 audit(1741848094.637:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.264907][ T30] audit: type=1326 audit(1741848094.637:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.332192][ T30] audit: type=1326 audit(1741848094.637:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.931550][ T30] audit: type=1326 audit(1741848094.637:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 613.982276][ T30] audit: type=1326 audit(1741848094.637:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 614.008092][ T30] audit: type=1326 audit(1741848094.637:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 614.034509][ T30] audit: type=1326 audit(1741848094.637:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac60f8d169 code=0x7ffc0000 [ 614.041660][T10048] chnl_net:caif_netlink_parms(): no params data found [ 618.270906][T10197] fuse: Invalid rootmode [ 618.446259][T10198] loop8: detected capacity change from 0 to 128 [ 618.469329][ T5140] Bluetooth: hci6: unexpected event for opcode 0x1407 [ 618.577388][T10198] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 618.605015][T10198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.339300][T10209] ip6t_rpfilter: unknown options [ 623.147602][ T36] hsr_slave_0: left promiscuous mode [ 623.177143][ T36] hsr_slave_1: left promiscuous mode [ 623.192489][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.207778][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.246097][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.265776][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.402946][ T36] veth1_macvtap: left promiscuous mode [ 623.441937][ T36] veth0_macvtap: left promiscuous mode [ 623.447566][ T36] veth1_vlan: left promiscuous mode [ 623.489633][ T36] veth0_vlan: left promiscuous mode [ 624.092467][ T36] team0 (unregistering): Port device team_slave_1 removed [ 624.154918][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.161464][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.207260][ T36] team0 (unregistering): Port device team_slave_0 removed [ 625.026610][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.033951][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.041102][T10027] bridge_slave_0: entered allmulticast mode [ 625.053235][T10027] bridge_slave_0: entered promiscuous mode [ 625.060977][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.072416][T10212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.078617][T10212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.079411][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.102159][T10212] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 625.108624][T10212] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 625.122022][T10048] bridge_slave_0: entered allmulticast mode [ 625.130025][T10212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.139511][T10048] bridge_slave_0: entered promiscuous mode [ 625.150920][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.158100][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.165400][T10048] bridge_slave_1: entered allmulticast mode [ 625.169579][T10212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 625.172496][T10048] bridge_slave_1: entered promiscuous mode [ 625.211830][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.222243][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.229546][T10027] bridge_slave_1: entered allmulticast mode [ 625.236684][T10027] bridge_slave_1: entered promiscuous mode [ 625.256557][T10212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 625.284430][T10212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.313674][T10212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 625.384527][T10212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 625.682119][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 626.006287][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.084492][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.089443][T10232] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.859'. [ 626.131929][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 626.145438][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.155355][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.167995][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.212996][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.229886][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.278867][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.455719][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 627.462012][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 627.468119][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 627.474722][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout [ 627.481530][ T5140] Bluetooth: hci6: command 0x0c1a tx timeout [ 627.487651][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 628.070825][T10236] loop8: detected capacity change from 0 to 128 [ 628.130059][ T5844] Bluetooth: hci6: unexpected event for opcode 0x1407 [ 628.526026][ T9] usb 8-1: string descriptor 0 read error: -71 [ 628.536701][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 628.546880][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 628.570516][T10236] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 628.582864][T10236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.594568][ T9] usb 8-1: config 0 descriptor?? [ 628.641656][ T9] usb 8-1: can't set config #0, error -71 [ 628.647291][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.832622][ T9] usb 8-1: USB disconnect, device number 14 [ 628.948736][T10246] fuse: Invalid rootmode [ 629.551963][T10240] Bluetooth: hci1: command 0x0c1a tx timeout [ 629.558012][T10240] Bluetooth: hci2: command 0x0c1a tx timeout [ 629.914824][T10048] team0: Port device team_slave_0 added [ 630.077084][T10027] team0: Port device team_slave_0 added [ 630.135755][T10048] team0: Port device team_slave_1 added [ 630.163698][T10027] team0: Port device team_slave_1 added [ 631.275103][T10258] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 631.597388][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 631.604466][T10240] Bluetooth: hci1: command 0x0c1a tx timeout [ 631.769130][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.802474][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.951944][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.332374][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.353912][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.467800][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.501046][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.511000][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.605060][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.654213][T10275] loop0: detected capacity change from 0 to 128 [ 632.669595][ T5140] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 632.731507][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.761895][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.927124][T10275] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 633.002557][T10275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.228897][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.517955][T10281] loop0: detected capacity change from 0 to 128 [ 634.551341][ T5140] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 634.723779][T10281] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 634.772035][T10281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 635.092657][T10027] hsr_slave_0: entered promiscuous mode [ 635.098956][T10027] hsr_slave_1: entered promiscuous mode [ 635.566925][T10027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.575076][T10027] Cannot create hsr debugfs directory [ 635.673437][T10291] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.872'. [ 635.758145][T10048] hsr_slave_0: entered promiscuous mode [ 635.778294][T10048] hsr_slave_1: entered promiscuous mode [ 635.808608][T10048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.842079][T10048] Cannot create hsr debugfs directory [ 636.054363][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.973786][T10303] fuse: Invalid rootmode [ 638.475833][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.063140][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.7.876'. [ 640.450249][T10326] loop0: detected capacity change from 0 to 2048 [ 640.692641][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.618537][T10326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.122207][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.251198][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.7.883'. [ 642.319654][T10345] bond0: entered promiscuous mode [ 642.334115][T10345] bond_slave_0: entered promiscuous mode [ 642.370342][T10345] bond_slave_1: entered promiscuous mode [ 642.402359][T10345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 642.451266][T10345] bond0: left promiscuous mode [ 642.489774][T10345] bond_slave_0: left promiscuous mode [ 642.518189][T10345] bond_slave_1: left promiscuous mode [ 642.694585][T10352] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.884'. [ 644.184862][T10368] fuse: Bad value for 'rootmode' [ 644.993149][T10374] loop0: detected capacity change from 0 to 128 [ 645.010971][ T5140] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 645.040358][T10374] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 645.062561][T10374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.846992][T10383] loop5: detected capacity change from 0 to 256 [ 646.884927][T10383] ======================================================= [ 646.884927][T10383] WARNING: The mand mount option has been deprecated and [ 646.884927][T10383] and is ignored by this kernel. Remove the mand [ 646.884927][T10383] option from the mount to silence this warning. [ 646.884927][T10383] ======================================================= [ 646.919790][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.004131][ T36] bridge_slave_1: left allmulticast mode [ 648.031707][ T36] bridge_slave_1: left promiscuous mode [ 648.052237][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.099470][ T36] bridge_slave_0: left allmulticast mode [ 648.128822][ T36] bridge_slave_0: left promiscuous mode [ 648.135310][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.807084][T10240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 651.819327][T10240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 651.838088][T10240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 651.856653][T10240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 651.880901][T10240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 651.889792][T10240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.912070][T10240] Bluetooth: hci3: command tx timeout [ 654.142095][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.890'. [ 654.323777][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.350215][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.381274][ T36] bond0 (unregistering): Released all slaves [ 654.611663][T10420] bond0: entered promiscuous mode [ 654.632036][T10420] bond_slave_0: entered promiscuous mode [ 654.656403][T10420] bond_slave_1: entered promiscuous mode [ 654.679624][T10420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 654.720477][T10420] bond0: left promiscuous mode [ 654.731147][T10420] bond_slave_0: left promiscuous mode [ 654.746997][T10420] bond_slave_1: left promiscuous mode [ 654.802666][ T5140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 654.812446][ T5140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 654.820773][ T5140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 654.831292][ T5140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 654.841339][ T5140] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 654.848724][ T5140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 655.689515][T10431] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 655.992441][ T5140] Bluetooth: hci3: command tx timeout [ 656.904783][ T5140] Bluetooth: hci7: command tx timeout [ 658.084828][ T5140] Bluetooth: hci3: command tx timeout [ 658.930180][ T36] hsr_slave_0: left promiscuous mode [ 658.952082][ T5140] Bluetooth: hci7: command tx timeout [ 658.967974][ T36] hsr_slave_1: left promiscuous mode [ 659.000014][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.093598][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.164851][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.250865][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.407198][ T36] veth1_macvtap: left promiscuous mode [ 659.433466][ T36] veth0_macvtap: left promiscuous mode [ 659.458479][ T36] veth1_vlan: left promiscuous mode [ 659.472236][ T36] veth0_vlan: left promiscuous mode [ 660.155377][ T5140] Bluetooth: hci3: command tx timeout [ 661.094650][ T5140] Bluetooth: hci7: command tx timeout [ 661.108642][ T36] team0 (unregistering): Port device team_slave_1 removed [ 661.409907][ T36] team0 (unregistering): Port device team_slave_0 removed [ 661.441967][ T8766] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 662.240966][ T8766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.262290][ T8766] usb 9-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 662.271339][ T8766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.289726][ T8766] usb 9-1: config 0 descriptor?? [ 662.893161][ T8766] usbhid 9-1:0.0: can't add hid device: -71 [ 662.919446][ T8766] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 662.949844][ T8766] usb 9-1: USB disconnect, device number 5 [ 663.122601][ T5140] Bluetooth: hci7: command tx timeout [ 664.618084][T10512] ip6t_rpfilter: unknown options [ 664.928346][T10518] fuse: Unknown parameter 'user_i00000000000000000000' [ 667.975176][T10425] chnl_net:caif_netlink_parms(): no params data found [ 668.398853][T10410] chnl_net:caif_netlink_parms(): no params data found [ 669.382136][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.7.921'. [ 670.037621][T10553] bond0: entered promiscuous mode [ 670.092331][T10553] bond_slave_0: entered promiscuous mode [ 670.696936][T10553] bond_slave_1: entered promiscuous mode [ 670.730392][T10553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 670.781065][T10553] bond0: left promiscuous mode [ 670.833517][T10553] bond_slave_0: left promiscuous mode [ 670.839136][T10553] bond_slave_1: left promiscuous mode [ 671.011389][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.062017][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.100528][T10425] bridge_slave_0: entered allmulticast mode [ 671.131106][T10425] bridge_slave_0: entered promiscuous mode [ 671.167521][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.216828][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.238705][T10425] bridge_slave_1: entered allmulticast mode [ 671.257429][T10425] bridge_slave_1: entered promiscuous mode [ 671.515651][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.175031][T10596] fuse: Unknown parameter 'user_id00000000000000000000' [ 673.106696][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.311153][T10602] loop5: detected capacity change from 0 to 16 [ 673.398262][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.632011][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.702246][T10410] bridge_slave_0: entered allmulticast mode [ 673.766259][T10410] bridge_slave_0: entered promiscuous mode [ 673.810470][ T36] bridge_slave_1: left allmulticast mode [ 673.861978][ T36] bridge_slave_1: left promiscuous mode [ 673.969677][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.991312][ T36] bridge_slave_0: left allmulticast mode [ 674.042025][ T36] bridge_slave_0: left promiscuous mode [ 674.047722][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.091748][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.163550][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.252723][ T36] bond0 (unregistering): Released all slaves [ 676.963200][T10425] team0: Port device team_slave_0 added [ 677.005394][T10425] team0: Port device team_slave_1 added [ 677.176805][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.202064][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.172074][ T5140] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 678.184610][T10410] bridge_slave_1: entered allmulticast mode [ 678.212902][T10410] bridge_slave_1: entered promiscuous mode [ 678.858532][ T36] hsr_slave_0: left promiscuous mode [ 678.894970][T10640] ip6t_rpfilter: unknown options [ 678.940097][ T36] hsr_slave_1: left promiscuous mode [ 678.946383][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.480979][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.717326][ T36] team0 (unregistering): Port device team_slave_1 removed [ 682.663203][T10659] loop5: detected capacity change from 0 to 16 [ 682.684189][ T36] team0 (unregistering): Port device team_slave_0 removed [ 683.811038][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.7.938'. [ 683.852451][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.860176][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.004612][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.053641][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.095911][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.149266][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.161935][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.277682][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.066390][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.075427][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.425350][T10410] team0: Port device team_slave_0 added [ 687.456134][T10410] team0: Port device team_slave_1 added [ 688.365765][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.410836][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.501003][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.530067][T10695] loop7: detected capacity change from 0 to 256 [ 688.547335][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.591226][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.120233][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.251401][T10701] ptrace attach of "./syz-executor exec"[7405] was attempted by "./syz-executor exec"[10701] [ 689.704205][T10425] hsr_slave_0: entered promiscuous mode [ 689.741048][T10425] hsr_slave_1: entered promiscuous mode [ 690.125357][T10410] hsr_slave_0: entered promiscuous mode [ 690.156488][T10410] hsr_slave_1: entered promiscuous mode [ 690.189566][T10410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.222228][T10410] Cannot create hsr debugfs directory [ 690.289392][T10709] ip6t_rpfilter: unknown options [ 690.953920][ T36] bridge_slave_1: left allmulticast mode [ 690.966201][ T36] bridge_slave_1: left promiscuous mode [ 690.992546][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.036409][ T36] bridge_slave_0: left allmulticast mode [ 691.049861][ T36] bridge_slave_0: left promiscuous mode [ 691.061298][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.170243][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.210099][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.249015][ T36] bond0 (unregistering): Released all slaves [ 695.325232][T10718] bridge0: port 3(netdevsim2) entered blocking state [ 695.348046][T10718] bridge0: port 3(netdevsim2) entered disabled state [ 695.363590][T10718] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 695.389204][T10718] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 695.401327][T10718] bridge0: port 3(netdevsim2) entered blocking state [ 695.408110][T10718] bridge0: port 3(netdevsim2) entered forwarding state [ 695.681073][ T36] hsr_slave_0: left promiscuous mode [ 698.160201][ T36] hsr_slave_1: left promiscuous mode [ 698.169793][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.422394][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.291324][ T36] team0 (unregistering): Port device team_slave_1 removed [ 700.342058][ T36] team0 (unregistering): Port device team_slave_0 removed [ 700.843922][T10781] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.959'. [ 702.923618][T10425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 703.024698][T10425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 703.112373][T10425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 703.485794][T10425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 703.732110][T10410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 703.843913][T10410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.914308][T10410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 704.052800][T10410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 704.259429][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.268879][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.277560][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.286708][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.294820][ T5140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 704.302241][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.707561][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.830146][T10425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.955979][ T36] bridge0: port 3(netdevsim2) entered disabled state [ 705.087501][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): left allmulticast mode [ 705.142104][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): left promiscuous mode [ 705.172166][ T36] bridge0: port 3(netdevsim2) entered disabled state [ 705.823545][T10824] loop8: detected capacity change from 0 to 4096 [ 705.963303][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.392610][T10240] Bluetooth: hci1: command tx timeout [ 706.415687][T10824] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.443620][T10824] fs-verity (loop8, inode 16): fs-verity keyring is empty, rejecting signed file! [ 706.808140][ T8771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.844144][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.901708][T10425] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.957098][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.999821][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.006949][ T6250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.067893][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.075021][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.939860][T10240] Bluetooth: hci1: command tx timeout [ 708.996506][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.666039][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.272936][ T36] bridge_slave_1: left allmulticast mode [ 710.279359][ T36] bridge_slave_1: left promiscuous mode [ 710.309276][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.372444][ T36] bridge_slave_0: left allmulticast mode [ 710.378094][ T36] bridge_slave_0: left promiscuous mode [ 710.472378][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.952820][T10240] Bluetooth: hci1: command tx timeout [ 711.816397][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.832164][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.847826][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.862764][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.887741][ T5140] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 711.898006][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 713.173483][T10240] Bluetooth: hci1: command tx timeout [ 714.192729][T10240] Bluetooth: hci2: command tx timeout [ 714.959803][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.269841][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 715.295694][T10879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.186132][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.254229][ T36] bond0 (unregistering): Released all slaves [ 716.285450][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.292581][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.314723][T10240] Bluetooth: hci2: command tx timeout [ 716.352385][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.359507][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.368595][T10881] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.972'. [ 717.346635][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 717.361973][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 717.376831][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 717.399713][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 717.428933][ T5140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 717.451272][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 718.180021][T10803] chnl_net:caif_netlink_parms(): no params data found [ 718.464581][ T5140] Bluetooth: hci2: command tx timeout [ 719.515312][ T5140] Bluetooth: hci4: command tx timeout [ 720.581299][ T5140] Bluetooth: hci2: command tx timeout [ 721.711977][ T5140] Bluetooth: hci4: command tx timeout [ 721.727583][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.752270][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.767739][T10803] bridge_slave_0: entered allmulticast mode [ 722.326590][T10803] bridge_slave_0: entered promiscuous mode [ 722.542455][ T36] hsr_slave_0: left promiscuous mode [ 722.560205][ T36] hsr_slave_1: left promiscuous mode [ 722.573246][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.589959][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.679384][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.687712][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.757902][ T36] veth1_macvtap: left promiscuous mode [ 722.782466][ T36] veth0_macvtap: left promiscuous mode [ 722.802367][ T36] veth1_vlan: left promiscuous mode [ 722.807672][ T36] veth0_vlan: left promiscuous mode [ 723.061604][T10929] loop7: detected capacity change from 0 to 256 [ 723.341379][T10930] ptrace attach of "./syz-executor exec"[7405] was attempted by "./syz-executor exec"[10930] [ 723.762079][ T5140] Bluetooth: hci4: command tx timeout [ 725.841168][ T5140] Bluetooth: hci4: command tx timeout [ 728.140338][ T36] team0 (unregistering): Port device team_slave_1 removed [ 728.378675][ T36] team0 (unregistering): Port device team_slave_0 removed [ 728.690493][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.700645][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.707984][T10803] bridge_slave_1: entered allmulticast mode [ 728.715391][T10803] bridge_slave_1: entered promiscuous mode [ 728.757013][T10941] netlink: 'syz.8.983': attribute type 4 has an invalid length. [ 728.765898][T10951] netlink: 'syz.7.985': attribute type 4 has an invalid length. [ 728.849790][T10803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.918073][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.898699][T10803] team0: Port device team_slave_0 added [ 730.997146][T10803] team0: Port device team_slave_1 added [ 731.392537][T10973] binder_alloc: 10967: binder_alloc_buf, no vma [ 732.153848][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.160830][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.186752][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.440379][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.800887][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.808664][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.057790][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.921915][T10803] hsr_slave_0: entered promiscuous mode [ 734.928350][T10803] hsr_slave_1: entered promiscuous mode [ 734.950453][T10803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.721595][T10803] Cannot create hsr debugfs directory [ 736.115662][ T5900] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 736.226628][T10862] chnl_net:caif_netlink_parms(): no params data found [ 736.370008][T10897] chnl_net:caif_netlink_parms(): no params data found [ 736.610417][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.637437][ T5900] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 736.647700][ T5140] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 736.651323][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.673101][ T5900] usb 8-1: config 0 descriptor?? [ 736.900100][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.908152][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.915775][T10862] bridge_slave_0: entered allmulticast mode [ 736.916198][ T5900] usbhid 8-1:0.0: can't add hid device: -71 [ 736.923356][T10862] bridge_slave_0: entered promiscuous mode [ 736.960223][ T5900] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 736.970647][T10897] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.989200][ T5900] usb 8-1: USB disconnect, device number 15 [ 736.995723][T10897] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.012194][T10897] bridge_slave_0: entered allmulticast mode [ 737.032753][T10897] bridge_slave_0: entered promiscuous mode [ 737.088915][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.105320][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.120165][T10862] bridge_slave_1: entered allmulticast mode [ 737.127650][T10862] bridge_slave_1: entered promiscuous mode [ 737.150383][T10897] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.162145][T10897] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.178724][T10897] bridge_slave_1: entered allmulticast mode [ 737.283842][T10897] bridge_slave_1: entered promiscuous mode [ 738.898900][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.994671][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.026552][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.082046][ T5900] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 739.101051][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.186763][T10862] team0: Port device team_slave_0 added [ 739.196236][T10862] team0: Port device team_slave_1 added [ 739.252409][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 739.274111][ T5900] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 739.302907][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.310917][ T5900] usb 9-1: Product: syz [ 739.322525][ T5900] usb 9-1: Manufacturer: syz [ 739.338262][T10897] team0: Port device team_slave_0 added [ 739.347071][ T5900] usb 9-1: SerialNumber: syz [ 739.444363][ T5900] usb 9-1: config 0 descriptor?? [ 739.860464][ T5900] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 740.808098][T10897] team0: Port device team_slave_1 added [ 740.900745][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.920945][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.011854][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.297446][ T5900] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 741.339269][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.375937][ T5900] usb 9-1: USB disconnect, device number 6 [ 741.389458][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.415413][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.339034][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.382437][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.392905][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.418784][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.425917][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.456805][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.473130][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.499237][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.522501][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.604829][T10862] hsr_slave_0: entered promiscuous mode [ 742.611275][T10862] hsr_slave_1: entered promiscuous mode [ 742.621504][T10862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.629650][T10862] Cannot create hsr debugfs directory [ 743.204028][ T8630] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 743.363341][T10897] hsr_slave_0: entered promiscuous mode [ 743.369698][T10897] hsr_slave_1: entered promiscuous mode [ 743.597944][T10897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.606015][T10897] Cannot create hsr debugfs directory [ 743.655212][ T8630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.665264][ T8630] usb 9-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 744.465582][T11038] 9pnet: Could not find request transport: virtiren<ãñmLß~Ŷ¡Ã4 [ 744.599248][ T8630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.609476][ T8630] usb 9-1: config 0 descriptor?? [ 745.169992][T10803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.265481][ T8630] usbhid 9-1:0.0: can't add hid device: -71 [ 745.282314][ T8630] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 745.296628][T10803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.304403][ T8630] usb 9-1: USB disconnect, device number 7 [ 745.353905][T10803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 745.432780][T10803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 746.422629][ T8630] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 746.422684][ T36] bridge_slave_1: left allmulticast mode [ 746.465159][ T36] bridge_slave_1: left promiscuous mode [ 746.470865][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.512294][ T36] bridge_slave_0: left allmulticast mode [ 746.540777][ T36] bridge_slave_0: left promiscuous mode [ 746.547992][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.583495][ T8630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.596328][ T36] bridge_slave_1: left allmulticast mode [ 746.612883][ T36] bridge_slave_1: left promiscuous mode [ 746.615890][ T8630] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 746.633329][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.650287][ T36] bridge_slave_0: left allmulticast mode [ 746.665951][ T36] bridge_slave_0: left promiscuous mode [ 746.670140][ T8630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.679679][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.709005][ T8630] usb 8-1: config 0 descriptor?? [ 747.034882][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.042752][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.205795][ T8630] usbhid 8-1:0.0: can't add hid device: -71 [ 748.212157][ T8630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 748.425594][ T0] ------------[ cut here ]------------ [ 748.431083][ T0] DEBUG_LOCKS_WARN_ON(1) [ 748.431201][ T0] WARNING: CPU: 1 PID: 0 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 [ 748.444911][ T0] Modules linked in: [ 748.448812][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 748.459141][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 748.469197][ T0] RIP: 0010:__lock_acquire+0x564/0x2100 [ 748.474768][ T0] Code: 00 00 83 3d 21 57 a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 b7 bd e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 748.494381][ T0] RSP: 0018:ffffc900001b76f0 EFLAGS: 00010046 [ 748.500470][ T0] RAX: 81adb414c57ed700 RBX: 0000000000001420 RCX: ffff88801d6e9e00 [ 748.508450][ T0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.516424][ T0] RBP: 00000000000c1420 R08: ffffffff81819e52 R09: 1ffff110170e519a [ 748.524402][ T0] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88801d6ea8d4 [ 748.532379][ T0] R13: 0000000000000005 R14: 1ffff11003add527 R15: ffff88801d6ea938 [ 748.540359][ T0] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 748.549290][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.555882][ T0] CR2: 00007f3df1e35f98 CR3: 000000005bc4c000 CR4: 0000000000350ef0 [ 748.563860][ T0] Call Trace: [ 748.567227][ T0] [ 748.570165][ T0] ? __warn+0x165/0x4d0 [ 748.574351][ T0] ? __lock_acquire+0x564/0x2100 [ 748.579317][ T0] ? report_bug+0x2b3/0x500 [ 748.583841][ T0] ? __lock_acquire+0x564/0x2100 [ 748.588802][ T0] ? handle_bug+0x60/0x90 [ 748.593144][ T0] ? exc_invalid_op+0x1a/0x50 [ 748.597829][ T0] ? asm_exc_invalid_op+0x1a/0x20 [ 748.602873][ T0] ? __warn_printk+0x292/0x360 [ 748.607645][ T0] ? __lock_acquire+0x564/0x2100 [ 748.612608][ T0] ? plist_check_list+0x477/0x4d0 [ 748.617654][ T0] lock_acquire+0x1ed/0x550 [ 748.622174][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 748.627756][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 748.632803][ T0] ? sched_core_balance+0x699/0xf50 [ 748.638012][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.643668][ T0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.649674][ T0] _raw_spin_lock_nested+0x31/0x40 [ 748.654799][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 748.660360][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 748.665748][ T0] sched_core_balance+0xd87/0xf50 [ 748.670787][ T0] ? sched_core_balance+0xce/0xf50 [ 748.675908][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 748.681466][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.687120][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 748.692675][ T0] __balance_callbacks+0x18a/0x280 [ 748.697802][ T0] finish_task_switch+0x1d3/0x870 [ 748.702838][ T0] __schedule+0x1916/0x4c90 [ 748.707362][ T0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 748.713625][ T0] ? __pfx___schedule+0x10/0x10 [ 748.718494][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 748.723792][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.729449][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 748.735613][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 748.741259][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.746917][ T0] schedule_idle+0x56/0x90 [ 748.751352][ T0] do_idle+0x567/0x5c0 [ 748.755435][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.761786][ T0] ? __pfx_do_idle+0x10/0x10 [ 748.766392][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 748.771621][ T0] cpu_startup_entry+0x42/0x60 [ 748.776402][ T0] start_secondary+0x102/0x110 [ 748.781180][ T0] common_startup_64+0x13e/0x147 [ 748.786136][ T0] [ 748.789155][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 748.796441][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 748.806773][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 748.816836][ T0] Call Trace: [ 748.820129][ T0] [ 748.823156][ T0] dump_stack_lvl+0x241/0x360 [ 748.827871][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.833087][ T0] ? __pfx__printk+0x10/0x10 [ 748.837689][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.843350][ T0] ? vscnprintf+0x5d/0x90 [ 748.847707][ T0] panic+0x349/0x880 [ 748.851611][ T0] ? __warn+0x174/0x4d0 [ 748.855791][ T0] ? __pfx_panic+0x10/0x10 [ 748.860222][ T0] ? common_startup_64+0x13e/0x147 [ 748.865357][ T0] __warn+0x344/0x4d0 [ 748.869367][ T0] ? __lock_acquire+0x564/0x2100 [ 748.874338][ T0] report_bug+0x2b3/0x500 [ 748.878689][ T0] ? __lock_acquire+0x564/0x2100 [ 748.883662][ T0] handle_bug+0x60/0x90 [ 748.887833][ T0] exc_invalid_op+0x1a/0x50 [ 748.892354][ T0] asm_exc_invalid_op+0x1a/0x20 [ 748.897221][ T0] RIP: 0010:__lock_acquire+0x564/0x2100 [ 748.902789][ T0] Code: 00 00 83 3d 21 57 a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 b7 bd e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 748.922402][ T0] RSP: 0018:ffffc900001b76f0 EFLAGS: 00010046 [ 748.928479][ T0] RAX: 81adb414c57ed700 RBX: 0000000000001420 RCX: ffff88801d6e9e00 [ 748.936456][ T0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.944431][ T0] RBP: 00000000000c1420 R08: ffffffff81819e52 R09: 1ffff110170e519a [ 748.952409][ T0] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88801d6ea8d4 [ 748.960387][ T0] R13: 0000000000000005 R14: 1ffff11003add527 R15: ffff88801d6ea938 [ 748.968369][ T0] ? __warn_printk+0x292/0x360 [ 748.973150][ T0] ? plist_check_list+0x477/0x4d0 [ 748.978195][ T0] lock_acquire+0x1ed/0x550 [ 748.982709][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 748.988268][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 748.993323][ T0] ? sched_core_balance+0x699/0xf50 [ 748.998534][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 749.004190][ T0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.010195][ T0] _raw_spin_lock_nested+0x31/0x40 [ 749.015334][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 749.020896][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 749.026286][ T0] sched_core_balance+0xd87/0xf50 [ 749.031338][ T0] ? sched_core_balance+0xce/0xf50 [ 749.036460][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 749.042019][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 749.047676][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 749.053230][ T0] __balance_callbacks+0x18a/0x280 [ 749.058358][ T0] finish_task_switch+0x1d3/0x870 [ 749.063397][ T0] __schedule+0x1916/0x4c90 [ 749.067922][ T0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 749.074186][ T0] ? __pfx___schedule+0x10/0x10 [ 749.079061][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 749.084362][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 749.090018][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 749.096185][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 749.101835][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 749.107495][ T0] schedule_idle+0x56/0x90 [ 749.111932][ T0] do_idle+0x567/0x5c0 [ 749.116015][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.122368][ T0] ? __pfx_do_idle+0x10/0x10 [ 749.126972][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 749.132201][ T0] cpu_startup_entry+0x42/0x60 [ 749.136977][ T0] start_secondary+0x102/0x110 [ 749.141753][ T0] common_startup_64+0x13e/0x147 [ 749.146710][ T0] [ 749.150347][ T0] Kernel Offset: disabled [ 749.154660][ T0] Rebooting in 86400 seconds..