last executing test programs: 23m11.968211128s ago: executing program 32 (id=1060): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) getpid() openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20m56.371000234s ago: executing program 33 (id=1396): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) getpid() openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20m10.152730219s ago: executing program 34 (id=1546): syz_clone(0xe2840480, 0x0, 0x0, 0x0, 0x0, 0x0) 17m36.545863962s ago: executing program 5 (id=2006): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17m35.234074258s ago: executing program 5 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x18c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x158, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 17m33.798948628s ago: executing program 5 (id=2013): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) msgget$private(0x0, 0x480) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7f, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 17m32.1722881s ago: executing program 5 (id=2019): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m24.580769715s ago: executing program 5 (id=2022): socket(0x1, 0x803, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 17m24.141496665s ago: executing program 5 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 17m8.586306602s ago: executing program 35 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 12m10.399780698s ago: executing program 3 (id=2974): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x3f, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x20, 0x9, 0x9}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000002000000000ffffffff000000000000000000f2000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000"], 0xb8}}, 0x0) 12m9.768780549s ago: executing program 3 (id=2976): socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0x0, 0xbc, '9'}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 12m9.561917107s ago: executing program 3 (id=2978): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x141000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x80082) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3638000000}, 0x18) dup(r1) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) 12m7.466879442s ago: executing program 3 (id=2987): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x8000, 0x0, 0x2b4}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="5fbe7916036fa72222a7b4658bdba8479f45a0e3fef464db4bf8aaf993642e4685650d05bd3ba894a3d864ecd500529f51e4fc68f5d0ecf1b52689289438b60cbede76c11c4553e6a03501ed32bcae4e0420ef67e22b3b3fcc393b063dfab9f19bb9e4d617fce10c29eee5ff5110bc4ccb8bf4dbb5719e8f3e30f4121218de0db98639aef0b136a4f0c71359544726ea6b1ebe5f3be06dc97b9627881509a60df8d144478cef91203398d636766ccf619a7fe146142def2cb020c36a81f0154356f72364af13fa8efe79ee0c8d7aa8c0fdc9d43ff6d655eb6ecf7298e9bcac0a99cd4ccf9a84", @ANYRESOCT=0x0], 0x48) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14b1d71a9f59e0c284bd7000fddb03"], 0x14}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0xfffffffffffffd85, 0x0}, 0x40000040) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000010004b042cbd7000fcdbdf", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12m6.213608698s ago: executing program 3 (id=2990): epoll_create(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x8080) 12m1.573126038s ago: executing program 3 (id=3005): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x0}, 0x94) 11m45.846203235s ago: executing program 36 (id=3005): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x0}, 0x94) 8m19.483567195s ago: executing program 6 (id=3484): socket$kcm(0xa, 0x3, 0x3a) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$dri(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xbc, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) ioperm(0x9, 0x8000000000000001, 0x8001) syz_socket_connect_nvme_tcp() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x1, 0x1, 0x1, 0x1, 0x6, 0x80009, 0xfffffffe, 0x7f, 0x3, 0x40000004, 0x89, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x995d000, 0x4085, 0x0, 0xfffffff8]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000040)='/dev/dma_heap/system\x00') 8m18.148329735s ago: executing program 6 (id=3485): socket(0x1, 0x803, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 8m17.825794617s ago: executing program 6 (id=3488): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x6, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0xc6, &(0x7f00000005c0)=""/198, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce", 0x64}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced2", 0x52}, {&(0x7f0000001400)="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", 0x847}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m17.20109065s ago: executing program 6 (id=3490): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) set_mempolicy(0x8006, 0x0, 0x5) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0xe2840480, 0x0, 0x0, 0x0, 0x0, 0x0) 8m15.834963009s ago: executing program 6 (id=3494): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x6, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0xc6, &(0x7f00000005c0)=""/198, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0), 0x0, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m10.333491124s ago: executing program 6 (id=3500): openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 7m55.010587488s ago: executing program 37 (id=3500): openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 5m20.296816631s ago: executing program 2 (id=3927): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x6, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0xc6, &(0x7f00000005c0)=""/198, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1e", 0x65}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced2", 0x52}, {&(0x7f0000001400)="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", 0x974}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m20.087977195s ago: executing program 2 (id=3930): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x89, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x10c, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xc9, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x60, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}]}, {0x11, 0x6, "12df59202984a7d58c1b88abb7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m19.806663575s ago: executing program 2 (id=3933): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0xd000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0x7ffffffffffffffd, 0x6, 0x2, 0x7, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x9, 0x3, 0x2000000000000000, 0x1, 0x101], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m19.305239206s ago: executing program 2 (id=3938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m19.133547321s ago: executing program 2 (id=3939): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x4}}, 0x20) sendmmsg$inet(r0, 0x0, 0x0, 0x40081) 5m18.24216963s ago: executing program 2 (id=3950): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x1a8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0xe, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) r1 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) chdir(&(0x7f00000000c0)='./bus\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 5m17.608419987s ago: executing program 38 (id=3950): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x1a8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0xe, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) r1 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) chdir(&(0x7f00000000c0)='./bus\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 5m17.190141449s ago: executing program 8 (id=3958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) 5m16.669706004s ago: executing program 8 (id=3960): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x4}}, 0x20) sendmmsg$inet(r0, 0x0, 0x0, 0x40081) 5m16.264021373s ago: executing program 8 (id=3964): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x258, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x244, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x16, 0x6, "12df59202984a7d58c1b88abb797475ada89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="9d2f037e8507", 0x6}, {&(0x7f0000000200)="b91701811a1e42b5ba4375aa85a84e4f9c95a6c555a1f5c9a528732192fc2f922cad1ab69dcd8fe6992886e8a95d7a0869644c5e1fd07d9e2867458a5d5b13c9e077ce1b8df3c8827af7b4f1f325f69f92ee22e5a8f58df2959db69d163a50f24485ecba1927b9eb6c227224ad5720a2d097fe61894aec1d383ed10e1b29006a82cd282b002c4b719584521d4d36f5be684cc81c0d8953d890bba2eb57b8f4816437e2af2415b7601bb030b5", 0xac}, {&(0x7f00000002c0)="5d1e22c7a9d9fc71674e3ba89c4ba8c82c43d879e5745e8574270be9d8df337b2046a5bc7b16a534952872a27f03901db7d368492efd4641ee77ac945ffe68546a97cb4f523bbc93c8550a9c01bd0db6de2f8377af4372b43726203a637dcef20426f0701691fca7fb8cd80755a195b463764e5d5f77c4b8fc147b166a539fdb", 0x80}], 0x3}, 0x4000) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001400)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m16.004640599s ago: executing program 8 (id=3967): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m15.833619736s ago: executing program 8 (id=3968): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) 5m14.681987834s ago: executing program 8 (id=3979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x20040040) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 5m14.154358219s ago: executing program 39 (id=3979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x20040040) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 51.725900225s ago: executing program 7 (id=4897): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 50.723153906s ago: executing program 7 (id=4900): io_setup(0x9, &(0x7f0000000340)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 48.405555221s ago: executing program 7 (id=4904): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) bind$inet(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0xaa8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x9e0, 0x3d8, 0x3d8, 0x9e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x8a8, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x8d, 0x1}, {0x8, 0x3}, {0x40}, {0x5, 0x2}, {0x6, 0x1}, {0x9, 0x1}, {0x10001, 0x3}, {0x7, 0x3}, {0x101}, {0x14000, 0x1}, {0x7, 0x2}], [{0x401, 0xf3db}, {0x7}, {0xa, 0x40}, {0x9, 0x9}, {0x7d, 0x7fff}, {0x91a, 0x10}, {0x7, 0x86}, {0x2, 0x98}, {0x81, 0x750f}, {0xffffffff, 0xfffffff0}, {0x9, 0x3}], 0x4, 0x5}, {[{0x1, 0x2}, {0xfff, 0x1}, {0x5, 0x3}, {0x401, 0x2}, {0x48b, 0x1}, {0x7ff, 0x1}, {0x7, 0x2}, {0x3f5, 0x1}, {0x0, 0x2}, {0x7ff, 0x1}, {0xc022}], [{0x2, 0x9}, {0x2, 0x9}, {0x3, 0x8001}, {0x61c, 0x5}, {0x9, 0x4080000}, {0x2, 0x3}, {0x6, 0x1}, {0x383, 0x2}, {0xfffffff9, 0x8}, {0x8, 0x6}, {0x7f, 0x10001}], 0x6, 0xb}, {[{0x8, 0x1}, {0x1}, {0x3}, {0x6, 0x3}, {0x101, 0x1}, {0x2, 0x3}, {0x54f, 0x3}, {0x1, 0x3}, {0xfffffffc}, {0x6}, {0x81, 0x2}], [{0xd6, 0x7cdd3f25}, {0x5, 0x4}, {0x3, 0x9}, {0x80000001, 0xcca}, {0xd, 0x3ff}, {0x2, 0x2}, {0x7fffffff, 0x8}, {0x9, 0x10001}, {0x0, 0x2}, {0x8, 0x8}, {0x6, 0x7}], 0x1, 0x6}, {[{0x1}, {0x7, 0x2}, {0x6, 0x3}, {0xdf4, 0x3}, {0xfffffff9}, {0x46, 0x2}, {0x6, 0x2}, {0x7}, {0x101, 0x2}, {0x4, 0x3}, {0x9, 0x2}], [{0x80000001, 0x1000}, {0x9, 0x5}, {0x81, 0x1}, {0x3, 0x195}, {0x9739, 0x4}, {0xfff, 0x4}, {0xfffeffff, 0x6}, {0x8001, 0x6}, {0x4, 0xe}, {0x88, 0xe}, {0x2, 0x800}], 0x4, 0x3}, {[{0x10001}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x9, 0x3}, {0x400000, 0x1}, {0x6}, {0x9, 0x2}, {0x80000000, 0x1}, {0x6, 0x1}, {0x8, 0x3}, {0x80000000, 0x2}], [{0x2, 0xfff}, {0x8, 0x6}, {0x8, 0x4}, {0x1ff, 0x1}, {0x100, 0x7}, {0x0, 0xcb}, {0x5, 0x9}, {0x80, 0x1}, {0x9, 0x3ff}, {0x1ff, 0x6}, {0x5, 0x6}], 0x4, 0xb}, {[{0x9, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x6}, {0x100}, {0xfff, 0x1}, {0x1, 0x1}, {0xfffffff7, 0x1}, {0xc, 0x3}, {0x5e339c5f, 0x2}, {0x9}], [{0x8}, {0x400, 0x6}, {0x10001, 0x80000000}, {0x7, 0x2fe26b5e}, {0x7}, {0x5, 0x8}, {0x6, 0x7}, {0x3, 0x81}, {0x6, 0xffff5791}, {0xffffc6ce, 0xae7}, {0x4000800, 0x2}], 0x4, 0x3}, {[{0x365e}, {0x0, 0x2}, {0x5, 0x3}, {}, {0x9}, {0x4}, {0x100, 0x1}, {0xfffffffd, 0x3}, {0xe, 0x1}, {0x1}, {0x4, 0x3}], [{0x7fff, 0xfffffffa}, {0x14000, 0x1ff}, {0x74d}, {0x0, 0x800}, {0xfffffffd, 0xa70}, {0x7, 0x1000}, {0x200, 0x5}, {0x1, 0xb1e}, {0x7, 0xb43}, {0x1, 0x5}, {0xdc8, 0x2bd6}], 0x9, 0x4}, {[{0x7}, {0xd, 0x3}, {0x51, 0x2}, {0x400, 0x1}, {0x1, 0x1}, {0x8}, {0x82, 0x2}, {0x1, 0x2}, {0x8, 0x2}, {0x8, 0x3}, {0xdba8, 0x2}], [{0xfffff800, 0xba}, {0x7f}, {0x6, 0x2}, {0x1, 0x2e160e69}, {0x8, 0x8}, {0x6a, 0x8}, {0x3, 0xbc}, {0xf, 0x100}, {0x1, 0x5}, {0x3, 0x7ff}, {0x30000000, 0x4}], 0x0, 0x4}, {[{0xf, 0x2}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0x3}, {0xf35c, 0x2}, {0x7, 0x2}, {0xfffffff7, 0x1}, {0x5, 0x1}, {0xfffffffe, 0x3}, {0x3, 0x3}, {0x2, 0x2}], [{0x0, 0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x4}, {0xfffffff8, 0x8001}, {0x800, 0x8}, {0x5, 0xffffffff}, {0xc, 0x5}, {0xfe83, 0x7}, {0x101, 0x9}, {0x6, 0x4d}], 0x5, 0x6}, {[{0x8312, 0x2}, {0x5d53, 0x3}, {0x8, 0x3}, {0xd8a, 0x1}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x2000000}, {0x7}], [{0x9, 0x39}, {0x1000, 0x7}, {0x2, 0x1}, {0x5, 0x9}, {0x9, 0x9}, {0x2, 0x7}, {0x1, 0xa1}, {0x8, 0x1}, {0xfff, 0x4}, {0xb64b, 0x4}, {0xfa3d, 0x7}], 0x8, 0xb}, {[{0xffff0001, 0x1}, {0x9}, {0x0, 0x3}, {0x800}, {0x0, 0x1}, {}, {0x4, 0x1}, {0xa}, {0x7, 0x3}, {0x8, 0x3}], [{0x8, 0xd}, {0xfffffff7, 0xffffffff}, {0x1ff, 0xffffff97}, {0x8, 0x10001}, {0x2aaf, 0xfff}, {0xff, 0xfffffff2}, {0xef, 0xd}, {0x7}, {0xfffffffa, 0x401}, {0x1ff00000, 0x6}, {0x3, 0x3}], 0x7}], 0x4, 0x1}}, @common=@eui64={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7, 0x8, 0x3, 'snmp\x00', {0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xf}, @mcast1, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x54, 0x9, 0x4, 0x20}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xb04) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14004051}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x0, 'rose0\x00', {0x2}, 0x3}) 46.726300211s ago: executing program 7 (id=4905): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x1}]}, 0x10) 46.274327637s ago: executing program 7 (id=4907): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYBLOB='@\x00g\x00\b\x00', @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x10008011}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 45.878673093s ago: executing program 7 (id=4911): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa) 26.380291306s ago: executing program 4 (id=4970): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 25.997292522s ago: executing program 1 (id=4971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25.760225525s ago: executing program 1 (id=4973): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x89, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xc3, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae160423"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x68, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd, 0x6, "12df59202984a7d58c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef", 0x8, 0x8804, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 25.721399409s ago: executing program 1 (id=4974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 25.652204273s ago: executing program 9 (id=4975): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a0100000100000008000000000000009ee7e96a604f"], 0x100}, 0x0) 24.070938635s ago: executing program 4 (id=4977): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r2 = syz_io_uring_setup(0x1ba8, &(0x7f0000000300)={0x0, 0xa5e9, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x17ffa, 0xba1c, 0x2, 0x0, 0x0) 23.336285411s ago: executing program 0 (id=4978): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 23.101154635s ago: executing program 0 (id=4979): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, 0x0, 0x0) 22.882960178s ago: executing program 4 (id=4980): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0}}], 0x1, 0x40010) close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f00000003c0)=""/53, 0x35}], 0x3}, 0x7fffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/158, 0x9e}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.76583951s ago: executing program 0 (id=4981): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0xc6, &(0x7f00000005c0)=""/198, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1e", 0x65}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced2", 0x52}, {&(0x7f0000001400)="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", 0x973}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.616586317s ago: executing program 9 (id=4982): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 22.612882024s ago: executing program 1 (id=4983): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x89, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xc3, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae160423"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x68, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd, 0x6, "12df59202984a7d58c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef", 0x8, 0x8804, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 22.441238574s ago: executing program 9 (id=4984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8080) 22.421577245s ago: executing program 1 (id=4985): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x71fc, &(0x7f0000000300)={0x0, 0xdaa9, 0x20, 0x2, 0x93}, &(0x7f0000000580), &(0x7f00000003c0)) io_uring_setup(0x51d0, &(0x7f00000004c0)={0x0, 0x8dce, 0x10, 0xfffffffd, 0xf2, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 22.420805572s ago: executing program 4 (id=4986): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000000000"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 22.39117466s ago: executing program 0 (id=4987): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 22.208426883s ago: executing program 4 (id=4988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000004200000040"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) 21.706671999s ago: executing program 9 (id=4989): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r2 = syz_io_uring_setup(0x1ba8, &(0x7f0000000300)={0x0, 0xa5e9, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x17ffa, 0xba1c, 0x2, 0x0, 0x0) 21.614210744s ago: executing program 4 (id=4990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 20.68457085s ago: executing program 0 (id=4991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 20.255240039s ago: executing program 9 (id=4992): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 18.482240773s ago: executing program 1 (id=4993): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x1, r0, 0x0, &(0x7f0000000180)="446fd3b67ef26154e4d931052c0d3c5af4e933216455c7a9a5ab97ad42e00e122c0af9757b4407240bd6bacf0d6ea1efaf04f3c21c43ccc885fb5f7ff9c416391075bee871093c91c3d15e6df84921595bfe636a33aaa00b6e2a60efa8111a4b", 0x60, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x545d, &(0x7f0000000340)) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0xff9a) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, &(0x7f0000000280)=0x1, 0x4) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0}) 16.529643339s ago: executing program 0 (id=4994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x89, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xc3, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae160423"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x68, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd, 0x6, "12df59202984a7d58c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef", 0x8, 0x8804, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3], 0x6f4}}, 0x0) 15.422799491s ago: executing program 9 (id=4995): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 5.432878274s ago: executing program 40 (id=4990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 3.025742013s ago: executing program 41 (id=4993): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x1, r0, 0x0, &(0x7f0000000180)="446fd3b67ef26154e4d931052c0d3c5af4e933216455c7a9a5ab97ad42e00e122c0af9757b4407240bd6bacf0d6ea1efaf04f3c21c43ccc885fb5f7ff9c416391075bee871093c91c3d15e6df84921595bfe636a33aaa00b6e2a60efa8111a4b", 0x60, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x545d, &(0x7f0000000340)) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0xff9a) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, &(0x7f0000000280)=0x1, 0x4) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0}) 1.025840587s ago: executing program 42 (id=4994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x89, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xc3, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae160423"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x68, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd, 0x6, "12df59202984a7d58c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef", 0x8, 0x8804, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3], 0x6f4}}, 0x0) 0s ago: executing program 43 (id=4995): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800000f130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a499647"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): t promiscuous mode [ 1692.870707][ T9743] Bluetooth: hci2: command tx timeout [ 1694.367935][ T9743] Bluetooth: hci4: command tx timeout [ 1695.003879][T19529] overlayfs: failed to resolve './file1': -2 [ 1696.339941][T19552] overlayfs: failed to resolve './file1': -2 [ 1696.390554][ T9743] Bluetooth: hci4: command tx timeout [ 1696.740947][ T1456] team0 (unregistering): Port device team_slave_1 removed [ 1696.780787][T19558] af_packet: tpacket_rcv: packet too big, clamped from 15 to 4294967286. macoff=82 [ 1697.012560][ T1456] team0 (unregistering): Port device team_slave_0 removed [ 1699.816526][T19335] team0: Port device team_slave_0 added [ 1699.844748][T19335] team0: Port device team_slave_1 added [ 1700.197825][T19335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.197842][T19335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.197867][T19335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.211519][T19335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.211532][T19335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.211557][T19335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.220758][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4051'. [ 1700.707427][T19335] hsr_slave_0: entered promiscuous mode [ 1700.708895][T19335] hsr_slave_1: entered promiscuous mode [ 1701.464076][T19411] chnl_net:caif_netlink_parms(): no params data found [ 1702.492804][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4068'. [ 1702.511475][T19642] bridge_slave_1: left allmulticast mode [ 1702.511499][T19642] bridge_slave_1: left promiscuous mode [ 1702.513672][T19642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.582311][T19642] bridge_slave_0: left allmulticast mode [ 1702.582336][T19642] bridge_slave_0: left promiscuous mode [ 1702.582603][T19642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.500368][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.500649][T19411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.500830][T19411] bridge_slave_0: entered allmulticast mode [ 1704.503845][T19411] bridge_slave_0: entered promiscuous mode [ 1704.727146][ T1456] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.793177][T19411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.793340][T19411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.793550][T19411] bridge_slave_1: entered allmulticast mode [ 1704.797248][T19411] bridge_slave_1: entered promiscuous mode [ 1705.724857][ T1456] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.784347][T19411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.886629][T19411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.173797][ T1456] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.569261][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 1707.681927][T19735] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 1707.682685][T19735] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1707.686136][T19735] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1707.691127][T19735] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1707.695568][T19735] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 1707.695976][T19735] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 1707.698276][T19411] team0: Port device team_slave_0 added [ 1707.946350][ T1456] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.005180][T19411] team0: Port device team_slave_1 added [ 1708.475418][T19411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.475434][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.475459][T19411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.479202][T19411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.479215][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.479240][T19411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.368546][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4106'. [ 1709.492413][T19411] hsr_slave_0: entered promiscuous mode [ 1709.522560][T19411] hsr_slave_1: entered promiscuous mode [ 1709.632083][T19411] debugfs: 'hsr0' already exists in 'hsr' [ 1709.632112][T19411] Cannot create hsr debugfs directory [ 1710.923333][T19335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1710.991183][ T1456] bridge_slave_1: left allmulticast mode [ 1710.991204][ T1456] bridge_slave_1: left promiscuous mode [ 1710.991350][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.253625][ T1456] bridge_slave_0: left allmulticast mode [ 1711.253650][ T1456] bridge_slave_0: left promiscuous mode [ 1711.253811][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.643472][T19786] futex_wake_op: syz.7.4118 tries to shift op by 144; fix this program [ 1713.773426][ T1456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.831088][ T1456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.851666][ T1456] bond0 (unregistering): Released all slaves [ 1713.896213][T19335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1713.920329][T19790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1714.023212][T19335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1714.086312][ T1456] : left promiscuous mode [ 1714.233827][T19335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1714.591216][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4128'. [ 1716.718245][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4142'. [ 1716.901583][T10131] Bluetooth: hci0: command 0x0406 tx timeout [ 1717.441932][ T1456] hsr_slave_0: left promiscuous mode [ 1717.480754][ T1456] hsr_slave_1: left promiscuous mode [ 1717.482009][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.482034][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.530508][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.530533][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.675105][ T1456] veth1_macvtap: left promiscuous mode [ 1717.675212][ T1456] veth0_macvtap: left promiscuous mode [ 1717.675487][ T1456] veth1_vlan: left promiscuous mode [ 1717.675671][ T1456] veth0_vlan: left promiscuous mode [ 1720.800358][ T1456] team0 (unregistering): Port device team_slave_1 removed [ 1720.989592][ T1456] team0 (unregistering): Port device team_slave_0 removed [ 1723.578571][T19335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.656124][T19335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.745828][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4152'. [ 1723.747507][T19411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1723.837193][T19411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1723.940794][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.940929][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.941854][T19411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1724.001710][T19411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1724.069077][T17947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.069271][T17947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.572260][T19411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.622275][T19411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.673518][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.673726][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.739702][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.740072][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.901291][T19335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.561983][T19411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.711725][T19411] veth0_vlan: entered promiscuous mode [ 1725.731995][T19411] veth1_vlan: entered promiscuous mode [ 1725.922205][T19411] veth0_macvtap: entered promiscuous mode [ 1725.945050][T19411] veth1_macvtap: entered promiscuous mode [ 1726.120668][T19335] veth0_vlan: entered promiscuous mode [ 1726.318405][T19335] veth1_vlan: entered promiscuous mode [ 1726.579157][T19411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.608268][T19411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.640096][ T1292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.641650][ T1292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.646806][ T1292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.691731][ T1292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.992612][T19335] veth0_macvtap: entered promiscuous mode [ 1727.159024][T19335] veth1_macvtap: entered promiscuous mode [ 1727.811789][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4171'. [ 1727.910418][T19335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.089840][T19335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.112997][T17947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.113233][T17947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.113265][T17947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.113294][T17947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.160098][T17947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.160111][T17947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.892286][ T1292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.892305][ T1292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.416651][ T6623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.416665][ T6623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.587309][T12618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.587329][T12618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.989350][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4181'. [ 1732.852774][T20057] ubi31: attaching mtd0 [ 1732.861456][T20057] ubi31: scanning is finished [ 1734.029938][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4194'. [ 1734.033673][T20057] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1735.830095][T18766] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1735.986439][T18766] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1735.986472][T18766] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1735.986511][T18766] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1735.986533][T18766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.999187][T20099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1736.010656][T18766] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1736.113742][T20114] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4209'. [ 1739.340851][ T9640] usb 1-1: USB disconnect, device number 9 [ 1740.412829][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.415081][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.703371][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4217'. [ 1741.182244][T20159] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4222'. [ 1745.149734][T20174] process 'syz.1.4224' launched './file0' with NULL argv: empty string added [ 1746.828876][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1746.829838][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1747.534824][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1747.536204][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1747.783820][T20209] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4234'. [ 1747.785392][T20210] ubi31: attaching mtd0 [ 1747.814454][T20210] ubi31: scanning is finished [ 1750.924568][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4238'. [ 1751.883984][T20224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4239'. [ 1753.488725][T20227] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1753.488767][T20227] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1753.488795][T20227] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1753.507484][ T37] audit: type=1800 audit(2000001012.784:896): pid=20227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.4237" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1753.948939][T20210] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1753.998378][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4242'. [ 1754.046552][T20241] overlayfs: failed to resolve './file1': -2 [ 1754.054108][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4245'. [ 1755.026608][T20257] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4249'. [ 1756.524826][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1757.032861][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.032889][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1757.032901][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.047921][ T10] usb 1-1: config 0 descriptor?? [ 1758.536860][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1758.541783][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1758.560163][ T10] usb 1-1: USB disconnect, device number 10 [ 1759.207127][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1759.285641][T20311] netlink: 'syz.1.4265': attribute type 5 has an invalid length. [ 1759.725080][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1759.749805][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.749853][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1759.749876][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.824040][ T10] usb 1-1: config 0 descriptor?? [ 1759.898804][ T10] usb 1-1: can't set config #0, error -71 [ 1759.901331][ T10] usb 1-1: USB disconnect, device number 11 [ 1760.115684][T18766] libceph: connect (1)[b::]:6789 error -101 [ 1760.115684][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1760.126281][T18766] libceph: mon0 (1)[b::]:6789 connect error [ 1760.165479][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1760.247629][T20315] ceph: No mds server is up or the cluster is laggy [ 1760.250298][T20320] ceph: No mds server is up or the cluster is laggy [ 1760.606949][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1760.765895][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1760.765929][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1760.765967][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1760.765988][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.983114][T20331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1760.999108][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1766.083839][ T5871] usb 2-1: USB disconnect, device number 8 [ 1769.066894][ T5871] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1770.092963][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.093012][ T5871] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1770.093035][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.098654][ T5871] usb 5-1: config 0 descriptor?? [ 1770.704695][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 1770.704821][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1770.728427][ T5871] usb 5-1: USB disconnect, device number 16 [ 1770.753298][T20100] udevd[20100]: setting mode of /dev/bus/usb/005/016 to 020664 failed: No such file or directory [ 1770.753425][T20100] udevd[20100]: setting owner of /dev/bus/usb/005/016 to uid=0, gid=0 failed: No such file or directory [ 1770.897449][T20458] ubi31: attaching mtd0 [ 1770.939767][T20458] ubi31: scanning is finished [ 1771.338211][ T5871] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1771.369215][T20467] netlink: 'syz.9.4320': attribute type 5 has an invalid length. [ 1771.796508][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 1771.809683][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.809731][ T5871] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1771.809752][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.819701][ T5871] usb 5-1: config 0 descriptor?? [ 1771.951239][ T5871] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1771.971568][ T5871] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1772.058940][ T5871] usb 5-1: USB disconnect, device number 17 [ 1772.071117][ T5871] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1772.661093][T20458] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1772.661122][T20458] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1772.661141][T20458] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1772.661156][T20458] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1772.661172][T20458] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1772.661189][T20458] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1772.661206][T20458] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2707090413 [ 1772.661226][T20458] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1772.664593][T20486] ubi31: background thread "ubi_bgt31d" started, PID 20486 [ 1777.906412][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4338'. [ 1777.915270][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4338'. [ 1780.210816][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 1780.211011][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 1780.640211][T20570] ceph: No mds server is up or the cluster is laggy [ 1780.646992][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 1780.647192][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 1780.880555][T20588] ubi: mtd0 is already attached to ubi31 [ 1784.856843][T20606] Can't find ip_set type hash:net, [ 1786.395450][T12978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1786.597185][T12978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.597214][T12978] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1786.597225][T12978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.600428][T12978] usb 2-1: config 0 descriptor?? [ 1787.649660][T12978] usbhid 2-1:0.0: can't add hid device: -71 [ 1787.649785][T12978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1787.653951][T12978] usb 2-1: USB disconnect, device number 9 [ 1788.146889][T20665] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1788.289003][T12978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1788.460642][T12978] usb 2-1: Using ep0 maxpacket: 32 [ 1788.470878][T12978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.470923][T12978] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1788.470945][T12978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.558549][T12978] usb 2-1: config 0 descriptor?? [ 1788.561426][T12978] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1788.562870][T12978] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1790.740159][T18125] usb 2-1: USB disconnect, device number 10 [ 1790.810383][T18125] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1796.988865][T13902] libceph: connect (1)[b::]:6789 error -101 [ 1796.989087][T13902] libceph: mon0 (1)[b::]:6789 connect error [ 1797.205166][T20719] ceph: No mds server is up or the cluster is laggy [ 1797.245991][T13902] libceph: connect (1)[b::]:6789 error -101 [ 1797.246182][T13902] libceph: mon0 (1)[b::]:6789 connect error [ 1797.558916][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1797.568966][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1799.495698][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4412'. [ 1799.506616][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4412'. [ 1800.557975][T20761] overlayfs: failed to resolve './file1': -2 [ 1800.674637][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1800.682974][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1801.873817][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.873886][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.853626][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1805.198677][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 1805.275267][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4430'. [ 1805.282544][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4430'. [ 1806.242056][T20807] overlayfs: failed to resolve './file1': -2 [ 1806.815335][T13902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1806.976894][T13902] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1806.976927][T13902] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1806.976972][T13902] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1806.976993][T13902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.040197][T20814] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1807.060488][T13902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1809.214551][T20824] Bluetooth: hci2: command 0x0406 tx timeout [ 1811.993154][ T5943] usb 1-1: USB disconnect, device number 12 [ 1814.149951][ T9743] Bluetooth: hci4: command 0x0406 tx timeout [ 1814.373946][ T9640] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1814.523026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1814.577159][ T9640] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1814.577194][ T9640] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1814.577232][ T9640] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1814.577261][ T9640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.587807][T20849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1814.608269][ T9640] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1814.675240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1815.095686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1817.075771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1817.702285][ T5871] usb 1-1: USB disconnect, device number 13 [ 1819.313498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1820.367281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1820.694824][T20889] ufs: You didn't specify the type of your ufs filesystem [ 1820.694824][T20889] [ 1820.694824][T20889] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1820.694824][T20889] [ 1820.694824][T20889] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1820.695290][T20889] ufs: ufstype=old is supported read-only [ 1821.108102][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.261930][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 1822.573797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.552480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.129350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.170242][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1824.220583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.237176][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1824.287473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.045123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.046374][T21016] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1827.049510][T21016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1827.051531][T21016] vhci_hcd vhci_hcd.0: Device attached [ 1828.835758][T21017] vhci_hcd: connection closed [ 1828.971580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.019363][ T5967] vhci_hcd: stop threads [ 1829.019376][ T5967] vhci_hcd: release socket [ 1829.019397][ T5967] vhci_hcd: disconnect device [ 1829.991830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1830.058130][ C0] vkms_vblank_simulate: vblank timer overrun [ 1830.629256][T21043] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1830.629313][T21043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1830.659108][T21043] vhci_hcd vhci_hcd.0: Device attached [ 1830.923526][T18125] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1831.505276][T21044] vhci_hcd: connection reset by peer [ 1831.529777][ T13] vhci_hcd: stop threads [ 1831.529829][ T13] vhci_hcd: release socket [ 1831.577723][ T13] vhci_hcd: disconnect device [ 1837.063892][T18125] vhci_hcd: vhci_device speed not set [ 1840.489578][T21147] GUP no longer grows the stack in syz.7.4547 (21147): 200000011000-200000018000 (20000000e000) [ 1840.489625][T21147] CPU: 1 UID: 0 PID: 21147 Comm: syz.7.4547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1840.489649][T21147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1840.489667][T21147] Call Trace: [ 1840.489679][T21147] [ 1840.489688][T21147] dump_stack_lvl+0x189/0x250 [ 1840.489774][T21147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1840.489855][T21147] ? __pfx__printk+0x10/0x10 [ 1840.489876][T21147] ? find_vma+0xe7/0x160 [ 1840.489941][T21147] __get_user_pages+0x22f0/0x2860 [ 1840.490019][T21147] get_user_pages_remote+0x2f1/0xac0 [ 1840.490038][T21147] ? __pfx_mtree_load+0x10/0x10 [ 1840.490251][T21147] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1840.490274][T21147] ? __access_remote_vm+0x367/0x7d0 [ 1840.490300][T21147] __access_remote_vm+0x211/0x7d0 [ 1840.490332][T21147] ? __pfx___access_remote_vm+0x10/0x10 [ 1840.490351][T21147] ? set_page_refcounted+0xa0/0x1e0 [ 1840.490390][T21147] ? alloc_pages_noprof+0xe4/0x1e0 [ 1840.490417][T21147] proc_pid_cmdline_read+0x433/0x810 [ 1840.490455][T21147] ? __asan_memset+0x22/0x50 [ 1840.490490][T21147] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1840.490517][T21147] ? rw_verify_area+0x2ac/0x4e0 [ 1840.490554][T21147] vfs_readv+0x5b3/0x850 [ 1840.490577][T21147] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1840.490604][T21147] ? __pfx_vfs_readv+0x10/0x10 [ 1840.490644][T21147] ? __fget_files+0x2a/0x420 [ 1840.490674][T21147] ? __fget_files+0x3a6/0x420 [ 1840.490692][T21147] ? __fget_files+0x2a/0x420 [ 1840.490722][T21147] __x64_sys_preadv+0x19a/0x2a0 [ 1840.490746][T21147] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1840.490770][T21147] ? do_syscall_64+0xbe/0xfa0 [ 1840.490881][T21147] do_syscall_64+0xfa/0xfa0 [ 1840.490906][T21147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1840.490963][T21147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.491004][T21147] ? clear_bhb_loop+0x60/0xb0 [ 1840.491027][T21147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.491046][T21147] RIP: 0033:0x7f7ef883eec9 [ 1840.491068][T21147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1840.491086][T21147] RSP: 002b:00007f7ef6a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1840.491114][T21147] RAX: ffffffffffffffda RBX: 00007f7ef8a95fa0 RCX: 00007f7ef883eec9 [ 1840.491129][T21147] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 1840.491142][T21147] RBP: 00007f7ef88c1f91 R08: 0000000000006a76 R09: 0000000000000000 [ 1840.491155][T21147] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1840.491167][T21147] R13: 00007f7ef8a96038 R14: 00007f7ef8a95fa0 R15: 00007ffecf7c0028 [ 1840.491201][T21147] [ 1842.748983][T21159] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1842.749025][T21159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1842.749044][T21159] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1847.994321][T21217] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1848.460392][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1848.475880][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1850.049358][T21248] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4584'. [ 1851.592482][T18125] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1851.644600][T21268] overlayfs: missing 'lowerdir' [ 1851.770544][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4591'. [ 1851.777087][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4591'. [ 1853.004662][T18125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.004710][T18125] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1853.004734][T18125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.053935][T18125] usb 2-1: config 0 descriptor?? [ 1853.324253][T18125] usbhid 2-1:0.0: can't add hid device: -71 [ 1853.324376][T18125] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1853.332082][T18125] usb 2-1: USB disconnect, device number 11 [ 1854.119633][T18766] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1854.518172][T18766] usb 2-1: Using ep0 maxpacket: 32 [ 1854.533408][T18766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.533455][T18766] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1854.533477][T18766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.618110][T18766] usb 2-1: config 0 descriptor?? [ 1855.066101][T18766] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1855.110326][T18766] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1855.335594][T18766] usb 2-1: USB disconnect, device number 12 [ 1855.382649][T18766] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1856.825219][T13902] libceph: connect (1)[c::]:6789 error -101 [ 1856.825338][T13902] libceph: mon0 (1)[c::]:6789 connect error [ 1857.081837][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1857.082112][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1857.382020][T21307] ceph: No mds server is up or the cluster is laggy [ 1857.613889][T13902] libceph: connect (1)[c::]:6789 error -101 [ 1857.921531][T13902] libceph: mon0 (1)[c::]:6789 connect error [ 1862.311282][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4627'. [ 1862.889034][T21388] overlayfs: missing 'lowerdir' [ 1863.572257][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.572303][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1865.431432][T21407] : entered promiscuous mode [ 1865.758886][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4642'. [ 1866.040791][T21422] overlayfs: missing 'lowerdir' [ 1866.187819][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4646'. [ 1866.194780][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4646'. [ 1872.822466][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1873.030789][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4658'. [ 1873.031984][T21467] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4658'. [ 1874.586612][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4660'. [ 1874.587922][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4660'. [ 1875.230460][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1875.402192][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1875.402213][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1875.402234][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1875.402245][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.406689][T21489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1875.410528][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1879.572233][T13902] usb 2-1: USB disconnect, device number 13 [ 1883.440750][T21538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1883.441999][T21538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1887.060043][T13902] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1887.723475][T13902] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1887.723508][T13902] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1887.723547][T13902] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1887.723568][T13902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.823480][T21567] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1887.914499][T13902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1893.375647][ T5871] usb 1-1: USB disconnect, device number 14 [ 1895.079872][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4712'. [ 1896.784312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1897.728922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1897.745639][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4724'. [ 1897.796535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1897.810667][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4724'. [ 1897.861774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1898.541771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1898.632899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1898.671377][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1898.704456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.685480][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4731'. [ 1901.529031][T18096] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1902.088873][T18096] usb 10-1: Using ep0 maxpacket: 16 [ 1902.091481][T18096] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1902.091498][T18096] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1902.093593][T18096] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1902.093625][T18096] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.093642][T18096] usb 10-1: Product: syz [ 1902.093653][T18096] usb 10-1: Manufacturer: syz [ 1902.093665][T18096] usb 10-1: SerialNumber: syz [ 1902.098215][T18096] usb 10-1: config 0 descriptor?? [ 1902.107150][T18096] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1902.107203][T18096] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1902.391818][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1902.767948][T18096] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1902.768927][T18096] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1905.950215][T18096] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1906.020012][T18096] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1906.064394][T18096] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1906.098868][T18096] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1906.099325][T18096] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1906.099757][T18096] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1906.254409][T18096] usb 10-1: USB disconnect, device number 12 [ 1907.614516][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1910.796583][T21753] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1910.796600][T21753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1910.797029][T21753] vhci_hcd vhci_hcd.0: Device attached [ 1910.928564][T18125] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1911.038459][T18096] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1911.088532][T18125] usb 10-1: Using ep0 maxpacket: 16 [ 1911.226765][T18125] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1911.226796][T18125] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1911.229023][T18125] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1911.229039][T18125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.229049][T18125] usb 10-1: Product: syz [ 1911.229056][T18125] usb 10-1: Manufacturer: syz [ 1911.229063][T18125] usb 10-1: SerialNumber: syz [ 1911.233545][T18125] usb 10-1: config 0 descriptor?? [ 1911.428530][T18125] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1911.428562][T18125] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1911.552024][T21754] vhci_hcd: connection reset by peer [ 1911.552927][ T6623] vhci_hcd: stop threads [ 1911.552944][ T6623] vhci_hcd: release socket [ 1911.553010][ T6623] vhci_hcd: disconnect device [ 1911.899714][T18125] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1911.900529][T18125] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1913.129351][T18125] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1913.130491][T18125] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1913.131591][T18125] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1913.132525][T18125] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1913.137688][T18125] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1913.149214][T18125] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1913.164838][T18125] usb 10-1: USB disconnect, device number 13 [ 1916.128140][T18096] vhci_hcd: vhci_device speed not set [ 1916.508131][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1916.661353][ T5871] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1916.661370][ T5871] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1916.661379][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1916.661411][ T5871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1916.661424][ T5871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1916.662867][ T5871] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1916.662882][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1916.662891][ T5871] usb 2-1: Product: syz [ 1916.662899][ T5871] usb 2-1: Manufacturer: syz [ 1916.746987][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1916.747001][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1916.762672][ T5871] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1916.762685][ T5871] cdc_wdm 2-1:1.0: Unknown control protocol [ 1918.352049][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.352256][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.354094][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.354115][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.354700][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.354719][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.354946][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.354965][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.355194][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.355211][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.355433][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.355452][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.355697][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.355716][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.355949][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.355967][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.356196][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.356214][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1918.356443][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1918.356460][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1919.349996][T18125] usb 2-1: USB disconnect, device number 14 [ 1919.350012][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1920.047959][ T5943] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1920.230320][ T5943] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1920.230347][ T5943] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1920.230365][ T5943] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1920.230415][ T5943] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1920.230439][ T5943] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1920.232679][ T5943] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1920.232704][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1920.232722][ T5943] usb 10-1: Product: syz [ 1920.232735][ T5943] usb 10-1: Manufacturer: syz [ 1920.264332][ T5943] cdc_wdm 10-1:1.0: skipping garbage [ 1920.264349][ T5943] cdc_wdm 10-1:1.0: skipping garbage [ 1920.335018][ T5943] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1920.335037][ T5943] cdc_wdm 10-1:1.0: Unknown control protocol [ 1920.511138][T13902] usb 10-1: USB disconnect, device number 14 [ 1924.703025][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.703100][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1926.617551][ T9640] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1926.767544][ T9640] usb 2-1: Using ep0 maxpacket: 8 [ 1926.772452][ T9640] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1926.772468][ T9640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.772478][ T9640] usb 2-1: Product: syz [ 1926.772485][ T9640] usb 2-1: Manufacturer: syz [ 1926.772492][ T9640] usb 2-1: SerialNumber: syz [ 1926.775629][ T9640] usb 2-1: config 0 descriptor?? [ 1927.024370][ T9640] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1927.024784][ T9640] gspca_sunplus: reg_w_riv err -71 [ 1927.024876][ T9640] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1927.052826][ T9640] usb 2-1: USB disconnect, device number 15 [ 1927.387639][T13902] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1927.407669][T21945] netlink: 'syz.4.4821': attribute type 12 has an invalid length. [ 1927.407682][T21945] netlink: 'syz.4.4821': attribute type 29 has an invalid length. [ 1927.407689][T21945] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1927.457737][T18766] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1927.537500][T13902] usb 8-1: Using ep0 maxpacket: 8 [ 1927.545016][T13902] usb 8-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1927.545042][T13902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.545060][T13902] usb 8-1: Product: syz [ 1927.545072][T13902] usb 8-1: Manufacturer: syz [ 1927.545083][T13902] usb 8-1: SerialNumber: syz [ 1927.602236][T13902] usb 8-1: config 0 descriptor?? [ 1927.615499][T18766] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.615553][T18766] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1927.615978][T18766] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1927.616002][T18766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.652046][T18766] usb 1-1: config 0 descriptor?? [ 1927.686801][T18766] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1927.828166][T13902] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1927.828829][T13902] gspca_sunplus: reg_w_riv err -71 [ 1927.828914][T13902] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1927.840314][T13902] usb 8-1: USB disconnect, device number 22 [ 1927.882478][ T9640] usb 1-1: USB disconnect, device number 15 [ 1930.787521][T18125] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1931.130308][ T37] audit: type=1326 audit(2000001190.424:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.130366][ T37] audit: type=1326 audit(2000001190.424:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.130409][ T37] audit: type=1326 audit(2000001190.424:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.130446][ T37] audit: type=1326 audit(2000001190.434:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.130482][ T37] audit: type=1326 audit(2000001190.434:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.423134][T21982] netlink: 'syz.1.4833': attribute type 12 has an invalid length. [ 1931.423147][T21982] netlink: 'syz.1.4833': attribute type 29 has an invalid length. [ 1931.423154][T21982] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4833'. [ 1931.447198][ T37] audit: type=1326 audit(2000001190.744:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.447251][ T37] audit: type=1326 audit(2000001190.744:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.471696][ T37] audit: type=1326 audit(2000001190.754:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd99ae4d710 code=0x7ffc0000 [ 1931.473262][ T37] audit: type=1326 audit(2000001190.754:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1931.473304][ T37] audit: type=1326 audit(2000001190.754:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21972 comm="syz.9.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1932.333381][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4840'. [ 1932.334142][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4840'. [ 1933.454087][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1934.523530][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1934.529420][T22027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1934.612870][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4852'. [ 1934.623236][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4852'. [ 1935.760989][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4857'. [ 1936.018733][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4854'. [ 1936.019767][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4854'. [ 1939.131372][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1942.994877][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 1942.994894][ T37] audit: type=1326 audit(2000001202.305:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.066209][ T37] audit: type=1326 audit(2000001202.375:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.093097][ T37] audit: type=1326 audit(2000001202.375:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.199892][ T37] audit: type=1326 audit(2000001202.415:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.199948][ T37] audit: type=1326 audit(2000001202.415:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.199989][ T37] audit: type=1326 audit(2000001202.425:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.200029][ T37] audit: type=1326 audit(2000001202.425:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.200070][ T37] audit: type=1326 audit(2000001202.425:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1943.200111][ T37] audit: type=1326 audit(2000001202.425:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ef883d710 code=0x7ffc0000 [ 1943.200152][ T37] audit: type=1326 audit(2000001202.435:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22094 comm="syz.7.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef883eec9 code=0x7ffc0000 [ 1955.199576][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4907'. [ 1955.206280][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4907'. [ 1955.511470][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 1955.511488][ T37] audit: type=1326 audit(2000001214.826:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.511936][ T37] audit: type=1326 audit(2000001214.826:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576093][ T37] audit: type=1326 audit(2000001214.886:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576149][ T37] audit: type=1326 audit(2000001214.886:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576200][ T37] audit: type=1326 audit(2000001214.886:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576244][ T37] audit: type=1326 audit(2000001214.886:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576286][ T37] audit: type=1326 audit(2000001214.886:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576327][ T37] audit: type=1326 audit(2000001214.886:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576368][ T37] audit: type=1326 audit(2000001214.886:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1955.576411][ T37] audit: type=1326 audit(2000001214.886:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd99ae4d710 code=0x7ffc0000 [ 1957.455831][T18766] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1957.631797][T18766] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.631853][T18766] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1957.632035][T18766] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1957.632058][T18766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.705031][T18766] usb 5-1: config 0 descriptor?? [ 1957.719607][T18766] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1957.973475][T18766] usb 5-1: USB disconnect, device number 18 [ 1958.465746][T18766] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1958.558038][ T9743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1958.596304][ T9743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1958.598514][ T9743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1958.601637][ T9743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1958.609264][ T9743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1958.805757][T18766] usb 5-1: Using ep0 maxpacket: 32 [ 1958.808309][T18766] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.808362][T18766] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1958.808403][T18766] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1958.808426][T18766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.813814][T18766] usb 5-1: config 0 descriptor?? [ 1958.839504][T18766] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1958.841499][T18766] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1960.775686][T20836] Bluetooth: hci5: command tx timeout [ 1960.790939][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1960.892526][T22254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1961.015649][T12978] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1961.175591][T12978] usb 10-1: Using ep0 maxpacket: 16 [ 1961.181143][T12978] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1961.181169][T12978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1961.186464][T12978] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1961.186489][T12978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.186508][T12978] usb 10-1: Product: syz [ 1961.186522][T12978] usb 10-1: Manufacturer: syz [ 1961.186535][T12978] usb 10-1: SerialNumber: syz [ 1961.379342][T12978] usb 10-1: config 0 descriptor?? [ 1961.395701][T12978] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1961.395720][T12978] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1961.630741][ T5943] usb 5-1: USB disconnect, device number 19 [ 1962.086971][T12978] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1962.087623][T12978] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1962.484071][T22231] chnl_net:caif_netlink_parms(): no params data found [ 1962.846514][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4932'. [ 1962.866286][T20836] Bluetooth: hci5: command tx timeout [ 1962.897728][T22268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4932'. [ 1963.091474][T12978] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1963.098613][T12978] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1963.113523][T12978] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1963.316713][T12978] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1963.318677][T12978] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1963.319117][T12978] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1963.346870][T12978] usb 10-1: USB disconnect, device number 15 [ 1963.591795][T22283] overlayfs: failed to resolve './file1': -2 [ 1963.870008][T22231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.870136][T22231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.870304][T22231] bridge_slave_0: entered allmulticast mode [ 1963.872157][T22231] bridge_slave_0: entered promiscuous mode [ 1963.903416][T22231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.903824][T22231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.915694][T22231] bridge_slave_1: entered allmulticast mode [ 1963.924880][T22231] bridge_slave_1: entered promiscuous mode [ 1964.212419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.412798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.676694][T22231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.728895][T22231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.935491][T20836] Bluetooth: hci5: command tx timeout [ 1965.276686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1965.654179][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.301955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.542220][T22231] team0: Port device team_slave_0 added [ 1966.583741][T22231] team0: Port device team_slave_1 added [ 1967.051807][T20836] Bluetooth: hci5: command tx timeout [ 1967.126183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1967.789278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1967.811490][T22231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1967.811506][T22231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1967.811532][T22231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1967.929248][T22231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1967.929265][T22231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1967.929292][T22231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1968.466105][ T9640] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1968.615179][ T9640] usb 2-1: Using ep0 maxpacket: 16 [ 1968.617624][ T9640] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1968.617653][ T9640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1968.620873][ T9640] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1968.620899][ T9640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.620917][ T9640] usb 2-1: Product: syz [ 1968.620931][ T9640] usb 2-1: Manufacturer: syz [ 1968.620945][ T9640] usb 2-1: SerialNumber: syz [ 1968.631302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1969.733632][ C1] vkms_vblank_simulate: vblank timer overrun [ 1969.940977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1970.102296][ T9640] usb 2-1: config 0 descriptor?? [ 1970.121600][ T9640] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1970.121637][ T9640] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1970.247880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1970.458100][T22339] overlayfs: failed to resolve './file1': -2 [ 1970.513519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1970.735091][T18096] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1970.811086][ T9640] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1970.811619][ T9640] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1970.907474][T18096] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1970.907491][T18096] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1970.907502][T18096] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1970.907533][T18096] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1970.907546][T18096] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1970.909568][T18096] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1970.909583][T18096] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1970.909628][T18096] usb 10-1: Product: syz [ 1970.909636][T18096] usb 10-1: Manufacturer: syz [ 1971.008690][T18096] cdc_wdm 10-1:1.0: skipping garbage [ 1971.008702][T18096] cdc_wdm 10-1:1.0: skipping garbage [ 1971.170287][ C1] vkms_vblank_simulate: vblank timer overrun [ 1971.247169][T18096] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1971.247189][T18096] cdc_wdm 10-1:1.0: Unknown control protocol [ 1971.444412][T18096] usb 10-1: USB disconnect, device number 16 [ 1971.820929][ T9640] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1971.821468][ T9640] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1971.821982][ T9640] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1971.960957][ T5943] IPVS: starting estimator thread 0... [ 1972.025709][ T9640] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1972.026072][ T9640] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1972.026364][ T9640] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1972.040477][ T9640] usb 2-1: USB disconnect, device number 16 [ 1972.045057][T22345] IPVS: using max 7 ests per chain, 16800 per kthread [ 1972.775297][ T9640] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1972.925527][ T9640] usb 5-1: Using ep0 maxpacket: 32 [ 1972.928144][ T9640] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1972.928168][ T9640] usb 5-1: config 0 has no interface number 0 [ 1972.928201][ T9640] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1972.932333][ T9640] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1972.932348][ T9640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.932359][ T9640] usb 5-1: Product: syz [ 1972.932366][ T9640] usb 5-1: Manufacturer: syz [ 1972.932373][ T9640] usb 5-1: SerialNumber: syz [ 1973.954118][ T9640] usb 5-1: config 0 descriptor?? [ 1974.284628][T14971] usb 5-1: USB disconnect, device number 20 [ 1975.218046][T18766] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1975.372642][T22383] overlayfs: missing 'lowerdir' [ 1975.387123][T17947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.389975][T18766] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1975.389999][T18766] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1975.390016][T18766] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1975.390064][T18766] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1975.390087][T18766] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1975.392262][T18766] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1975.392287][T18766] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1975.392306][T18766] usb 5-1: Product: syz [ 1975.392319][T18766] usb 5-1: Manufacturer: syz [ 1975.407223][T18766] cdc_wdm 5-1:1.0: skipping garbage [ 1975.407238][T18766] cdc_wdm 5-1:1.0: skipping garbage [ 1975.420609][T18766] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1975.420634][T18766] cdc_wdm 5-1:1.0: Unknown control protocol [ 1975.545482][T17947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.599879][T17947] bond0 (unregistering): Released all slaves [ 1975.630465][ C1] wdm_int_callback: 1357 callbacks suppressed [ 1975.630490][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.630509][ C1] wdm_int_callback: 1357 callbacks suppressed [ 1975.630524][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.630759][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.630778][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.631013][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.631032][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.631257][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.631277][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.631570][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.631589][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.631831][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.631852][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.632135][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.632158][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.632300][T18766] usb 5-1: USB disconnect, device number 21 [ 1975.632387][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1975.632406][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1975.632423][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1975.864475][T22231] hsr_slave_0: entered promiscuous mode [ 1975.872495][T22231] hsr_slave_1: entered promiscuous mode [ 1975.873557][T22231] debugfs: 'hsr0' already exists in 'hsr' [ 1975.873582][T22231] Cannot create hsr debugfs directory [ 1976.016850][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 1976.016868][ T37] audit: type=1326 audit(2000001235.297:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.016913][ T37] audit: type=1326 audit(2000001235.307:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.016954][ T37] audit: type=1326 audit(2000001235.307:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.016994][ T37] audit: type=1326 audit(2000001235.307:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.017033][ T37] audit: type=1326 audit(2000001235.307:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.017073][ T37] audit: type=1326 audit(2000001235.317:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.017113][ T37] audit: type=1326 audit(2000001235.327:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.017155][ T37] audit: type=1326 audit(2000001235.327:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd99ae4d710 code=0x7ffc0000 [ 1976.017198][ T37] audit: type=1326 audit(2000001235.327:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1976.017240][ T37] audit: type=1326 audit(2000001235.327:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22390 comm="syz.9.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1977.328522][T17947] : left promiscuous mode [ 1977.786494][T17947] tipc: Disabling bearer [ 1977.786707][T17947] tipc: Left network mode [ 1978.984045][ C0] vkms_vblank_simulate: vblank timer overrun [ 1980.184531][T17947] hsr_slave_0: left promiscuous mode [ 1980.232051][T17947] hsr_slave_1: left promiscuous mode [ 1980.233006][T17947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1980.275481][T17947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1980.644528][T22439] ufs: You didn't specify the type of your ufs filesystem [ 1980.644528][T22439] [ 1980.644528][T22439] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1980.644528][T22439] [ 1980.644528][T22439] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1980.644580][T22439] ufs: ufstype=old is supported read-only [ 1980.869484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1981.348311][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 1981.348328][ T37] audit: type=1326 audit(2000001240.657:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1981.348377][ T37] audit: type=1326 audit(2000001240.667:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1981.349555][ T37] audit: type=1326 audit(2000001240.667:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1981.349844][ T37] audit: type=1326 audit(2000001240.667:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1981.350764][ T37] audit: type=1326 audit(2000001240.667:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1981.350810][ T37] audit: type=1326 audit(2000001240.667:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1981.734081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1982.234371][ T37] audit: type=1326 audit(2000001240.667:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1982.241408][ T37] audit: type=1326 audit(2000001241.557:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1982.241456][ T37] audit: type=1326 audit(2000001241.557:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1982.241501][ T37] audit: type=1326 audit(2000001241.557:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22446 comm="syz.9.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd99ae4eec9 code=0x7ffc0000 [ 1983.166920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1985.454948][T22457] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1986.142021][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.142095][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1989.211047][T17947] team0 (unregistering): Port device team_slave_1 removed [ 1993.595840][T17947] team0 (unregistering): Port device team_slave_0 removed [ 1996.414542][T20824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1996.418124][T20824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1996.421436][T20824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1996.423370][T20824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1996.433843][T20824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1998.453679][T20836] Bluetooth: hci1: command tx timeout [ 1998.783081][T20824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1998.805172][T20824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1998.811705][T20824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1998.812776][T20824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1998.823638][T20824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2000.533654][T20824] Bluetooth: hci1: command tx timeout [ 2000.801362][T20836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2000.826622][T20836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2000.828100][T20836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2000.829503][T20836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2000.830359][T20836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2001.443804][T20836] Bluetooth: hci6: command tx timeout [ 2001.871047][T20824] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2001.900215][T20824] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2001.901747][T20824] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2001.902966][T20824] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2001.931320][T20824] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2002.623304][T20824] Bluetooth: hci1: command tx timeout [ 2002.933463][T20824] Bluetooth: hci7: command tx timeout [ 2003.493225][T20824] Bluetooth: hci6: command tx timeout [ 2004.053260][T20824] Bluetooth: hci8: command tx timeout [ 2004.693512][T20824] Bluetooth: hci1: command tx timeout [ 2005.015154][T20824] Bluetooth: hci7: command tx timeout [ 2005.573789][T20824] Bluetooth: hci6: command tx timeout [ 2006.133053][T20824] Bluetooth: hci8: command tx timeout [ 2007.093101][T20824] Bluetooth: hci7: command tx timeout [ 2007.652968][T20824] Bluetooth: hci6: command tx timeout [ 2008.212953][T20824] Bluetooth: hci8: command tx timeout [ 2009.182856][T20836] Bluetooth: hci7: command tx timeout [ 2010.302824][T20824] Bluetooth: hci8: command tx timeout [ 2016.994318][T20836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2017.010595][T20836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2017.012144][T20836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2017.032325][T20836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2017.033129][T20836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2019.172360][T20836] Bluetooth: hci0: command tx timeout [ 2021.252219][T20836] Bluetooth: hci0: command tx timeout [ 2022.536881][T22472] chnl_net:caif_netlink_parms(): no params data found [ 2023.053965][T22469] chnl_net:caif_netlink_parms(): no params data found [ 2023.159732][T22463] chnl_net:caif_netlink_parms(): no params data found [ 2023.168302][T22475] chnl_net:caif_netlink_parms(): no params data found [ 2023.332105][T20836] Bluetooth: hci0: command tx timeout [ 2025.411952][T20836] Bluetooth: hci0: command tx timeout [ 2026.563263][T22472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.563398][T22472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.563622][T22472] bridge_slave_0: entered allmulticast mode [ 2026.566787][T22472] bridge_slave_0: entered promiscuous mode [ 2026.600222][T22480] chnl_net:caif_netlink_parms(): no params data found [ 2026.629355][T22472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.629487][T22472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.629694][T22472] bridge_slave_1: entered allmulticast mode [ 2026.633413][T22472] bridge_slave_1: entered promiscuous mode [ 2031.616950][T22472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.934955][T22469] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.935093][T22469] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.935319][T22469] bridge_slave_0: entered allmulticast mode [ 2031.943577][T22469] bridge_slave_0: entered promiscuous mode [ 2033.143032][T22472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.309381][T22469] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.309597][T22469] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.309826][T22469] bridge_slave_1: entered allmulticast mode [ 2034.314660][T22469] bridge_slave_1: entered promiscuous mode [ 2034.316222][T22463] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.316347][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.316549][T22463] bridge_slave_0: entered allmulticast mode [ 2034.319384][T22463] bridge_slave_0: entered promiscuous mode [ 2034.866514][T22475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.866653][T22475] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.866881][T22475] bridge_slave_0: entered allmulticast mode [ 2034.870015][T22475] bridge_slave_0: entered promiscuous mode [ 2035.589167][T22463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.589310][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.589549][T22463] bridge_slave_1: entered allmulticast mode [ 2035.593540][T22463] bridge_slave_1: entered promiscuous mode [ 2035.874878][T22475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.875013][T22475] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.875215][T22475] bridge_slave_1: entered allmulticast mode [ 2035.879321][T22475] bridge_slave_1: entered promiscuous mode [ 2037.728224][T22472] team0: Port device team_slave_0 added [ 2039.109140][T22469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.049212][T22472] team0: Port device team_slave_1 added [ 2040.070224][T22469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.278073][T22463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.281673][T22480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.281800][T22480] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.282026][T22480] bridge_slave_0: entered allmulticast mode [ 2041.289042][T22480] bridge_slave_0: entered promiscuous mode [ 2042.404302][T22475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2042.412946][T22463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2042.413165][T22480] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.413358][T22480] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.413566][T22480] bridge_slave_1: entered allmulticast mode [ 2042.416466][T22480] bridge_slave_1: entered promiscuous mode [ 2043.241886][T22475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2045.166904][T22472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.166920][T22472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2045.166946][T22472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2045.707014][T22469] team0: Port device team_slave_0 added [ 2046.495538][T22472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.495554][T22472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2046.495580][T22472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.579434][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.579504][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.626983][T22469] team0: Port device team_slave_1 added [ 2047.642952][T22463] team0: Port device team_slave_0 added [ 2047.647593][T22480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.658502][T22475] team0: Port device team_slave_0 added [ 2047.925600][T22480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.928110][T22463] team0: Port device team_slave_1 added [ 2047.933632][T22475] team0: Port device team_slave_1 added [ 2052.568198][T22469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2052.568215][T22469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2052.568241][T22469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.211214][T22469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.211232][T22469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.211256][T22469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.214575][T22480] team0: Port device team_slave_0 added [ 2056.215924][T22463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.215937][T22463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.215963][T22463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.823606][T22475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.823624][T22475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.823648][T22475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.847178][T22463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.847193][T22463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.847226][T22463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.852496][T22480] team0: Port device team_slave_1 added [ 2056.877926][T22472] hsr_slave_0: entered promiscuous mode [ 2056.892978][T22472] hsr_slave_1: entered promiscuous mode [ 2056.894094][T22472] debugfs: 'hsr0' already exists in 'hsr' [ 2056.894120][T22472] Cannot create hsr debugfs directory [ 2056.896036][T22475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.896050][T22475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.896076][T22475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2057.431919][T20824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2057.459066][T20824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2057.477675][T20824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2057.478941][T20824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2057.499118][T20824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2059.322114][T20824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2059.345784][T20824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2059.349362][T20824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2059.384036][T20824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2059.385393][T20824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2059.570262][T20836] Bluetooth: hci3: command tx timeout [ 2060.266524][T22480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.266541][T22480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2060.266567][T22480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2061.490195][T20836] Bluetooth: hci4: command tx timeout [ 2061.650306][T20836] Bluetooth: hci3: command tx timeout [ 2062.013874][T20836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2062.035938][T20836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2062.037335][T20836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2062.038502][T20836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2062.039333][T20836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2062.317614][T20836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2062.336638][T20836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2062.338025][T20836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2062.339568][T20836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2062.368841][T20836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2063.525213][T22480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2063.525230][T22480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2063.525256][T22480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2063.569954][T20836] Bluetooth: hci4: command tx timeout [ 2063.739810][T20836] Bluetooth: hci3: command tx timeout [ 2064.130124][T20836] Bluetooth: hci1: command tx timeout [ 2064.449905][T20836] Bluetooth: hci9: command tx timeout [ 2065.652511][T20836] Bluetooth: hci4: command tx timeout [ 2065.809698][T20836] Bluetooth: hci3: command tx timeout [ 2066.209768][T20836] Bluetooth: hci1: command tx timeout [ 2066.529789][T20836] Bluetooth: hci9: command tx timeout [ 2067.729985][T20836] Bluetooth: hci4: command tx timeout [ 2068.289677][T20836] Bluetooth: hci1: command tx timeout [ 2068.609683][T20836] Bluetooth: hci9: command tx timeout [ 2070.369543][T20836] Bluetooth: hci1: command tx timeout [ 2070.689681][T20836] Bluetooth: hci9: command tx timeout [ 2071.861536][T22480] hsr_slave_0: entered promiscuous mode [ 2071.863021][T22480] hsr_slave_1: entered promiscuous mode [ 2071.864066][T22480] debugfs: 'hsr0' already exists in 'hsr' [ 2071.864090][T22480] Cannot create hsr debugfs directory [ 2075.528782][T22514] chnl_net:caif_netlink_parms(): no params data found [ 2075.758530][T22520] chnl_net:caif_netlink_parms(): no params data found [ 2076.067429][T22524] chnl_net:caif_netlink_parms(): no params data found [ 2076.116145][T22526] chnl_net:caif_netlink_parms(): no params data found [ 2077.290073][T20824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2077.314121][T20824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2077.315582][T20824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2077.317204][T20824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2077.319743][T20824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2079.408935][T20836] Bluetooth: hci6: command tx timeout [ 2079.677833][T22514] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.677971][T22514] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.678208][T22514] bridge_slave_0: entered allmulticast mode [ 2079.681510][T22514] bridge_slave_0: entered promiscuous mode [ 2080.284244][T22514] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.284390][T22514] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.284677][T22514] bridge_slave_1: entered allmulticast mode [ 2080.287780][T22514] bridge_slave_1: entered promiscuous mode [ 2081.315072][T22520] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.315258][T22520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2081.315507][T22520] bridge_slave_0: entered allmulticast mode [ 2081.339414][T22520] bridge_slave_0: entered promiscuous mode [ 2081.489118][T20836] Bluetooth: hci6: command tx timeout [ 2083.048184][T22520] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.048359][T22520] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.063222][T22520] bridge_slave_1: entered allmulticast mode [ 2083.066129][T22520] bridge_slave_1: entered promiscuous mode [ 2083.083676][T22514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2083.568689][T20836] Bluetooth: hci6: command tx timeout [ 2083.975577][T22524] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.975724][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.975968][T22524] bridge_slave_0: entered allmulticast mode [ 2084.003835][T22524] bridge_slave_0: entered promiscuous mode [ 2084.286421][T22514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2084.310042][T22526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.310202][T22526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.310430][T22526] bridge_slave_0: entered allmulticast mode [ 2084.315010][T22526] bridge_slave_0: entered promiscuous mode [ 2084.345456][T22524] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.345589][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.345836][T22524] bridge_slave_1: entered allmulticast mode [ 2084.370004][T22524] bridge_slave_1: entered promiscuous mode [ 2085.499497][T20836] Bluetooth: hci5: command 0x0406 tx timeout [ 2085.658876][T20836] Bluetooth: hci6: command tx timeout [ 2088.523858][T22526] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.523999][T22526] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.524236][T22526] bridge_slave_1: entered allmulticast mode [ 2088.527452][T22526] bridge_slave_1: entered promiscuous mode [ 2088.990071][T22520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2090.861305][T22520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2090.863622][T22514] team0: Port device team_slave_0 added [ 2091.216523][T22524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2091.516753][T22514] team0: Port device team_slave_1 added [ 2091.537228][T22526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2091.543440][T22524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2093.387832][T22526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2095.424761][T22520] team0: Port device team_slave_0 added [ 2096.033421][T22514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.033437][T22514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.033463][T22514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.042335][T22520] team0: Port device team_slave_1 added [ 2096.855187][T22514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.855204][T22514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.855229][T22514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2096.870271][T22524] team0: Port device team_slave_0 added [ 2097.557305][T22526] team0: Port device team_slave_0 added [ 2097.585775][T22524] team0: Port device team_slave_1 added [ 2098.283888][T22526] team0: Port device team_slave_1 added [ 2099.307546][T22520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.307563][T22520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.307588][T22520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2101.433476][T22520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2101.433492][T22520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2101.433527][T22520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2103.942122][T22524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2103.942138][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2103.942164][T22524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.183232][T22526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.183249][T22526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.183274][T22526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.184867][T22524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.184880][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.184904][T22524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2104.207142][T22514] hsr_slave_0: entered promiscuous mode [ 2104.214317][T22514] hsr_slave_1: entered promiscuous mode [ 2104.215374][T22514] debugfs: 'hsr0' already exists in 'hsr' [ 2104.215397][T22514] Cannot create hsr debugfs directory [ 2104.231313][T22526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.231327][T22526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.231352][T22526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.352967][T22520] hsr_slave_0: entered promiscuous mode [ 2108.354568][T22520] hsr_slave_1: entered promiscuous mode [ 2108.356396][T22520] debugfs: 'hsr0' already exists in 'hsr' [ 2108.356420][T22520] Cannot create hsr debugfs directory [ 2109.027879][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.027954][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2110.526315][T22524] hsr_slave_0: entered promiscuous mode [ 2110.538747][T22524] hsr_slave_1: entered promiscuous mode [ 2110.539823][T22524] debugfs: 'hsr0' already exists in 'hsr' [ 2110.539847][T22524] Cannot create hsr debugfs directory [ 2111.552815][T22526] hsr_slave_0: entered promiscuous mode [ 2111.554458][T22526] hsr_slave_1: entered promiscuous mode [ 2111.555587][T22526] debugfs: 'hsr0' already exists in 'hsr' [ 2111.555612][T22526] Cannot create hsr debugfs directory [ 2112.952679][T22544] chnl_net:caif_netlink_parms(): no params data found [ 2118.378385][T20836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2118.383399][T20836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2118.405154][T20836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2118.408328][T20836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2118.411045][T20836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2119.927569][T20824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2119.987181][T20824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2119.989770][T20824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2119.990953][T20824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2119.992172][T20824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2120.069034][T22544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2120.069254][T22544] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.069814][T22544] bridge_slave_0: entered allmulticast mode [ 2120.072962][T22544] bridge_slave_0: entered promiscuous mode [ 2120.447113][T20824] Bluetooth: hci2: command tx timeout [ 2121.216704][T22544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.216841][T22544] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.218107][T22544] bridge_slave_1: entered allmulticast mode [ 2121.256660][T22544] bridge_slave_1: entered promiscuous mode [ 2121.877461][T20836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2121.899367][T20836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2121.900884][T20836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2121.902173][T20836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2121.932151][T20836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2122.063681][T20824] Bluetooth: hci7: command tx timeout [ 2122.526961][T20836] Bluetooth: hci2: command tx timeout [ 2122.704826][T20824] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2122.730094][T20824] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2122.731631][T20824] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2122.733389][T20824] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2122.734174][T20824] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2124.126664][T20836] Bluetooth: hci7: command tx timeout [ 2124.206923][T20836] Bluetooth: hci8: command tx timeout [ 2124.623097][T20836] Bluetooth: hci2: command tx timeout [ 2125.728612][T20836] Bluetooth: hci10: command tx timeout [ 2125.804907][T22544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2126.206670][T20836] Bluetooth: hci7: command tx timeout [ 2126.286348][T20836] Bluetooth: hci8: command tx timeout [ 2126.686476][T20836] Bluetooth: hci2: command tx timeout [ 2127.806405][T20836] Bluetooth: hci10: command tx timeout [ 2128.286878][T20836] Bluetooth: hci7: command tx timeout [ 2128.366887][T20836] Bluetooth: hci8: command tx timeout [ 2128.375100][T22544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2129.886133][T20836] Bluetooth: hci10: command tx timeout [ 2129.894798][T22544] team0: Port device team_slave_0 added [ 2129.945012][T22544] team0: Port device team_slave_1 added [ 2130.446361][T20836] Bluetooth: hci8: command tx timeout [ 2131.811179][T22544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2131.811195][T22544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.811220][T22544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.887534][T22544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.887546][T22544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.887560][T22544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.966051][T20836] Bluetooth: hci10: command tx timeout [ 2133.977947][T22544] hsr_slave_0: entered promiscuous mode [ 2133.979640][T22544] hsr_slave_1: entered promiscuous mode [ 2133.980850][T22544] debugfs: 'hsr0' already exists in 'hsr' [ 2133.980875][T22544] Cannot create hsr debugfs directory [ 2136.410906][T22567] chnl_net:caif_netlink_parms(): no params data found [ 2136.577467][T22573] chnl_net:caif_netlink_parms(): no params data found [ 2137.776501][T22576] chnl_net:caif_netlink_parms(): no params data found [ 2137.844769][T22579] chnl_net:caif_netlink_parms(): no params data found [ 2138.059664][T20824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2138.085877][T20824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2138.087341][T20824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2138.089432][T20824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2138.090508][T20824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2140.206053][T20836] Bluetooth: hci1: command tx timeout [ 2141.821713][T20836] Bluetooth: hci0: command 0x0406 tx timeout [ 2142.293445][T20824] Bluetooth: hci1: command tx timeout [ 2143.778395][T22567] bridge0: port 1(bridge_slave_0) entered blocking state [ 2143.778532][T22567] bridge0: port 1(bridge_slave_0) entered disabled state [ 2143.778781][T22567] bridge_slave_0: entered allmulticast mode [ 2143.781959][T22567] bridge_slave_0: entered promiscuous mode [ 2144.298281][T22567] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.298458][T22567] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.298711][T22567] bridge_slave_1: entered allmulticast mode [ 2144.301698][T22567] bridge_slave_1: entered promiscuous mode [ 2144.341799][T22573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.341931][T22573] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.342171][T22573] bridge_slave_0: entered allmulticast mode [ 2144.374267][T20824] Bluetooth: hci1: command tx timeout [ 2144.377715][T22573] bridge_slave_0: entered promiscuous mode [ 2146.455478][T20824] Bluetooth: hci1: command tx timeout [ 2146.662908][T22573] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.663045][T22573] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.663295][T22573] bridge_slave_1: entered allmulticast mode [ 2146.667083][T22573] bridge_slave_1: entered promiscuous mode [ 2149.139157][T22576] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.139292][T22576] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.139547][T22576] bridge_slave_0: entered allmulticast mode [ 2149.142863][T22576] bridge_slave_0: entered promiscuous mode [ 2149.198678][T22567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2149.221064][T22579] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.221231][T22579] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.221472][T22579] bridge_slave_0: entered allmulticast mode [ 2149.224548][T22579] bridge_slave_0: entered promiscuous mode [ 2150.369757][T22576] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.369893][T22576] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.370183][T22576] bridge_slave_1: entered allmulticast mode [ 2150.374434][T22576] bridge_slave_1: entered promiscuous mode [ 2150.422476][T22579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.422614][T22579] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.422871][T22579] bridge_slave_1: entered allmulticast mode [ 2150.446647][T22579] bridge_slave_1: entered promiscuous mode [ 2150.454140][T22567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2150.474422][T22573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2153.673973][T22573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.142132][T22576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.169489][T22579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.174084][T22567] team0: Port device team_slave_0 added [ 2155.567423][T22576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.591941][T22567] team0: Port device team_slave_1 added [ 2155.607786][T22579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.626689][T22573] team0: Port device team_slave_0 added [ 2157.187710][T22573] team0: Port device team_slave_1 added [ 2159.128985][T22576] team0: Port device team_slave_0 added [ 2159.150568][T22567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.150584][T22567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.150609][T22567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2159.202637][T22579] team0: Port device team_slave_0 added [ 2159.796863][T22576] team0: Port device team_slave_1 added [ 2159.799665][T22567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.799679][T22567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.799705][T22567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.870277][T22579] team0: Port device team_slave_1 added [ 2159.896008][T22573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.896025][T22573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.896052][T22573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2160.803513][T22573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2160.803529][T22573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2160.803554][T22573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2163.732719][T22576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2163.732735][T22576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2163.732767][T22576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2163.744821][T22579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2163.744834][T22579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2163.744858][T22579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2164.122921][T22579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2164.122937][T22579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2164.122964][T22579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2164.145346][T22576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2164.145361][T22576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2164.145387][T22576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2164.792183][T22567] hsr_slave_0: entered promiscuous mode [ 2164.793793][T22567] hsr_slave_1: entered promiscuous mode [ 2164.812358][T22567] debugfs: 'hsr0' already exists in 'hsr' [ 2164.812384][T22567] Cannot create hsr debugfs directory [ 2165.148553][T22573] hsr_slave_0: entered promiscuous mode [ 2165.150339][T22573] hsr_slave_1: entered promiscuous mode [ 2165.151491][T22573] debugfs: 'hsr0' already exists in 'hsr' [ 2165.151516][T22573] Cannot create hsr debugfs directory [ 2169.490670][T22576] hsr_slave_0: entered promiscuous mode [ 2169.492522][T22576] hsr_slave_1: entered promiscuous mode [ 2169.514694][T22576] debugfs: 'hsr0' already exists in 'hsr' [ 2169.514720][T22576] Cannot create hsr debugfs directory [ 2169.545992][T22579] hsr_slave_0: entered promiscuous mode [ 2169.547747][T22579] hsr_slave_1: entered promiscuous mode [ 2169.569768][T22579] debugfs: 'hsr0' already exists in 'hsr' [ 2169.569794][T22579] Cannot create hsr debugfs directory [ 2170.464726][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.464799][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2172.248116][T22595] chnl_net:caif_netlink_parms(): no params data found [ 2179.137916][T20836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2179.158200][T20836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2179.159651][T20836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2179.160859][T20836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2179.208194][T20836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2179.784537][T22595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2179.784754][T22595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.785030][T22595] bridge_slave_0: entered allmulticast mode [ 2179.843448][T22595] bridge_slave_0: entered promiscuous mode [ 2180.203544][T22595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.203679][T22595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.203925][T22595] bridge_slave_1: entered allmulticast mode [ 2180.208463][T22595] bridge_slave_1: entered promiscuous mode [ 2180.536985][T20824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2180.558384][T20824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2180.559844][T20824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2180.561424][T20824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2180.562219][T20824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2181.243837][T20836] Bluetooth: hci4: command tx timeout [ 2182.101016][T22627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2182.132588][ T9743] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2182.141801][ T9743] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2182.143684][ T9743] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2182.144519][ T9743] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2182.603306][ T9743] Bluetooth: hci6: command tx timeout [ 2182.766205][T20836] Bluetooth: hci3: command 0x0406 tx timeout [ 2183.150539][ T9743] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2183.179960][ T9743] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2183.181416][ T9743] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2183.200998][ T9743] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2183.213512][ T9743] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2183.323114][T22627] Bluetooth: hci4: command tx timeout [ 2183.330204][T22595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2184.203433][T20824] Bluetooth: hci9: command tx timeout [ 2184.683165][T20824] Bluetooth: hci6: command tx timeout [ 2185.254098][T20824] Bluetooth: hci11: command tx timeout [ 2185.402920][T20824] Bluetooth: hci4: command tx timeout [ 2185.694580][T22595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2186.283172][T20824] Bluetooth: hci9: command tx timeout [ 2186.762847][T20824] Bluetooth: hci6: command tx timeout [ 2187.323066][T20824] Bluetooth: hci11: command tx timeout [ 2187.482785][T20824] Bluetooth: hci4: command tx timeout [ 2188.363069][T20824] Bluetooth: hci9: command tx timeout [ 2188.842720][T20824] Bluetooth: hci6: command tx timeout [ 2189.402782][T20824] Bluetooth: hci11: command tx timeout [ 2190.442682][T20824] Bluetooth: hci9: command tx timeout [ 2191.482649][T20824] Bluetooth: hci11: command tx timeout [ 2193.330372][T22595] team0: Port device team_slave_0 added [ 2193.386715][T22595] team0: Port device team_slave_1 added [ 2195.209181][T22595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2195.209197][T22595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2195.209222][T22595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2195.351130][T22595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2195.351146][T22595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2195.351172][T22595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2196.230927][T22595] hsr_slave_0: entered promiscuous mode [ 2196.238765][T22595] hsr_slave_1: entered promiscuous mode [ 2196.239982][T22595] debugfs: 'hsr0' already exists in 'hsr' [ 2196.240007][T22595] Cannot create hsr debugfs directory [ 2198.103032][T22618] chnl_net:caif_netlink_parms(): no params data found [ 2198.315934][T22630] chnl_net:caif_netlink_parms(): no params data found [ 2198.346061][T22623] chnl_net:caif_netlink_parms(): no params data found [ 2198.925053][T22627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2198.961237][T22627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2198.970193][T22627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2198.971423][T22627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2198.988349][T22627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2200.153042][T22626] chnl_net:caif_netlink_parms(): no params data found [ 2201.082540][T22627] Bluetooth: hci2: command tx timeout [ 2203.162201][T22627] Bluetooth: hci2: command tx timeout [ 2204.652599][T22618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.652743][T22618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.652939][T22618] bridge_slave_0: entered allmulticast mode [ 2204.654632][T22618] bridge_slave_0: entered promiscuous mode [ 2205.242046][T22627] Bluetooth: hci2: command tx timeout [ 2205.594299][T22618] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.594437][T22618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.594972][T22618] bridge_slave_1: entered allmulticast mode [ 2205.598076][T22618] bridge_slave_1: entered promiscuous mode [ 2207.322638][T22627] Bluetooth: hci2: command tx timeout [ 2207.452972][T22630] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.453113][T22630] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.453425][T22630] bridge_slave_0: entered allmulticast mode [ 2207.456691][T22630] bridge_slave_0: entered promiscuous mode [ 2207.477056][T22623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.477210][T22623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.477483][T22623] bridge_slave_0: entered allmulticast mode [ 2207.480787][T22623] bridge_slave_0: entered promiscuous mode [ 2208.277966][T22630] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.279334][T22630] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.279653][T22630] bridge_slave_1: entered allmulticast mode [ 2208.293868][T22630] bridge_slave_1: entered promiscuous mode [ 2208.894362][T22623] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.894506][T22623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.894770][T22623] bridge_slave_1: entered allmulticast mode [ 2208.903414][T22623] bridge_slave_1: entered promiscuous mode [ 2208.930364][T22618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2211.400436][T22618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2211.692381][T22626] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.692524][T22626] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.692837][T22626] bridge_slave_0: entered allmulticast mode [ 2211.695940][T22626] bridge_slave_0: entered promiscuous mode [ 2214.526291][T22630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2214.531792][T22626] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.531924][T22626] bridge0: port 2(bridge_slave_1) entered disabled state [ 2214.532193][T22626] bridge_slave_1: entered allmulticast mode [ 2214.537343][T22626] bridge_slave_1: entered promiscuous mode [ 2214.550950][T22623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2215.890612][T22630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2216.628881][T22623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2216.645104][T22618] team0: Port device team_slave_0 added [ 2219.839820][T22618] team0: Port device team_slave_1 added [ 2220.534739][T22626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2222.463321][T22630] team0: Port device team_slave_0 added [ 2222.468051][T22626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2222.482604][T22623] team0: Port device team_slave_0 added [ 2222.923088][T22630] team0: Port device team_slave_1 added [ 2222.926596][T22623] team0: Port device team_slave_1 added [ 2223.617264][T22618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2223.617282][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2223.617306][T22618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2225.688477][T22618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2225.688494][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2225.688520][T22618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2227.036675][T22626] team0: Port device team_slave_0 added [ 2227.056977][T22630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2227.056994][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2227.057026][T22630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2227.059932][T22623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2227.059946][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2227.059970][T22623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2227.157904][T22626] team0: Port device team_slave_1 added [ 2227.159495][T22630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2227.159508][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2227.159534][T22630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2227.218080][T22623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2227.218095][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2227.218122][T22623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2229.961283][ T38] INFO: task syz-executor:22480 blocked for more than 143 seconds. [ 2229.961308][ T38] Not tainted syzkaller #0 [ 2229.961319][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2229.961328][ T38] task:syz-executor state:D stack:22264 pid:22480 tgid:22480 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2229.961381][ T38] Call Trace: [ 2229.961389][ T38] [ 2229.961403][ T38] __schedule+0x16f3/0x4c20 [ 2229.961523][ T38] ? __lock_acquire+0xab9/0xd20 [ 2229.961581][ T38] ? __pfx___schedule+0x10/0x10 [ 2229.961637][ T38] rt_mutex_schedule+0x77/0xf0 [ 2229.961662][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2229.961699][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 2229.961726][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 2229.961752][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2229.961776][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2229.961797][ T38] ? __lock_acquire+0xab9/0xd20 [ 2229.961839][ T38] ? del_device_store+0xd1/0x360 [ 2229.961934][ T38] ? __pfx_sscanf+0x10/0x10 [ 2229.961964][ T38] ? del_device_store+0xd1/0x360 [ 2229.961987][ T38] mutex_lock_nested+0x16a/0x1d0 [ 2229.962016][ T38] del_device_store+0xd1/0x360 [ 2229.962041][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 2229.962067][ T38] ? __pfx_del_device_store+0x10/0x10 [ 2229.962094][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 2229.962117][ T38] ? sysfs_kf_write+0x166/0x260 [ 2229.962144][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2229.962164][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 2229.962193][ T38] vfs_write+0x5d5/0xb40 [ 2229.962227][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2229.962249][ T38] ? __pfx_vfs_write+0x10/0x10 [ 2229.962287][ T38] ? do_sys_openat2+0x154/0x1c0 [ 2229.962321][ T38] ksys_write+0x14b/0x260 [ 2229.962352][ T38] ? __pfx_ksys_write+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2229.962382][ T38] ? do_syscall_64+0xbe/0xfa0 [ 2229.962414][ T38] do_syscall_64+0xfa/0xfa0 [ 2229.962439][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2229.962466][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.962487][ T38] ? clear_bhb_loop+0x60/0xb0 [ 2229.962511][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.962530][ T38] RIP: 0033:0x7f6e43bed97f [ 2229.962547][ T38] RSP: 002b:00007fff87445dc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2229.962566][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6e43bed97f [ 2229.962580][ T38] RDX: 0000000000000001 RSI: 00007fff87445e10 RDI: 0000000000000005 [ 2229.962593][ T38] RBP: 00007f6e43c73239 R08: 0000000000000000 R09: 00007fff87445c17 [ 2229.962607][ [ 2229.962607][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2229.962619][ T38] R13: 00007fff87445e10 R14: 00007f6e44974620 R15: 0000000000000003 [ 2229.962652][ T38] [ 2229.962717][ T38] [ 2229.962717][ T38] Showing all locks held in the system: [ 2229.962727][ T38] 5 locks held by rcuc/1/28: [ 2229.962739][ T38] 1 lock held by khungtaskd/38: [ 2229.962749][ T38] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2229.962822][ T38] 3 locks held by kworker/u8:10/1456: [ 2229.962833][ T38] #0: ffff88813fe29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2229.962902][ T38] #1: ffffc90005b07ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2229.962955][ T38] #2: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2229.963054][ T38] 3 locks held by kworker/u8:11/1473: [ 2229.963065][ T38] #0: ffff88814cff6938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2229.963117][ T38] #1: ffffc900056f7ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2229.963170][ T38] #2: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 2229.963277][ T38] 2 locks held by getty/5558: [ 2229.963287][ T38] #0: ffff88823bf2c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2229.963383][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 2229.963460][ T38] 5 locks held by kworker/u8:22/17947: [ 2229.963470][ T38] #0: ffff88801a294938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2229.963523][ T38] #1: ffffc9000640fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2229.963573][ T38] #2: ffffffff8ea6aa60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 2229.963654][ T38] #3: ffff8880273017b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 2229.963765][ T38] #4: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.963842][ T38] 7 locks held by syz-executor/22231: [ 2229.963854][ T38] #0: ffff888034cbc480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2229.963908][ T38] #1: ffff888032b56878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2229.963953][ T38] #2: ffff8881447cbb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2229.964002][ T38] #3: ffffffff8e309798 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2229.964052][ T38] #4: ffff8880295d80d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 2229.964216][ T38] #5: ffff8880295de300 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 2229.964267][ T38] #6: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.964316][ T38] 1 lock held by syz.4.4990/22433: [ 2229.964328][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.964375][ T38] 4 locks held by syz-executor/22480: [ 2229.964386][ T38] #0: ffff888034cbc480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2229.964440][ T38] #1: ffff88805e63d878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2229.964484][ T38] #2: ffff8881447cbb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2229.964533][ T38] #3: ffffffff8e309798 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2229.964585][ T38] 4 locks held by syz-executor/22514: [ 2229.964596][ T38] #0: ffff888034cbc480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 2229.964649][ T38] #1: ffff88803341a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2229.964693][ T38] #2: ffff8881447cbb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2229.964741][ T38] #3: ffffffff8e309798 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2229.964792][ T38] 1 lock held by syz-executor/22520: [ 2229.964810][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.964859][ T38] 1 lock held by syz-executor/22524: [ 2229.964869][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.964919][ T38] 1 lock held by syz-executor/22526: [ 2229.964929][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.964980][ T38] 1 lock held by syz-executor/22544: [ 2229.964991][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.965041][ T38] 1 lock held by syz-executor/22567: [ 2229.965052][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.965101][ T38] 1 lock held by syz-executor/22573: [ 2229.965113][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.965161][ T38] 1 lock held by syz-executor/22576: [ 2229.965172][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.965221][ T38] 1 lock held by syz-executor/22579: [ 2229.965232][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.965281][ T38] 1 lock held by syz-executor/22595: [ 2229.965291][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2229.965342][ T38] 2 locks held by syz-executor/22618: [ 2229.965353][ T38] #0: ffffffff8e202c20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2229.965435][ T38] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2229.965483][ T38] 1 lock held by syz-executor/22623: [ 2229.965495][ T38] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2229.965541][ T38] 2 locks held by syz-executor/22626: [ 2229.965552][ T38] #0: ffffffff8e202c20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2229.965606][ T38] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2229.965653][ T38] 1 lock held by syz-executor/22630: [ 2229.965664][ T38] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2229.965712][ T38] 2 locks held by syz-executor/22647: [ 2229.965723][ T38] #0: ffffffff8ef78ea8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2229.965777][ T38] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2229.965832][ T38] [ 2229.965837][ T38] ============================================= [ 2229.965837][ T38] [ 2229.965851][ T38] NMI backtrace for cpu 0 [ 2229.965864][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2229.965886][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2229.965897][ T38] Call Trace: [ 2229.965904][ T38] [ 2229.965913][ T38] dump_stack_lvl+0x189/0x250 [ 2229.965940][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2229.965962][ T38] ? __pfx__printk+0x10/0x10 [ 2229.965996][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 2229.966023][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2229.966049][ T38] ? __pfx__printk+0x10/0x10 [ 2229.966076][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2229.966116][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2229.966142][ T38] watchdog+0xf60/0xfa0 [ 2229.966175][ T38] ? watchdog+0x1e2/0xfa0 [ 2229.966201][ T38] kthread+0x711/0x8a0 [ 2229.966226][ T38] ? __pfx_watchdog+0x10/0x10 [ 2229.966245][ T38] ? __pfx_kthread+0x10/0x10 [ 2229.966264][ T38] ? rt_spin_unlock+0x150/0x200 [ 2229.966291][ T38] ? rt_spin_unlock+0x161/0x200 [ 2229.966311][ T38] ? __pfx_kthread+0x10/0x10 [ 2229.966334][ T38] ret_from_fork+0x4bc/0x870 [ 2229.966369][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2229.966402][ T38] ? __switch_to_asm+0x39/0x70 [ 2229.966423][ T38] ? __switch_to_asm+0x33/0x70 [ 2229.966445][ T38] ? __pfx_kthread+0x10/0x10 [ 2229.966467][ T38] ret_from_fork_asm+0x1a/0x30 [ 2229.966508][ T38] [ 2229.966515][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2229.966539][ C1] NMI backtrace for cpu 1 [ 2229.966559][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2229.966579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2229.966589][ C1] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 2229.966610][ C1] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 d4 ed 30 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 13 6e 92 eb 40 83 3d 7b 7d [ 2229.966625][ C1] RSP: 0018:ffffc90000a2df48 EFLAGS: 00000003 [ 2229.966640][ C1] RAX: 000000000000000b RBX: 0000000000000003 RCX: 0000000000000004 [ 2229.966652][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801c2e0000 [ 2229.966664][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8173acf5 [ 2229.966676][ C1] R10: ffffc90000a2e198 R11: ffffffff81ab0b10 R12: 0000000000000003 [ 2229.966688][ C1] R13: 0000000000000001 R14: ffff88801c2e0c00 R15: ffff88801c2e0bf8 [ 2229.966701][ C1] FS: 0000000000000000(0000) GS:ffff888126cc9000(0000) knlGS:0000000000000000 [ 2229.966717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2229.966730][ C1] CR2: 00007fff2de9dca8 CR3: 000000000d5a6000 CR4: 00000000003526f0 [ 2229.966746][ C1] Call Trace: [ 2229.966752][ C1] [ 2229.966763][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2229.966781][ C1] lock_acquire+0x120/0x360 [ 2229.966797][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2229.966818][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2229.966834][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 2229.966906][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2229.966922][ C1] unwind_next_frame+0xc2/0x2390 [ 2229.966939][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2229.966959][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2229.966976][ C1] ? ip_route_output_flow+0x2a/0x150 [ 2229.967056][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2229.967081][ C1] arch_stack_walk+0x11c/0x150 [ 2229.967102][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 2229.967123][ C1] stack_trace_save+0x9c/0xe0 [ 2229.967146][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2229.967169][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2229.967218][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2229.967244][ C1] kasan_save_track+0x3e/0x80 [ 2229.967260][ C1] ? kasan_save_track+0x3e/0x80 [ 2229.967275][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 2229.967290][ C1] ? __kmalloc_cache_noprof+0x1ef/0x6c0 [ 2229.967308][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 2229.967415][ C1] ? dst_init+0xd9/0x450 [ 2229.967453][ C1] ? dst_alloc+0x12a/0x170 [ 2229.967469][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 2229.967487][ C1] ? ip_route_output_key_hash+0x174/0x280 [ 2229.967503][ C1] ? ip_route_output_flow+0x2a/0x150 [ 2229.967527][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 2229.967572][ C1] __kasan_kmalloc+0x93/0xb0 [ 2229.967590][ C1] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 2229.967608][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 2229.967632][ C1] ref_tracker_alloc+0x13b/0x450 [ 2229.967656][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2229.967684][ C1] ? dst_alloc+0x105/0x170 [ 2229.967700][ C1] ? rcu_is_watching+0x15/0xb0 [ 2229.967722][ C1] dst_init+0xd9/0x450 [ 2229.967741][ C1] dst_alloc+0x12a/0x170 [ 2229.967759][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 2229.967781][ C1] ? ip_route_output_key_hash+0xc1/0x280 [ 2229.967799][ C1] ip_route_output_key_hash+0x174/0x280 [ 2229.967816][ C1] ? __lock_acquire+0xab9/0xd20 [ 2229.967835][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2229.967860][ C1] ip_route_output_flow+0x2a/0x150 [ 2229.967882][ C1] ? ip_route_me_harder+0x6ae/0xf10 [ 2229.967903][ C1] ip_route_me_harder+0x6c4/0xf10 [ 2229.967927][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 2229.967954][ C1] ? rcu_is_watching+0x15/0xb0 [ 2229.967979][ C1] synproxy_send_tcp+0x3a7/0x700 [ 2229.968061][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 2229.968092][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2229.968117][ C1] ? nft_xfrm_get_eval+0x3b8/0x500 [ 2229.968216][ C1] ? synproxy_pernet+0x45/0x270 [ 2229.968238][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 2229.968260][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2229.968281][ C1] ? nf_ip_checksum+0x13c/0x510 [ 2229.968323][ C1] nft_synproxy_do_eval+0x345/0x570 [ 2229.968345][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2229.968372][ C1] nft_do_chain+0x40c/0x1920 [ 2229.968389][ C1] ? __lock_acquire+0xab9/0xd20 [ 2229.968412][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2229.968443][ C1] ? __switch_to+0xdc8/0x1690 [ 2229.968472][ C1] nft_do_chain_inet+0x25d/0x340 [ 2229.968512][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2229.968530][ C1] ? __lock_acquire+0xab9/0xd20 [ 2229.968557][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2229.968578][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2229.968597][ C1] nf_hook_slow+0xc5/0x220 [ 2229.968644][ C1] NF_HOOK+0x206/0x3a0 [ 2229.968666][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2229.968688][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2229.968709][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2229.968729][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2229.968752][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2229.968775][ C1] ? skb_dst+0x4f/0xd0 [ 2229.968796][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 2229.968819][ C1] NF_HOOK+0x30c/0x3a0 [ 2229.968840][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2229.968861][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2229.968882][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2229.968903][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2229.968930][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2229.968950][ C1] __netif_receive_skb+0x143/0x380 [ 2229.968998][ C1] ? process_backlog+0x27b/0x900 [ 2229.969019][ C1] process_backlog+0x31e/0x900 [ 2229.969046][ C1] __napi_poll+0xb6/0x540 [ 2229.969068][ C1] net_rx_action+0x5f7/0xda0 [ 2229.969096][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2229.969119][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 2229.969146][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2229.969167][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2229.969196][ C1] handle_softirqs+0x22f/0x710 [ 2229.969225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2229.969254][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 2229.969280][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2229.969309][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2229.969329][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2229.969348][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 2229.969369][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2229.969394][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 2229.969414][ C1] ? __lock_acquire+0xab9/0xd20 [ 2229.969431][ C1] ? __pfx___schedule+0x10/0x10 [ 2229.969460][ C1] ? schedule+0x91/0x360 [ 2229.969486][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2229.969501][ C1] smpboot_thread_fn+0x542/0xa60 [ 2229.969518][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2229.969537][ C1] kthread+0x711/0x8a0 [ 2229.969563][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2229.969579][ C1] ? __pfx_kthread+0x10/0x10 [ 2229.969596][ C1] ? rt_spin_unlock+0x150/0x200 [ 2229.969619][ C1] ? rt_spin_unlock+0x161/0x200 [ 2229.969639][ C1] ? __pfx_kthread+0x10/0x10 [ 2229.969659][ C1] ret_from_fork+0x4bc/0x870 [ 2229.969683][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2229.969710][ C1] ? __switch_to_asm+0x39/0x70 [ 2229.969731][ C1] ? __switch_to_asm+0x33/0x70 [ 2229.969752][ C1] ? __pfx_kthread+0x10/0x10 [ 2229.969771][ C1] ret_from_fork_asm+0x1a/0x30 [ 2229.969800][ C1] [ 2230.290411][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2230.290432][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2230.290455][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2230.290472][ T38] Call Trace: [ 2230.290480][ T38] [ 2230.290489][ T38] dump_stack_lvl+0x99/0x250 [ 2230.290518][ T38] ? __asan_memcpy+0x40/0x70 [ 2230.290546][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2230.290567][ T38] ? __pfx__printk+0x10/0x10 [ 2230.290602][ T38] vpanic+0x237/0x6d0 [ 2230.290620][ T38] ? __pfx_vpanic+0x10/0x10 [ 2230.290639][ T38] ? preempt_schedule_common+0x83/0xd0 [ 2230.290673][ T38] panic+0xb9/0xc0 [ 2230.290691][ T38] ? __pfx_panic+0x10/0x10 [ 2230.290711][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 2230.290744][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2230.290769][ T38] watchdog+0xf9f/0xfa0 [ 2230.290796][ T38] ? watchdog+0x1e2/0xfa0 [ 2230.290821][ T38] kthread+0x711/0x8a0 [ 2230.290847][ T38] ? __pfx_watchdog+0x10/0x10 [ 2230.290866][ T38] ? __pfx_kthread+0x10/0x10 [ 2230.290885][ T38] ? rt_spin_unlock+0x150/0x200 [ 2230.290911][ T38] ? rt_spin_unlock+0x161/0x200 [ 2230.290931][ T38] ? __pfx_kthread+0x10/0x10 [ 2230.290953][ T38] ret_from_fork+0x4bc/0x870 [ 2230.290983][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2230.291017][ T38] ? __switch_to_asm+0x39/0x70 [ 2230.291039][ T38] ? __switch_to_asm+0x33/0x70 [ 2230.291060][ T38] ? __pfx_kthread+0x10/0x10 [ 2230.291082][ T38] ret_from_fork_asm+0x1a/0x30 [ 2230.291122][ T38] [ 2230.291371][ T38] Kernel Offset: disabled