last executing test programs: 24m18.62796842s ago: executing program 2 (id=473): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x800, 0x12) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}, {0xffffffffffffffff, 0x201}], 0x2, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 24m14.257710406s ago: executing program 0 (id=478): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r0, 0x0, 0xc014) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket(0x2000000000000021, 0x800, 0x2) shutdown(r3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0xff}, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) socket$packet(0x11, 0x2, 0x300) 24m13.970630652s ago: executing program 2 (id=479): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r0, 0x0, 0xc014) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket(0x2000000000000021, 0x800, 0x2) shutdown(r3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0xff}, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="d080aed971b71862015ce90c8dc9ee98080000", @ANYRES16=0x0, @ANYRES64=r0], 0xd0}, 0x1, 0x0, 0x0, 0x4008081}, 0xc243daee1b27c24c) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) socket$packet(0x11, 0x2, 0x300) 24m10.016322175s ago: executing program 1 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 24m9.596668774s ago: executing program 4 (id=485): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 24m9.595787434s ago: executing program 1 (id=486): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x10000, 0x800, {0xffffffffffffffff}, {0xee00}, 0xc, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x43c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x410, 0x2, [@TCA_U32_SEL={0x294, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0x8000, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x54, 0xd6fa, 0x5}, {0x5, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x164, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x8, 0x2, 0x1}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x43c}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 24m9.101391598s ago: executing program 2 (id=487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000002c0)) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe9, 0x318, 0x1, 0x24}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r8, &(0x7f0000000700)={0x2, 0x0, @multicast2}, 0x10) 24m9.09337763s ago: executing program 0 (id=488): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) 24m8.333193209s ago: executing program 0 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 24m7.871470522s ago: executing program 0 (id=490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000000000000000000029fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000422020000c0a5c0faf5258e0d9aee55dcd54985679e3c562cdd563aa5997a30b5786c030d827897d39a272a55db5735198da27b4c76ef2da44000fa92d855304ff69619efc1c9b93d358377b75ea12cd6e72747771267aa558f6b974ca460c4ef3c19c492a2e2b43ad1321da6d8d1366b8de3763a463c557c1451c0a87de7eca6af6457bdba7abd5fd34c7b6dba914137b7a3bccf0a2c"], 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$TIOCSWINSZ(r6, 0x5414, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x4, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) 24m6.212551865s ago: executing program 1 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) 24m5.357513365s ago: executing program 1 (id=495): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) 24m5.310627864s ago: executing program 4 (id=496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0xe}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 24m5.044063628s ago: executing program 4 (id=497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x6, 0x34325258, 0x4, 0x6bb, 0xffffffff, 0x4, 0x6, 0x0, 0x1, 0x5, 0x3}}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) 24m5.008028201s ago: executing program 0 (id=498): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 24m3.574805703s ago: executing program 4 (id=499): r0 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x103d0411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b8000005000000003b974f58bd2b", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, 0x0, &(0x7f00000004c0)}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x4074) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ftruncate(r0, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400040c0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r8}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, 0x0, 0x4000804) 24m3.44996894s ago: executing program 2 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 24m3.032487371s ago: executing program 2 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20081, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3b}, [], [], 'vxcan1\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00], [], 'veth0_to_team\x00', 'gre0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x20, 0x80, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x4}, {0x3, 0x6}, 0x9, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x308) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r4 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000180)=""/135) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0xe, 0x8, 0x0, 0x8, 0x1, 0xe, 0x80, 0xe, 0x7, 0x4, 0x8, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x40, 0x6ea93ba1}) 24m2.951853853s ago: executing program 1 (id=502): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x10000, 0x800, {0xffffffffffffffff}, {0xee00}, 0xc, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x43c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x410, 0x2, [@TCA_U32_SEL={0x294, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0x8000, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x54, 0xd6fa, 0x5}, {0x5, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x164, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x8, 0x2, 0x1}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x43c}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 24m1.100272488s ago: executing program 1 (id=504): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6010203010902220001008a0000090400000129fddd00090500000000000000070594ef6333ef"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000de0000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1593, &(0x7f0000000440)={0x0, 0xc3fd, 0x21021, 0x3, 0x20b}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r3) r4 = socket$packet(0x11, 0x3, 0x300) fsetxattr(r4, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x1) 24m0.928938058s ago: executing program 0 (id=505): socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, 0xffffffffffffffff, 0x80000) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 23m58.920970786s ago: executing program 2 (id=506): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r2, 0x0, 0x22) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{&(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="d551c2413bfec8ceee4a52d997273eeed876f9ee36a1d2aa4dc235c4a850b16522b6628aad70832f753f8b5c306b302e3b6536407b7d3cd45aa409e0898981d2a90be458943661e85ce753dca0a35ddf8fe29cb7e1167bef8427a4975396891dde3fe22b3cd40864e392672f6d732abdae7df654aa2bd1714cb6a04c755c3cf4068fc407ce0963b2a196d266d49373a90ba6a7436789e64d4d0b36", 0x9b}, {&(0x7f0000000540)="50ade57ded2b77a2e23c8a126a817e515ab19ffb1d22075ae47303e845c2914f37fbb61792de0f48c5c7aca3b424a85f73b0ab37e705f3af6d0bb8dca26b9ce4329f79744de0225729b741bf3b6af2c61ee3bae8d2b69375ee3f3a98562521fb14aefacc153b3c8856da977e1395925e40b9157176da9d13a6ab42560a73554658b289ac6cf814411d5cfa0cbe97acc7b446d4638a6cf08671a855d574faf76cdf2046cbb58eba320d75c87aefd7394df4b6e3508d4153966e7d35fde3f50080aaf00f9ee39aeb82c29b0277367552c33e8b29fe23bd46105c8e0a27f77d0b9bd16651a7c51808ac40f25285edfb99de882bc937", 0xf4}, {0x0}], 0x3, &(0x7f0000000a00)=[{0x38, 0x29, 0xe, "d1178caee8c907a691c83f1c655cc787d67b1d3e6f8367088d193bbe2c105e383cdfc603"}, {0x88, 0x3a, 0x5, "9644809b975c6576841ab13237ae90b9a1648789f8de9ef8e06cbf98f681a38a6b24d806e64b512a89e9aaf340a20a13ae9bfd434a6249fcf5dfe7b1830b6dd07b94c75c11d78116a372a4ba481586339fc378d19482c4f0e44f0fe1bc86dcd39e798b5cce37d91c8f0c2dc0db7e1dc1a3eec874eef16360"}, {0xc8, 0x10e, 0xb6, "3b34a059795144b759f148c71811d80a25ca4ad238f998b1c04c26bf8859f99bc47385a09e349491b9221ad65f132aa2a13ad56b7fd1dfaa964a11bdcb1a88e6c53d2a11fa11bd079b3bdf10cea775d8d56a7b59517dbab83cfd3123d5c3a8d5f06102bfd0af503c681585e9d0b05197a146d007b4f13eebc192f1cadc2f39dd0090013f8ca3ece86dc6c66476cd67fd3b7d802edbe6c8a8b2d2fb2cc275f0f92fd301a15b591a271c1ccfe8a67b4afdc4"}], 0x188}}], 0x3, 0x0) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x2f126000) cachestat(r3, &(0x7f0000000100)={0xe6af, 0x3}, &(0x7f0000002280), 0x0) 23m57.228069601s ago: executing program 4 (id=507): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0xe}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 23m55.729120342s ago: executing program 4 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x40204, 0x39}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 23m45.851573306s ago: executing program 32 (id=503): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6010203010902220001008a0000090400000129fddd00090500000000000000070594ef6333ef"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000de0000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1593, &(0x7f0000000440)={0x0, 0xc3fd, 0x21021, 0x3, 0x20b}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) fsetxattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400acaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 23m44.488595676s ago: executing program 33 (id=505): socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, 0xffffffffffffffff, 0x80000) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 23m43.04833698s ago: executing program 34 (id=504): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6010203010902220001008a0000090400000129fddd00090500000000000000070594ef6333ef"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000de0000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1593, &(0x7f0000000440)={0x0, 0xc3fd, 0x21021, 0x3, 0x20b}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r3) r4 = socket$packet(0x11, 0x3, 0x300) fsetxattr(r4, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x1) 23m41.756733032s ago: executing program 35 (id=506): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r2, 0x0, 0x22) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{&(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="d551c2413bfec8ceee4a52d997273eeed876f9ee36a1d2aa4dc235c4a850b16522b6628aad70832f753f8b5c306b302e3b6536407b7d3cd45aa409e0898981d2a90be458943661e85ce753dca0a35ddf8fe29cb7e1167bef8427a4975396891dde3fe22b3cd40864e392672f6d732abdae7df654aa2bd1714cb6a04c755c3cf4068fc407ce0963b2a196d266d49373a90ba6a7436789e64d4d0b36", 0x9b}, {&(0x7f0000000540)="50ade57ded2b77a2e23c8a126a817e515ab19ffb1d22075ae47303e845c2914f37fbb61792de0f48c5c7aca3b424a85f73b0ab37e705f3af6d0bb8dca26b9ce4329f79744de0225729b741bf3b6af2c61ee3bae8d2b69375ee3f3a98562521fb14aefacc153b3c8856da977e1395925e40b9157176da9d13a6ab42560a73554658b289ac6cf814411d5cfa0cbe97acc7b446d4638a6cf08671a855d574faf76cdf2046cbb58eba320d75c87aefd7394df4b6e3508d4153966e7d35fde3f50080aaf00f9ee39aeb82c29b0277367552c33e8b29fe23bd46105c8e0a27f77d0b9bd16651a7c51808ac40f25285edfb99de882bc937", 0xf4}, {0x0}], 0x3, &(0x7f0000000a00)=[{0x38, 0x29, 0xe, "d1178caee8c907a691c83f1c655cc787d67b1d3e6f8367088d193bbe2c105e383cdfc603"}, {0x88, 0x3a, 0x5, "9644809b975c6576841ab13237ae90b9a1648789f8de9ef8e06cbf98f681a38a6b24d806e64b512a89e9aaf340a20a13ae9bfd434a6249fcf5dfe7b1830b6dd07b94c75c11d78116a372a4ba481586339fc378d19482c4f0e44f0fe1bc86dcd39e798b5cce37d91c8f0c2dc0db7e1dc1a3eec874eef16360"}, {0xc8, 0x10e, 0xb6, "3b34a059795144b759f148c71811d80a25ca4ad238f998b1c04c26bf8859f99bc47385a09e349491b9221ad65f132aa2a13ad56b7fd1dfaa964a11bdcb1a88e6c53d2a11fa11bd079b3bdf10cea775d8d56a7b59517dbab83cfd3123d5c3a8d5f06102bfd0af503c681585e9d0b05197a146d007b4f13eebc192f1cadc2f39dd0090013f8ca3ece86dc6c66476cd67fd3b7d802edbe6c8a8b2d2fb2cc275f0f92fd301a15b591a271c1ccfe8a67b4afdc4"}], 0x188}}], 0x3, 0x0) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x2f126000) cachestat(r3, &(0x7f0000000100)={0xe6af, 0x3}, &(0x7f0000002280), 0x0) 23m40.351829852s ago: executing program 36 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x40204, 0x39}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 22m8.150632045s ago: executing program 5 (id=543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x2f2}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) 22m7.219581727s ago: executing program 5 (id=544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000500)={0x24, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9b5"], 0x1c}}, 0x40000) recvmmsg$unix(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x60, "217d66d38547aa140db8a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 22m0.24058718s ago: executing program 5 (id=545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000500)={0x24, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9b5"], 0x1c}}, 0x40000) recvmmsg$unix(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x60, "217d66d38547aa140db8a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 21m58.512387044s ago: executing program 5 (id=546): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x10000, 0x800, {0xffffffffffffffff}, {0xee00}, 0xc, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x43c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x410, 0x2, [@TCA_U32_SEL={0x294, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0x8000, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x54, 0xd6fa, 0x5}, {0x5, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x164, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x8, 0x2, 0x1}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x43c}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21m57.3371535s ago: executing program 5 (id=547): prctl$PR_SET_NAME(0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'wg2\x00', {0x2, 0x4e24, @multicast2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB], 0x0) io_uring_enter(r2, 0x7126, 0x2a10, 0x0, 0x0, 0x0) 21m53.520024584s ago: executing program 5 (id=548): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6010203010902220001008a0000090400000129fddd00090500000000000000070594ef6333ef"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000de0000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1593, &(0x7f0000000440)={0x0, 0xc3fd, 0x21021, 0x3, 0x20b}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) fsetxattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21m37.770193391s ago: executing program 37 (id=548): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6010203010902220001008a0000090400000129fddd00090500000000000000070594ef6333ef"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000de0000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1593, &(0x7f0000000440)={0x0, 0xc3fd, 0x21021, 0x3, 0x20b}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) fsetxattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15m13.079982804s ago: executing program 9 (id=1616): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgrp(0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) readv(r5, 0x0, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) sched_getattr(r4, &(0x7f0000000040)={0x38}, 0x38, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001e00000300006e8004006c80"], 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x7fff}) socket$nl_generic(0x10, 0x3, 0x10) 15m12.907756003s ago: executing program 9 (id=1617): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x103) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}], 0x1, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) 15m12.657295701s ago: executing program 9 (id=1618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15m12.336082821s ago: executing program 9 (id=1619): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x40080c7) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m12.155512613s ago: executing program 9 (id=1620): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=0x0, @ANYBLOB="01010200000000001c00128009000100626f6e"], 0x3c}}, 0x0) 15m11.940072833s ago: executing program 9 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c0002800500"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 12m14.926787589s ago: executing program 3 (id=1824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x11d, 0xf, 0x0, &(0x7f0000000240)) ioperm(0x9, 0x9, 0x7) 12m12.027209666s ago: executing program 3 (id=1828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x8902) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') lseek(r4, 0x1000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x100, 0x0) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x4a, 0x3, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) 12m5.986773698s ago: executing program 3 (id=1831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x6) r5 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140dcc006261746164765f736c6176655f3000000a000100aaaaaaaaaa00000004002b80010cbaf43fa077"], 0x44}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "230700dd"}, 0x0, 0x2, {}, 0x58603}) 11m59.211526986s ago: executing program 3 (id=1839): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f98000905ee000000000000090502"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00', 0x9}, 0x1c) socket(0x15, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_usb_connect$cdc_ncm(0x6, 0x70, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x0, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'L\\'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x8000, 0x9, 0x80}, {0x6, 0x24, 0x1a, 0xcf, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x5f, 0x5, 0x8, 0x1}, 0x72, &(0x7f0000000680)={0x5, 0xf, 0x72, 0x2, [@generic={0x5d, 0x10, 0x874a2279af02f249, "11bc1c320bee463c52b025d6a128fef4c029afd22ec5817440bf5e7a48d7909d83010eaffd547a6f4613be6a888d4e49fe0c4ec8bc0d1eba7b03ed9fe2c98c965dcd88a61f131346375cee40ec485a868b9bbd6aefeae244f624"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x40, 0xf00, 0xe0, [0xc0]}]}, 0x1, [{0xb9, &(0x7f0000000500)=ANY=[@ANYRES16=0x0]}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x7, 0x1, 0x1, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x32314d4e}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44084}, 0x0) 11m55.61611324s ago: executing program 3 (id=1844): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x90) get_robust_list(0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2}) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) shutdown(0xffffffffffffffff, 0x1) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0xfffffffc, 0xb152, 0x65d3, 0x1fc, 0x0, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 11m40.195161774s ago: executing program 38 (id=1844): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x90) get_robust_list(0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2}) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) shutdown(0xffffffffffffffff, 0x1) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0xfffffffc, 0xb152, 0x65d3, 0x1fc, 0x0, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 10.191961284s ago: executing program 7 (id=2870): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x4, &(0x7f0000000180)={0x80, 0xc7}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x16, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4c840) 8.794304698s ago: executing program 7 (id=2873): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 7.537817825s ago: executing program 6 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.494874907s ago: executing program 7 (id=2877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 6.476892013s ago: executing program 6 (id=2879): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 5.888058769s ago: executing program 7 (id=2881): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000700)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f00000006c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.601307991s ago: executing program 8 (id=2883): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.846716283s ago: executing program 6 (id=2884): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 3.952423185s ago: executing program 8 (id=2885): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.708152345s ago: executing program 8 (id=2886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) 2.343223045s ago: executing program 8 (id=2887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.315152904s ago: executing program 6 (id=2888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x0, 0x20000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x21}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.770877993s ago: executing program 7 (id=2889): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.76289059s ago: executing program 6 (id=2890): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/127, 0x7f}, 0x1a83}], 0x2, 0x100, 0x0) 1.762235501s ago: executing program 8 (id=2891): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) pipe2(&(0x7f0000000240), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.682964294s ago: executing program 6 (id=2892): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x5, 0x1a9a00) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r7, 0x0, 0x201f00) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x749bc}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 1.467298048s ago: executing program 8 (id=2893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 0s ago: executing program 7 (id=2894): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): ve interface with an up link [ 1337.981543][T15285] chnl_net:caif_netlink_parms(): no params data found [ 1338.130008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.109310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.173958][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.348653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.716079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.799278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.258419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.749964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.960629][T15470] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1341.064699][T15112] team0: Port device team_slave_0 added [ 1341.441865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.735474][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.169063][T13803] team0 (unregistering): Port device team_slave_1 removed [ 1342.217906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.593001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.779260][T13803] team0 (unregistering): Port device team_slave_0 removed [ 1342.919617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.252742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.408569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.279613][T15112] team0: Port device team_slave_1 added [ 1344.974197][T15517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.652487][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.239653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.939082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.916167][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.916357][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.916598][T15285] bridge_slave_0: entered allmulticast mode [ 1347.919246][T15285] bridge_slave_0: entered promiscuous mode [ 1347.922985][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.933859][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.934105][T15285] bridge_slave_1: entered allmulticast mode [ 1347.937181][T15285] bridge_slave_1: entered promiscuous mode [ 1347.942600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1348.003581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1348.261168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1348.848302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.027929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.320928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.671196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.818171][T13942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1349.853708][T13942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1349.873780][T13942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1349.937177][T15552] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1349.944336][T13942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1349.974321][T13942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1349.987173][T15547] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2120'. [ 1350.720686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.499637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.622135][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.744787][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.119217][ T5803] Bluetooth: hci1: command tx timeout [ 1352.290890][T15285] team0: Port device team_slave_0 added [ 1352.335845][T15285] team0: Port device team_slave_1 added [ 1353.218939][ T1479] bridge_slave_1: left allmulticast mode [ 1353.218959][ T1479] bridge_slave_1: left promiscuous mode [ 1353.219125][ T1479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.313734][ T1479] bridge_slave_0: left allmulticast mode [ 1353.313768][ T1479] bridge_slave_0: left promiscuous mode [ 1353.314041][ T1479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.710892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.919210][T15578] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1354.687816][ T5803] Bluetooth: hci1: command tx timeout [ 1355.206076][T15575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1355.653375][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.666077][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2127'. [ 1356.132686][T15588] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1356.862299][ T5803] Bluetooth: hci1: command tx timeout [ 1356.967498][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.268964][ T1479] bond0 (unregistering): Released all slaves [ 1357.307873][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.307886][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.307901][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.313815][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.313831][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.313855][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.463425][T15596] overlayfs: failed to resolve './file0': -2 [ 1360.609675][T13942] Bluetooth: hci1: command tx timeout [ 1361.157962][T15285] hsr_slave_0: entered promiscuous mode [ 1361.159248][T15285] hsr_slave_1: entered promiscuous mode [ 1361.810756][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.810826][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.999043][ T1479] team0 (unregistering): Port device team_slave_1 removed [ 1362.447698][T15619] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1364.072859][T15612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.097398][ T1479] team0 (unregistering): Port device team_slave_0 removed [ 1365.699436][T15630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.352146][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2138'. [ 1367.085085][T15650] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1368.298581][T15544] chnl_net:caif_netlink_parms(): no params data found [ 1369.827868][ T5788] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1370.128196][ T5788] usb 7-1: Using ep0 maxpacket: 8 [ 1370.274916][ T5788] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1370.274951][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1370.274973][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1370.329312][ T5788] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1370.329343][ T5788] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1370.329363][ T5788] usb 7-1: Product: syz [ 1370.329377][ T5788] usb 7-1: Manufacturer: syz [ 1370.329390][ T5788] usb 7-1: SerialNumber: syz [ 1370.370450][ T5788] usb 7-1: config 0 descriptor?? [ 1370.402039][ T5788] smsusb:smsusb_probe: board id=2, interface number 0 [ 1370.402960][ T5788] smsusb:smsusb_probe: Device initialized with return code -19 [ 1370.960090][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.963959][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.288975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.727701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.873377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.943455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.044684][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2148'. [ 1373.201272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.762427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.106884][T15692] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1374.306454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.743421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.218350][T15696] sg_write: data in/out 209/14 bytes for SCSI command 0x0-- guessing data in; [ 1375.218350][T15696] program syz.8.2151 not setting count and/or reply_len properly [ 1375.424604][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1375.444115][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1375.445381][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1375.449231][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1375.450538][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1375.579607][T15544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.579686][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.579860][T15544] bridge_slave_0: entered allmulticast mode [ 1375.581737][T15544] bridge_slave_0: entered promiscuous mode [ 1375.625009][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.638646][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.638893][T15544] bridge_slave_1: entered allmulticast mode [ 1375.644775][T15544] bridge_slave_1: entered promiscuous mode [ 1376.288651][ T8721] usb 7-1: USB disconnect, device number 60 [ 1376.880508][T15544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.933920][T15544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.033546][T15720] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1377.556916][T13942] Bluetooth: hci5: command tx timeout [ 1377.608274][T15710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.829205][T15544] team0: Port device team_slave_0 added [ 1377.832927][T15544] team0: Port device team_slave_1 added [ 1379.445020][T15544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.445038][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.445065][T15544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.496930][T15544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.496946][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.496973][T15544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.693507][T13942] Bluetooth: hci5: command tx timeout [ 1379.920178][T15744] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1381.629343][T15544] hsr_slave_0: entered promiscuous mode [ 1381.632524][T15544] hsr_slave_1: entered promiscuous mode [ 1381.633563][T15544] debugfs: 'hsr0' already exists in 'hsr' [ 1381.633587][T15544] Cannot create hsr debugfs directory [ 1381.735961][T13942] Bluetooth: hci5: command tx timeout [ 1382.202870][ T1456] bridge_slave_1: left allmulticast mode [ 1382.202901][ T1456] bridge_slave_1: left promiscuous mode [ 1382.203144][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.798893][ T1456] bridge_slave_0: left allmulticast mode [ 1382.798924][ T1456] bridge_slave_0: left promiscuous mode [ 1382.799190][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.797163][T13942] Bluetooth: hci5: command tx timeout [ 1383.942307][T15787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.925599][ T1456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.899060][ T1456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.971537][ T1456] bond0 (unregistering): Released all slaves [ 1387.788277][T15701] chnl_net:caif_netlink_parms(): no params data found [ 1389.468592][T15837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1390.339158][T15846] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1390.339567][T15846] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1391.029473][ T1456] hsr_slave_0: left promiscuous mode [ 1391.080102][ T1456] hsr_slave_1: left promiscuous mode [ 1391.081300][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.149504][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.905930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.183315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.289249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.398528][T15867] vxfs: WRONG superblock magic 00000000 at 1 [ 1393.399133][T15867] vxfs: WRONG superblock magic 00000000 at 8 [ 1393.399152][T15867] vxfs: can't find superblock. [ 1393.638149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.287313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.506535][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.074684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.256933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.334077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.663975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.932812][T15891] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1395.963123][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.032995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.269658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.680178][ T1456] team0 (unregistering): Port device team_slave_1 removed [ 1400.920108][ T1456] team0 (unregistering): Port device team_slave_0 removed [ 1403.154202][T15932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1403.154611][T15932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1404.167874][T15935] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1406.260616][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.262645][T15701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.262811][T15701] bridge_slave_0: entered allmulticast mode [ 1406.264601][T15701] bridge_slave_0: entered promiscuous mode [ 1406.317381][T15701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.317627][T15701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.320580][T15701] bridge_slave_1: entered allmulticast mode [ 1406.390270][T15701] bridge_slave_1: entered promiscuous mode [ 1406.975474][T15701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.001842][T15701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.781050][ T5788] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1407.956869][ T5788] usb 7-1: Using ep0 maxpacket: 8 [ 1407.966978][ T5788] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1407.967010][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1407.967032][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1407.977440][ T5788] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1407.977469][ T5788] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1407.977489][ T5788] usb 7-1: Product: syz [ 1407.977503][ T5788] usb 7-1: Manufacturer: syz [ 1407.977526][ T5788] usb 7-1: SerialNumber: syz [ 1407.988158][ T5788] usb 7-1: config 0 descriptor?? [ 1408.008119][ T5788] smsusb:smsusb_probe: board id=2, interface number 0 [ 1408.035941][ T5788] smsusb:smsusb_probe: Device initialized with return code -19 [ 1408.085167][T15980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.321428][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.321744][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.309996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.803582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.976523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.018135][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1410.023560][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1410.048110][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1410.049554][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1410.050326][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1410.103849][T15701] team0: Port device team_slave_0 added [ 1410.160853][T14189] usb 7-1: USB disconnect, device number 61 [ 1410.193451][T15701] team0: Port device team_slave_1 added [ 1410.585627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.823812][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 1410.823831][ T37] audit: type=1326 audit(1760636597.411:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1410.823878][ T37] audit: type=1326 audit(1760636597.411:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1411.026533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1411.047470][ T37] audit: type=1326 audit(1760636597.651:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feb32010d5c code=0x7ffc0000 [ 1411.048077][ T37] audit: type=1326 audit(1760636597.651:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feb32010c94 code=0x7ffc0000 [ 1411.048378][ T37] audit: type=1326 audit(1760636597.651:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feb32010c94 code=0x7ffc0000 [ 1411.048696][ T37] audit: type=1326 audit(1760636597.651:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1411.052154][ T37] audit: type=1326 audit(1760636597.651:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1411.055417][ T37] audit: type=1326 audit(1760636597.651:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1411.055771][ T37] audit: type=1326 audit(1760636597.651:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1411.056030][ T37] audit: type=1326 audit(1760636597.651:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15996 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3200eec9 code=0x7ffc0000 [ 1411.426545][T16009] random: crng reseeded on system resumption [ 1411.681995][T15701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.682013][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.682040][T15701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.738393][T15701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.738411][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.738440][T15701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.916111][T16017] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1412.042807][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2201'. [ 1412.223557][ T5803] Bluetooth: hci1: command tx timeout [ 1414.277008][ T5803] Bluetooth: hci1: command tx timeout [ 1414.794427][ T1456] bridge_slave_1: left allmulticast mode [ 1414.794450][ T1456] bridge_slave_1: left promiscuous mode [ 1414.794597][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.858336][ T1456] bridge_slave_0: left allmulticast mode [ 1414.858359][ T1456] bridge_slave_0: left promiscuous mode [ 1414.858550][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.935724][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1416.373219][T13942] Bluetooth: hci1: command tx timeout [ 1417.921037][T16041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.440371][T13942] Bluetooth: hci1: command tx timeout [ 1419.055736][ T1456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.235426][T16060] random: crng reseeded on system resumption [ 1419.304832][ T1456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.520995][ T1456] bond0 (unregistering): Released all slaves [ 1419.756456][T15701] hsr_slave_0: entered promiscuous mode [ 1419.777668][T15701] hsr_slave_1: entered promiscuous mode [ 1420.818993][T16072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1420.956926][ T1456] hsr_slave_0: left promiscuous mode [ 1420.980347][ T1456] hsr_slave_1: left promiscuous mode [ 1420.981126][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.019646][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.272616][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1423.255110][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.255188][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.958203][T16091] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1426.537320][ T1456] team0 (unregistering): Port device team_slave_1 removed [ 1426.660590][T16099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.674904][ T1456] team0 (unregistering): Port device team_slave_0 removed [ 1428.209385][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1428.209603][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1428.467915][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1428.468128][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1428.921871][T16117] ceph: No mds server is up or the cluster is laggy [ 1429.858594][T16137] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1430.386220][T16145] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1431.248093][T15989] chnl_net:caif_netlink_parms(): no params data found [ 1433.128312][T15701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1433.963826][T16158] random: crng reseeded on system resumption [ 1434.682043][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2230'. [ 1440.203911][T15989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.203987][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.204103][T15989] bridge_slave_0: entered allmulticast mode [ 1440.206026][T15989] bridge_slave_0: entered promiscuous mode [ 1440.277425][T15989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.277500][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.277657][T15989] bridge_slave_1: entered allmulticast mode [ 1440.339817][T15989] bridge_slave_1: entered promiscuous mode [ 1441.722829][T16182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1442.066646][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2234'. [ 1443.778627][T15989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.783050][T15989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.814105][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1443.837924][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1443.841849][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1443.855723][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1443.866586][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1444.732126][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2235'. [ 1448.170271][ T5803] Bluetooth: hci2: command tx timeout [ 1450.300960][T13942] Bluetooth: hci2: command tx timeout [ 1450.377314][T16210] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1450.736900][ T8723] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1450.742214][T15989] team0: Port device team_slave_0 added [ 1450.745811][T15989] team0: Port device team_slave_1 added [ 1450.892432][ T8723] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1450.892452][ T8723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.895556][ T8723] usb 9-1: config 0 descriptor?? [ 1451.302748][T15989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.302760][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.302775][T15989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.848612][T15989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.848625][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.849179][T15989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.356840][T13942] Bluetooth: hci2: command tx timeout [ 1452.379411][ T8723] pegasus 9-1:0.0: probe with driver pegasus failed with error -32 [ 1454.141171][ T44] libceph: connect (1)[c::]:6789 error -101 [ 1454.141310][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 1454.199781][T16232] ceph: No mds server is up or the cluster is laggy [ 1454.317097][ T44] usb 9-1: USB disconnect, device number 45 [ 1454.437148][T13942] Bluetooth: hci2: command tx timeout [ 1454.567559][T15989] hsr_slave_0: entered promiscuous mode [ 1454.569027][T15989] hsr_slave_1: entered promiscuous mode [ 1454.570018][T15989] debugfs: 'hsr0' already exists in 'hsr' [ 1454.570043][T15989] Cannot create hsr debugfs directory [ 1455.825161][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2245'. [ 1456.571710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.757342][T16270] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1457.064543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.306273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.439422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.077134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.130898][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1458.131125][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1458.170085][T16282] ceph: No mds server is up or the cluster is laggy [ 1458.341530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.457651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.900554][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.173515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.309846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.937131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.975167][ T9121] libceph: connect (1)[c::]:6789 error -101 [ 1460.975374][ T9121] libceph: mon0 (1)[c::]:6789 connect error [ 1461.010492][T16309] ceph: No mds server is up or the cluster is laggy [ 1461.165753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.217195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.302599][T16191] chnl_net:caif_netlink_parms(): no params data found [ 1462.548010][ T8723] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1462.699040][ T8723] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1462.699072][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.699086][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.699098][ T8723] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1462.715016][ T8723] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1462.715035][ T8723] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1462.715045][ T8723] usb 9-1: Manufacturer: syz [ 1464.420384][ T68] bridge_slave_1: left allmulticast mode [ 1464.420412][ T68] bridge_slave_1: left promiscuous mode [ 1464.420662][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.421449][ T8723] usb 9-1: config 0 descriptor?? [ 1464.508663][ T68] bridge_slave_0: left allmulticast mode [ 1464.508694][ T68] bridge_slave_0: left promiscuous mode [ 1464.508957][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.651048][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1465.651221][ T8723] usbhid 9-1:0.0: can't add hid device: -32 [ 1465.651346][ T8723] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1465.666919][ T8723] usb 9-1: USB disconnect, device number 46 [ 1466.403025][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.508927][T16355] random: crng reseeded on system resumption [ 1467.277914][T16361] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1467.467373][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.674670][ T68] bond0 (unregistering): Released all slaves [ 1469.353839][T16367] ceph: No mds server is up or the cluster is laggy [ 1469.358877][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1469.359080][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1471.380138][T16191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.380294][T16191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.380519][T16191] bridge_slave_0: entered allmulticast mode [ 1471.388595][T16191] bridge_slave_0: entered promiscuous mode [ 1471.963429][ T68] hsr_slave_0: left promiscuous mode [ 1472.484012][ T8723] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1472.815249][ T8721] libceph: connect (1)[c::]:6789 error -101 [ 1472.815450][ T8721] libceph: mon0 (1)[c::]:6789 connect error [ 1472.857412][ T68] hsr_slave_1: left promiscuous mode [ 1472.858465][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.865509][T16399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1472.893308][T16399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1472.895743][ T8723] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1472.895792][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.895819][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.895841][ T8723] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1472.898689][ T8723] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1472.898717][ T8723] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1472.898737][ T8723] usb 9-1: Manufacturer: syz [ 1472.900076][T16394] ceph: No mds server is up or the cluster is laggy [ 1472.905993][T16399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1472.956440][ T8723] usb 9-1: config 0 descriptor?? [ 1473.008972][T16399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1473.015234][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.130813][T16399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1473.487974][ T8723] usbhid 9-1:0.0: can't add hid device: -71 [ 1473.488100][ T8723] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1473.537782][ T8723] usb 9-1: USB disconnect, device number 47 [ 1475.288561][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2285'. [ 1475.755735][T16399] Bluetooth: hci5: command tx timeout [ 1480.487193][T13942] Bluetooth: hci5: command tx timeout [ 1481.938863][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1482.170089][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1482.516958][T13942] Bluetooth: hci5: command tx timeout [ 1484.119710][T16435] ceph: No mds server is up or the cluster is laggy [ 1484.127294][ T9121] libceph: connect (1)[c::]:6789 error -101 [ 1484.127497][ T9121] libceph: mon0 (1)[c::]:6789 connect error [ 1484.818367][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.821622][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.385199][T13942] Bluetooth: hci5: command tx timeout [ 1485.506906][ T8721] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1485.582309][T16191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.582450][T16191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.582682][T16191] bridge_slave_1: entered allmulticast mode [ 1485.585567][T16191] bridge_slave_1: entered promiscuous mode [ 1485.889519][ T8721] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1485.889569][ T8721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.889595][ T8721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.889618][ T8721] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1485.896489][ T8721] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1485.896520][ T8721] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1485.896541][ T8721] usb 8-1: Manufacturer: syz [ 1486.356018][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1486.368444][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1486.814489][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1486.814707][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1486.873220][T16452] ceph: No mds server is up or the cluster is laggy [ 1486.877779][ T8721] usb 8-1: config 0 descriptor?? [ 1487.320383][ T8721] usbhid 8-1:0.0: can't add hid device: -71 [ 1487.320507][ T8721] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1487.358206][ T8721] usb 8-1: USB disconnect, device number 47 [ 1488.002984][T16191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.020716][T16191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.844619][T16191] team0: Port device team_slave_0 added [ 1488.915607][T16191] team0: Port device team_slave_1 added [ 1490.378280][ T9130] libceph: connect (1)[c::]:6789 error -101 [ 1490.408836][ T9130] libceph: mon0 (1)[c::]:6789 connect error [ 1490.741225][ T9130] libceph: connect (1)[c::]:6789 error -101 [ 1490.741430][ T9130] libceph: mon0 (1)[c::]:6789 connect error [ 1490.808888][T16485] ceph: No mds server is up or the cluster is laggy [ 1492.351392][T16191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.351427][T16191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.351470][T16191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.641756][ T5788] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 1492.641796][ T5788] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 1492.641861][ T5788] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 1492.684539][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2305'. [ 1492.733813][ T5788] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 1492.740907][T16191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.740926][T16191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.740953][T16191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.906210][T16191] hsr_slave_0: entered promiscuous mode [ 1493.926376][T16191] hsr_slave_1: entered promiscuous mode [ 1495.252210][T16512] random: crng reseeded on system resumption [ 1497.085671][T16399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1497.105350][T16399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1497.114134][T16399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1497.125108][T16399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1497.126041][T16399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1499.162194][T16399] Bluetooth: hci1: command tx timeout [ 1499.238610][T16532] wireguard0: entered promiscuous mode [ 1499.238631][T16532] wireguard0: entered allmulticast mode [ 1500.651618][T16391] chnl_net:caif_netlink_parms(): no params data found [ 1501.258461][T16399] Bluetooth: hci1: command tx timeout [ 1503.275971][T16391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.276111][T16391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.276323][T16391] bridge_slave_0: entered allmulticast mode [ 1503.310859][T16391] bridge_slave_0: entered promiscuous mode [ 1503.316896][T16399] Bluetooth: hci1: command tx timeout [ 1503.337154][T16391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.337289][T16391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.337528][T16391] bridge_slave_1: entered allmulticast mode [ 1503.340470][T16391] bridge_slave_1: entered promiscuous mode [ 1504.096935][ T68] bridge_slave_1: left allmulticast mode [ 1504.096966][ T68] bridge_slave_1: left promiscuous mode [ 1504.099531][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.194177][ T68] bridge_slave_0: left allmulticast mode [ 1504.194200][ T68] bridge_slave_0: left promiscuous mode [ 1504.194378][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.777370][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.897468][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.958868][ T68] bond0 (unregistering): Released all slaves [ 1505.030388][T16391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.173626][T16581] wireguard0: entered promiscuous mode [ 1505.173652][T16581] wireguard0: entered allmulticast mode [ 1505.231447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.396917][T16399] Bluetooth: hci1: command tx timeout [ 1505.451135][T16391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.508874][T16587] wireguard0: entered promiscuous mode [ 1505.508900][T16587] wireguard0: entered allmulticast mode [ 1505.695342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.032272][ T68] hsr_slave_0: left promiscuous mode [ 1506.126162][ T68] hsr_slave_1: left promiscuous mode [ 1506.132814][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.163759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.197737][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1506.246108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.949839][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1508.217982][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1508.259995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.366010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.479623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.549648][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.632557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.702517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.787675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.238293][T16606] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1509.300211][T16391] team0: Port device team_slave_0 added [ 1509.383301][T16391] team0: Port device team_slave_1 added [ 1509.784717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.890200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.911426][T16391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.911445][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.911473][T16391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.947141][T16391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.947160][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.947189][T16391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.948119][T16522] chnl_net:caif_netlink_parms(): no params data found [ 1510.002477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1510.791154][T16391] hsr_slave_0: entered promiscuous mode [ 1510.792746][T16391] hsr_slave_1: entered promiscuous mode [ 1510.793901][T16391] debugfs: 'hsr0' already exists in 'hsr' [ 1510.793926][T16391] Cannot create hsr debugfs directory [ 1513.702888][T16522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.703032][T16522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.703268][T16522] bridge_slave_0: entered allmulticast mode [ 1513.748115][T16522] bridge_slave_0: entered promiscuous mode [ 1513.902643][T16522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.902780][T16522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.902965][T16522] bridge_slave_1: entered allmulticast mode [ 1513.905905][T16522] bridge_slave_1: entered promiscuous mode [ 1514.575014][ T68] bridge_slave_1: left allmulticast mode [ 1514.575042][ T68] bridge_slave_1: left promiscuous mode [ 1514.575280][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.541176][ T68] bridge_slave_0: left allmulticast mode [ 1515.541206][ T68] bridge_slave_0: left promiscuous mode [ 1515.541466][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.389527][ T9130] libceph: connect (1)[c::]:6789 error -101 [ 1516.405920][ T9130] libceph: mon0 (1)[c::]:6789 connect error [ 1516.928796][T16663] ceph: No mds server is up or the cluster is laggy [ 1517.415546][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.477585][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.518952][ T68] bond0 (unregistering): Released all slaves [ 1517.570875][T16522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.325867][T16522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.695701][T16680] wireguard0: entered promiscuous mode [ 1518.695794][T16680] wireguard0: entered allmulticast mode [ 1519.326492][T16522] team0: Port device team_slave_0 added [ 1519.388236][ T68] hsr_slave_0: left promiscuous mode [ 1519.427363][ T68] hsr_slave_1: left promiscuous mode [ 1519.428074][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.472189][T16688] random: crng reseeded on system resumption [ 1519.536556][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.110943][ T9121] libceph: connect (1)[c::]:6789 error -101 [ 1520.111795][ T9121] libceph: mon0 (1)[c::]:6789 connect error [ 1520.298785][T16691] ceph: No mds server is up or the cluster is laggy [ 1520.381906][ T9121] libceph: connect (1)[c::]:6789 error -101 [ 1520.382120][ T9121] libceph: mon0 (1)[c::]:6789 connect error [ 1521.367362][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1521.616291][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1521.831221][T16700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1522.722195][T16522] team0: Port device team_slave_1 added [ 1524.126729][T16522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.126747][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.126774][T16522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.129535][T16522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.129550][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.129577][T16522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.837170][T16719] wireguard0: entered promiscuous mode [ 1525.837225][T16719] wireguard0: entered allmulticast mode [ 1526.877031][T16728] wireguard0: entered promiscuous mode [ 1526.877050][T16728] wireguard0: entered allmulticast mode [ 1527.115296][T16522] hsr_slave_0: entered promiscuous mode [ 1527.116435][T16522] hsr_slave_1: entered promiscuous mode [ 1529.587307][T16745] wireguard0: entered promiscuous mode [ 1529.587325][T16745] wireguard0: entered allmulticast mode [ 1530.642092][T16755] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1531.070990][T13942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1531.076045][T13942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1531.094676][T13942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1531.167990][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1531.172981][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1531.659570][ T68] bridge_slave_1: left allmulticast mode [ 1531.659600][ T68] bridge_slave_1: left promiscuous mode [ 1531.659840][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.760400][ T68] bridge_slave_0: left allmulticast mode [ 1531.760421][ T68] bridge_slave_0: left promiscuous mode [ 1531.760608][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.567650][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.399611][T16399] Bluetooth: hci2: command tx timeout [ 1533.647264][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.700687][ T68] bond0 (unregistering): Released all slaves [ 1535.529317][ T5803] Bluetooth: hci2: command tx timeout [ 1536.438075][T16794] wireguard0: entered promiscuous mode [ 1536.438103][T16794] wireguard0: entered allmulticast mode [ 1537.635271][ T5803] Bluetooth: hci2: command tx timeout [ 1538.006874][ T68] hsr_slave_0: left promiscuous mode [ 1538.056940][ T68] hsr_slave_1: left promiscuous mode [ 1538.057935][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.148372][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.242816][T16810] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1538.849182][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1539.008374][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1539.636854][ T5803] Bluetooth: hci2: command tx timeout [ 1539.715036][T16805] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1540.673025][T16758] chnl_net:caif_netlink_parms(): no params data found [ 1541.156981][T16830] wireguard0: entered promiscuous mode [ 1541.157009][T16830] wireguard0: entered allmulticast mode [ 1541.606917][T16835] wireguard0: entered promiscuous mode [ 1541.606947][T16835] wireguard0: entered allmulticast mode [ 1542.236150][T16758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.236329][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.242286][T16758] bridge_slave_0: entered allmulticast mode [ 1542.245237][T16758] bridge_slave_0: entered promiscuous mode [ 1542.254688][T16522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1543.439838][T16758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.439951][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.440125][T16758] bridge_slave_1: entered allmulticast mode [ 1543.442421][T16758] bridge_slave_1: entered promiscuous mode [ 1544.296844][T16522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1544.816250][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1544.816377][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1544.936297][T16522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1545.015209][T16862] bridge0: port 3(gretap0) entered blocking state [ 1545.015428][T16862] bridge0: port 3(gretap0) entered disabled state [ 1545.016076][T16862] gretap0: entered allmulticast mode [ 1545.050813][T16862] gretap0: entered promiscuous mode [ 1545.069527][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1545.069746][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1545.074607][T16758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.105157][T16522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1545.195578][T16865] ceph: No mds server is up or the cluster is laggy [ 1545.262766][T16864] gretap0: left allmulticast mode [ 1545.262797][T16864] gretap0: left promiscuous mode [ 1545.265611][T16864] bridge0: port 3(gretap0) entered disabled state [ 1545.387387][T16758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.438296][T16873] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1545.895555][T16758] team0: Port device team_slave_0 added [ 1546.035560][T16758] team0: Port device team_slave_1 added [ 1546.122338][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.122411][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.415634][T16758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.415652][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.415680][T16758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.530802][T16758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.530821][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.530848][T16758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.646824][T16758] hsr_slave_0: entered promiscuous mode [ 1548.648670][T16758] hsr_slave_1: entered promiscuous mode [ 1548.649212][T16758] debugfs: 'hsr0' already exists in 'hsr' [ 1548.649228][T16758] Cannot create hsr debugfs directory [ 1552.844685][T16919] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1552.844728][T16919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1552.844749][T16919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1555.224775][T16935] random: crng reseeded on system resumption [ 1555.748016][T16522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.726312][T16758] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1557.832890][T16758] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1557.924305][T16758] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1558.047318][T16949] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1558.295910][T16758] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1558.321124][T16399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1558.324923][T16399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1558.352647][T16399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1558.375576][T16399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1558.376431][T16399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1560.517006][T16399] Bluetooth: hci5: command tx timeout [ 1561.219432][T16980] wireguard0: entered promiscuous mode [ 1561.219450][T16980] wireguard0: entered allmulticast mode [ 1561.307212][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1561.307233][ T37] audit: type=1326 audit(1760636747.881:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307282][ T37] audit: type=1326 audit(1760636747.881:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307327][ T37] audit: type=1326 audit(1760636747.881:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307370][ T37] audit: type=1326 audit(1760636747.881:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307415][ T37] audit: type=1326 audit(1760636747.881:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307459][ T37] audit: type=1326 audit(1760636747.881:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307502][ T37] audit: type=1326 audit(1760636747.881:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307547][ T37] audit: type=1326 audit(1760636747.881:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307596][ T37] audit: type=1326 audit(1760636747.881:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1561.307766][ T37] audit: type=1326 audit(1760636747.881:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16986 comm="syz.8.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1562.438644][T16990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1562.438688][T16990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1562.438708][T16990] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1562.600832][T16399] Bluetooth: hci5: command tx timeout [ 1564.014049][T16994] syzkaller1: entered promiscuous mode [ 1564.014075][T16994] syzkaller1: entered allmulticast mode [ 1564.496718][T17012] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1564.676824][T16399] Bluetooth: hci5: command tx timeout [ 1564.695835][T16953] chnl_net:caif_netlink_parms(): no params data found [ 1565.211094][T16758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.716922][T17021] wireguard0: entered promiscuous mode [ 1565.717020][T17021] wireguard0: entered allmulticast mode [ 1566.458349][T16953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.458489][T16953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.458679][T16953] bridge_slave_0: entered allmulticast mode [ 1566.460625][T16953] bridge_slave_0: entered promiscuous mode [ 1566.464203][T16953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.464354][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.464483][T16953] bridge_slave_1: entered allmulticast mode [ 1566.465996][T16953] bridge_slave_1: entered promiscuous mode [ 1566.770060][T16399] Bluetooth: hci5: command tx timeout [ 1567.737491][T16758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.101576][T16953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.196870][T16953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.284324][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1570.123258][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1570.123344][ T37] audit: type=1326 audit(1760636756.701:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.123900][ T37] audit: type=1326 audit(1760636756.701:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.124393][ T37] audit: type=1326 audit(1760636756.701:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.124875][ T37] audit: type=1326 audit(1760636756.701:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.125370][ T37] audit: type=1326 audit(1760636756.701:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.126014][ T37] audit: type=1326 audit(1760636756.701:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.126591][ T37] audit: type=1326 audit(1760636756.701:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.434815][ T37] audit: type=1326 audit(1760636756.701:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.436561][ T37] audit: type=1326 audit(1760636756.701:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1570.877515][ T37] audit: type=1326 audit(1760636756.701:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17044 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749b29eec9 code=0x7ffc0000 [ 1573.258271][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.258512][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.631704][T17061] wireguard0: entered promiscuous mode [ 1575.631730][T17061] wireguard0: entered allmulticast mode [ 1576.925349][T17066] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1576.925401][T17066] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1576.925420][T17066] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1577.117667][T16953] team0: Port device team_slave_0 added [ 1577.323613][T16953] team0: Port device team_slave_1 added [ 1577.331921][T17070] bridge0: port 3(gretap0) entered blocking state [ 1577.332031][T17070] bridge0: port 3(gretap0) entered disabled state [ 1577.332197][T17070] gretap0: entered allmulticast mode [ 1577.364728][T17070] gretap0: entered promiscuous mode [ 1577.373486][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.373605][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.449021][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1577.449201][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1577.539629][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1577.539837][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1577.591210][T17071] gretap0: left allmulticast mode [ 1577.591239][T17071] gretap0: left promiscuous mode [ 1577.593944][T17071] bridge0: port 3(gretap0) entered disabled state [ 1577.798871][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1577.799077][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1577.948801][T16953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.948819][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.948846][T16953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.025727][T16953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.025744][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.025772][T16953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.083131][T17073] ceph: No mds server is up or the cluster is laggy [ 1578.143626][ T43] bridge_slave_1: left allmulticast mode [ 1578.143656][ T43] bridge_slave_1: left promiscuous mode [ 1578.144425][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.334285][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1578.334488][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1578.823869][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1578.823916][ T37] audit: type=1326 audit(1760636765.281:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.824384][ T37] audit: type=1326 audit(1760636765.291:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.824639][ T37] audit: type=1326 audit(1760636765.301:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.824892][ T37] audit: type=1326 audit(1760636765.301:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.825142][ T37] audit: type=1326 audit(1760636765.301:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.825490][ T37] audit: type=1326 audit(1760636765.311:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.825744][ T37] audit: type=1326 audit(1760636765.311:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.825977][ T37] audit: type=1326 audit(1760636765.311:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.826183][ T37] audit: type=1326 audit(1760636765.321:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1578.826585][ T37] audit: type=1326 audit(1760636765.321:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168be8eec9 code=0x7ffc0000 [ 1579.408707][ T43] bridge_slave_0: left allmulticast mode [ 1579.408738][ T43] bridge_slave_0: left promiscuous mode [ 1579.408988][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.256555][T17111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.837958][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.909930][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.969161][ T43] bond0 (unregistering): Released all slaves [ 1586.999404][T17102] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1586.999447][T17102] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1586.999466][T17102] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1588.330306][T17125] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1588.330334][T17125] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1588.330345][T17125] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1588.812588][T16953] hsr_slave_0: entered promiscuous mode [ 1588.813593][T16953] hsr_slave_1: entered promiscuous mode [ 1588.814272][T16953] debugfs: 'hsr0' already exists in 'hsr' [ 1588.814288][T16953] Cannot create hsr debugfs directory [ 1588.857108][T17128] wireguard0: entered promiscuous mode [ 1588.857136][T17128] wireguard0: entered allmulticast mode [ 1589.136516][T17135] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2459'. [ 1589.266828][ T43] hsr_slave_0: left promiscuous mode [ 1589.286886][ T43] hsr_slave_1: left promiscuous mode [ 1589.287866][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.538981][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.459346][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1591.627457][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1594.061832][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1594.089081][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1594.090963][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1594.092805][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1594.094100][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1594.100117][T17135] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2459'. [ 1594.660956][ T9130] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1595.196912][ T9130] usb 9-1: Using ep0 maxpacket: 16 [ 1596.147155][ T9130] usb 9-1: config 0 has no interfaces? [ 1596.147191][ T9130] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1596.147212][ T9130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.180381][ T9130] usb 9-1: config 0 descriptor?? [ 1596.197380][ T5803] Bluetooth: hci1: command tx timeout [ 1596.388446][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.477707][ T8723] usb 9-1: USB disconnect, device number 48 [ 1596.525063][T17168] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1596.559780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.054515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.096366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.222710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.437870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.527246][ C1] vkms_vblank_simulate: vblank timer overrun [ 1598.276805][ T5803] Bluetooth: hci1: command tx timeout [ 1598.996359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.291878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.936146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.165922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.357078][ T5803] Bluetooth: hci1: command tx timeout [ 1600.611836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.722158][T17191] ======================================================= [ 1600.722158][T17191] WARNING: The mand mount option has been deprecated and [ 1600.722158][T17191] and is ignored by this kernel. Remove the mand [ 1600.722158][T17191] option from the mount to silence this warning. [ 1600.722158][T17191] ======================================================= [ 1600.782030][T17192] overlayfs: overlapping lowerdir path [ 1600.794906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.892061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.465420][ T5803] Bluetooth: hci1: command tx timeout [ 1602.616677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.683084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.997173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.207817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.298550][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.361180][T17202] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 1603.763751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1604.103806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.422275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.727170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.768242][ C0] vkms_vblank_simulate: vblank timer overrun [ 1606.068203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1606.374886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1607.906881][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.906958][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.430869][T17234] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1609.370687][ T5788] libceph: connect (1)[c::]:6789 error -101 [ 1609.370811][ T5788] libceph: mon0 (1)[c::]:6789 connect error [ 1609.527348][ T5788] libceph: connect (1)[c::]:6789 error -101 [ 1609.527577][ T5788] libceph: mon0 (1)[c::]:6789 connect error [ 1609.598123][T17237] ceph: No mds server is up or the cluster is laggy [ 1610.144544][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1610.144682][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1610.991339][T17150] chnl_net:caif_netlink_parms(): no params data found [ 1618.950868][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.951105][T17150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.951321][T17150] bridge_slave_0: entered allmulticast mode [ 1618.954030][T17150] bridge_slave_0: entered promiscuous mode [ 1618.980033][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.980168][T17150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.980338][T17150] bridge_slave_1: entered allmulticast mode [ 1618.982956][T17150] bridge_slave_1: entered promiscuous mode [ 1619.191007][T17150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.227026][T17150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.461419][T17150] team0: Port device team_slave_0 added [ 1619.465061][T17150] team0: Port device team_slave_1 added [ 1621.639961][T16399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1621.652578][T16399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1621.653979][T16399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1621.655963][T16399] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1621.658107][T16399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1622.548332][ T5786] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1622.551793][T17150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.551810][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.551837][T17150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.557498][ T5786] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1622.804475][ T5786] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1622.805808][T17150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.805822][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.805845][T17150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.818209][ T5786] hid-generic 0000:0000:0000.0021: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1622.828272][T17323] hid-generic 0000:0000:0000.0020: pid 17323 passed too large report [ 1623.010529][ T43] bridge_slave_1: left allmulticast mode [ 1623.010559][ T43] bridge_slave_1: left promiscuous mode [ 1623.010845][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.076242][ T43] bridge_slave_0: left allmulticast mode [ 1623.076273][ T43] bridge_slave_0: left promiscuous mode [ 1623.076515][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.720299][T16399] Bluetooth: hci2: command tx timeout [ 1627.524527][T16399] Bluetooth: hci2: command tx timeout [ 1628.770621][T16288] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1629.397440][T16288] usb 9-1: Using ep0 maxpacket: 8 [ 1630.999366][ T5803] Bluetooth: hci2: command tx timeout [ 1631.066191][T16288] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1631.066234][T16288] usb 9-1: can't read configurations, error -71 [ 1633.219557][ T5803] Bluetooth: hci2: command tx timeout [ 1639.310353][T17405] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 1639.318733][T17411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1639.672515][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.127527][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.585635][ T43] bond0 (unregistering): Released all slaves [ 1640.924155][T17150] hsr_slave_0: entered promiscuous mode [ 1640.925750][T17150] hsr_slave_1: entered promiscuous mode [ 1642.206844][ T5786] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1642.454457][ T5786] usb 8-1: Using ep0 maxpacket: 16 [ 1642.464269][ T5786] usb 8-1: config 0 has no interfaces? [ 1642.464309][ T5786] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1642.464332][ T5786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.511682][ T5786] usb 8-1: config 0 descriptor?? [ 1643.922480][ T43] hsr_slave_0: left promiscuous mode [ 1643.936967][ T43] hsr_slave_1: left promiscuous mode [ 1643.938733][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.977641][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.511494][ T8723] usb 8-1: USB disconnect, device number 48 [ 1650.467118][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1650.897281][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1656.082955][T16399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1656.091528][T16399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1656.093634][T16399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1656.104537][T16399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1656.105925][T16399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1657.917510][ T5786] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1657.923690][ T5786] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1658.277278][T16399] Bluetooth: hci5: command tx timeout [ 1659.711863][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1659.711991][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1660.071168][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1660.071380][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1660.351880][T17512] ceph: No mds server is up or the cluster is laggy [ 1660.356997][T16399] Bluetooth: hci5: command tx timeout [ 1660.471110][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1660.471242][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1660.845258][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1660.845474][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1660.907936][T17519] ceph: No mds server is up or the cluster is laggy [ 1661.435624][T17312] chnl_net:caif_netlink_parms(): no params data found [ 1662.471749][T16399] Bluetooth: hci5: command tx timeout [ 1663.436263][T17491] chnl_net:caif_netlink_parms(): no params data found [ 1664.366867][T17312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.366944][T17312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.367080][T17312] bridge_slave_0: entered allmulticast mode [ 1664.368672][T17312] bridge_slave_0: entered promiscuous mode [ 1664.379003][T17312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.379208][T17312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.379412][T17312] bridge_slave_1: entered allmulticast mode [ 1664.382806][T17312] bridge_slave_1: entered promiscuous mode [ 1664.711247][T16399] Bluetooth: hci5: command tx timeout [ 1667.863596][T17569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1669.179913][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.179980][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.623431][T17312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.539436][T17312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.539896][T17491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.540021][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.540200][T17491] bridge_slave_0: entered allmulticast mode [ 1672.546903][T17491] bridge_slave_0: entered promiscuous mode [ 1675.953399][T17491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.953532][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.953776][T17491] bridge_slave_1: entered allmulticast mode [ 1675.962849][T17491] bridge_slave_1: entered promiscuous mode [ 1677.474326][T17312] team0: Port device team_slave_0 added [ 1678.020765][T17312] team0: Port device team_slave_1 added [ 1678.122529][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.221282][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.778288][T17312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.778304][T17312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.778327][T17312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.072073][T17491] team0: Port device team_slave_0 added [ 1683.087574][T17491] team0: Port device team_slave_1 added [ 1683.479231][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.479249][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.479274][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.495500][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.495518][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.495544][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.552009][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1683.568875][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1683.570971][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1683.572743][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1683.730020][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1684.256751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.032719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.034477][T16399] Bluetooth: hci1: command tx timeout [ 1686.179896][T17491] hsr_slave_0: entered promiscuous mode [ 1686.181274][T17491] hsr_slave_1: entered promiscuous mode [ 1686.182253][T17491] debugfs: 'hsr0' already exists in 'hsr' [ 1686.182276][T17491] Cannot create hsr debugfs directory [ 1686.732510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.762340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.091746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.687026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.886116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.036882][T16399] Bluetooth: hci1: command tx timeout [ 1688.046792][ T8723] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1688.206772][ T8723] usb 8-1: Using ep0 maxpacket: 32 [ 1688.209081][ T8723] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.209139][ T8723] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.209166][ T8723] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.209188][ T8723] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1688.209214][ T8723] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1688.209248][ T8723] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1688.209270][ T8723] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.312598][ T8723] usb 8-1: config 0 descriptor?? [ 1688.358026][ T43] bridge_slave_1: left allmulticast mode [ 1688.358055][ T43] bridge_slave_1: left promiscuous mode [ 1688.358299][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.439509][ T43] bridge_slave_0: left allmulticast mode [ 1688.439540][ T43] bridge_slave_0: left promiscuous mode [ 1688.439984][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.562949][ T43] bridge_slave_1: left allmulticast mode [ 1688.562983][ T43] bridge_slave_1: left promiscuous mode [ 1688.563200][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.639135][ T43] bridge_slave_0: left allmulticast mode [ 1688.639166][ T43] bridge_slave_0: left promiscuous mode [ 1688.639609][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.733396][ T8723] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 1688.733438][ T8723] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 1688.733467][ T8723] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 1688.733493][ T8723] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 1688.733520][ T8723] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 1688.784308][ T8723] hid-thrustmaster 0003:044F:B65D.0023: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1688.784670][ T8723] hid-thrustmaster 0003:044F:B65D.0023: Wrong number of endpoints? [ 1689.230430][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.352587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.426798][ C0] hid-thrustmaster 0003:044F:B65D.0023: URB to get model id failed with error -71 [ 1689.436901][T16288] usb 8-1: USB disconnect, device number 49 [ 1689.765688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.877079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.960712][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.986469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.078648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.224897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.232774][T16399] Bluetooth: hci1: command tx timeout [ 1690.414352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.572106][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.743963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.793011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1691.014001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1691.238710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1691.250387][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.719230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1691.860467][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.280043][T16399] Bluetooth: hci1: command tx timeout [ 1692.479410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.607123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.931017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.976097][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.093180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.826874][ T43] bond0 (unregistering): Released all slaves [ 1695.677641][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.127284][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.747291][ T43] bond0 (unregistering): Released all slaves [ 1702.496753][ T43] hsr_slave_0: left promiscuous mode [ 1702.533143][ T43] hsr_slave_1: left promiscuous mode [ 1702.533760][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.608858][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.828730][ T43] hsr_slave_0: left promiscuous mode [ 1702.868780][ T43] hsr_slave_1: left promiscuous mode [ 1702.869922][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.907855][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.139065][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1709.552564][T17860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1710.540456][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1711.712094][T16399] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1712.213131][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1712.213339][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1712.462428][T17880] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1712.477265][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1712.477526][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1712.810897][T17877] ceph: No mds server is up or the cluster is laggy [ 1713.414844][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1713.415037][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1714.630927][T17893] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2670'. [ 1715.687698][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1715.880911][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1717.767376][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1717.789398][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1717.791065][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1717.792876][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1717.793731][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1719.877000][ T5803] Bluetooth: hci2: command tx timeout [ 1720.691493][T17928] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1721.313531][T17693] chnl_net:caif_netlink_parms(): no params data found [ 1721.958269][ T5803] Bluetooth: hci2: command tx timeout [ 1724.614618][T16399] Bluetooth: hci2: command tx timeout [ 1725.044475][T17956] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2687'. [ 1725.044498][T17956] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2687'. [ 1725.216166][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.217089][T17693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.217350][T17693] bridge_slave_0: entered allmulticast mode [ 1725.220170][T17693] bridge_slave_0: entered promiscuous mode [ 1725.277257][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.277484][T17693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.277732][T17693] bridge_slave_1: entered allmulticast mode [ 1725.280942][T17693] bridge_slave_1: entered promiscuous mode [ 1726.428088][T17977] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1727.316827][ T5803] Bluetooth: hci2: command tx timeout [ 1727.424062][T17979] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1727.816280][T17693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.949655][T17693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.271364][T17693] team0: Port device team_slave_0 added [ 1729.282298][T17908] chnl_net:caif_netlink_parms(): no params data found [ 1729.315129][T17693] team0: Port device team_slave_1 added [ 1729.766921][ T8721] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1730.527391][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.527463][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.806700][ T8721] usb 8-1: Using ep0 maxpacket: 32 [ 1730.809319][ T8721] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.809378][ T8721] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.809403][ T8721] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.809426][ T8721] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1730.809531][ T8721] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1730.809565][ T8721] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1730.809588][ T8721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.816344][ T8721] usb 8-1: config 0 descriptor?? [ 1731.004496][T17693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1731.004511][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.004531][T17693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.234786][ T8721] usbhid 8-1:0.0: can't add hid device: -71 [ 1731.234897][ T8721] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1731.235711][T17693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.235725][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.235753][T17693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.264967][ T8721] usb 8-1: USB disconnect, device number 50 [ 1734.601464][T17693] hsr_slave_0: entered promiscuous mode [ 1734.605715][T17693] hsr_slave_1: entered promiscuous mode [ 1734.761412][T13803] bridge_slave_1: left allmulticast mode [ 1734.761442][T13803] bridge_slave_1: left promiscuous mode [ 1734.761715][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.771120][T18036] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1734.842866][T13803] bridge_slave_0: left allmulticast mode [ 1734.842898][T13803] bridge_slave_0: left promiscuous mode [ 1734.843191][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.120590][T13803] bridge_slave_1: left allmulticast mode [ 1735.120611][T13803] bridge_slave_1: left promiscuous mode [ 1735.120760][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.374153][T13803] bridge_slave_0: left allmulticast mode [ 1736.374183][T13803] bridge_slave_0: left promiscuous mode [ 1736.374342][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.280600][T13803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.524049][T13803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.696889][T13803] bond0 (unregistering): Released all slaves [ 1740.233224][T13803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.389550][T13803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.490712][T13803] bond0 (unregistering): Released all slaves [ 1740.621651][T17908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.621792][T17908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.622059][T17908] bridge_slave_0: entered allmulticast mode [ 1740.626922][ T8723] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1740.674574][T17908] bridge_slave_0: entered promiscuous mode [ 1740.867131][ T8723] usb 7-1: Using ep0 maxpacket: 8 [ 1740.882394][ T8723] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1740.894502][ T8723] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1740.894532][ T8723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.894552][ T8723] usb 7-1: Product: syz [ 1740.894566][ T8723] usb 7-1: Manufacturer: syz [ 1740.894580][ T8723] usb 7-1: SerialNumber: syz [ 1740.940394][ T8723] usb 7-1: config 0 descriptor?? [ 1740.953352][ T8723] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1740.953395][ T8723] usb 7-1: setting power ON [ 1740.953842][ T8723] dvb-usb: bulk message failed: -22 (2/0) [ 1740.977165][ T8723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1740.978569][ T8723] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1740.978630][ T8723] usb 7-1: media controller created [ 1740.980038][T17908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.980279][T17908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.980418][T17908] bridge_slave_1: entered allmulticast mode [ 1741.033061][T17908] bridge_slave_1: entered promiscuous mode [ 1741.099622][ T8723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1741.158627][ T8723] usb 7-1: selecting invalid altsetting 6 [ 1741.158651][ T8723] usb 7-1: digital interface selection failed (-22) [ 1741.158736][ T8723] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1741.166021][ T8723] usb 7-1: setting power OFF [ 1741.166234][ T8723] dvb-usb: bulk message failed: -22 (2/0) [ 1741.166253][ T8723] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1741.166266][ T8723] (NULL device *): no alternate interface [ 1741.293859][ T8723] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1741.787583][T16288] usb 7-1: USB disconnect, device number 62 [ 1743.300781][T16399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1743.328215][T16399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1743.329780][T16399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1743.331636][T16399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1743.332539][T16399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1743.417907][T13803] hsr_slave_0: left promiscuous mode [ 1743.496793][T13803] hsr_slave_1: left promiscuous mode [ 1743.497753][T13803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.537611][T13803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.618733][T13803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.486743][ T5803] Bluetooth: hci5: command tx timeout [ 1746.126961][T18098] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2726'. [ 1746.126994][T18098] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2726'. [ 1747.556714][ T5803] Bluetooth: hci5: command tx timeout [ 1748.124306][T18114] random: crng reseeded on system resumption [ 1749.001063][T13803] team0 (unregistering): Port device team_slave_1 removed [ 1750.012162][ T5803] Bluetooth: hci5: command tx timeout [ 1751.648500][T13803] team0 (unregistering): Port device team_slave_0 removed [ 1751.958440][T18135] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2736'. [ 1751.958474][T18135] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2736'. [ 1752.048697][ T5803] Bluetooth: hci5: command tx timeout [ 1752.764722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1752.950848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1753.016881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1753.622841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1753.976398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1754.122783][T18157] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1754.123835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1754.195854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1754.488403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1754.489669][ T9121] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1755.118603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.119117][ T9121] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.119142][ T9121] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1755.171610][ T9121] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1755.171636][ T9121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1755.171647][ T9121] usb 7-1: SerialNumber: syz [ 1755.429982][ T9121] usb 7-1: 0:2 : does not exist [ 1755.430089][ T9121] usb 7-1: unit 5 not found! [ 1755.497336][ T9121] usb 7-1: USB disconnect, device number 63 [ 1755.506886][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2747'. [ 1755.506913][T18173] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2747'. [ 1755.677130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.747166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.817552][T13803] team0 (unregistering): Port device team_slave_1 removed [ 1756.049708][T13803] team0 (unregistering): Port device team_slave_0 removed [ 1756.271979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.355559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.542372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.600222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.799671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.143424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.506508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.848461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1758.653111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1758.960552][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1758.962361][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1759.164255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.169391][T18193] ceph: No mds server is up or the cluster is laggy [ 1759.217069][ T8723] libceph: connect (1)[c::]:6789 error -101 [ 1759.217274][ T8723] libceph: mon0 (1)[c::]:6789 connect error [ 1759.353964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.414938][T17908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.581638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.647268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.373622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.195811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.357790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.395727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.617782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1762.611029][T17908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.075292][ T8721] libceph: connect (1)[c::]:6789 error -101 [ 1763.075424][ T8721] libceph: mon0 (1)[c::]:6789 connect error [ 1763.171817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1763.182547][T17908] team0: Port device team_slave_0 added [ 1763.193172][T17908] team0: Port device team_slave_1 added [ 1763.327232][ T8721] libceph: connect (1)[c::]:6789 error -101 [ 1763.327447][ T8721] libceph: mon0 (1)[c::]:6789 connect error [ 1763.390477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1763.429722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1763.906147][ T8721] libceph: connect (1)[c::]:6789 error -101 [ 1763.938429][ T8721] libceph: mon0 (1)[c::]:6789 connect error [ 1764.038550][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.087445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.322434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.329473][T18214] ceph: No mds server is up or the cluster is laggy [ 1764.573237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.629480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.729830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.923106][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.103725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.168738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.220472][T17908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.220488][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.220511][T17908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.255322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.323897][T17908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.323908][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.323923][T17908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.512657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.800442][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.881333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1767.026113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1767.053789][T17908] hsr_slave_0: entered promiscuous mode [ 1767.054732][T17908] hsr_slave_1: entered promiscuous mode [ 1767.063722][T17908] debugfs: 'hsr0' already exists in 'hsr' [ 1767.063751][T17908] Cannot create hsr debugfs directory [ 1767.181271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1767.476528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1767.523739][T18244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2768'. [ 1767.523771][T18244] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2768'. [ 1768.054164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1768.617647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.184468][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1769.184669][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1769.354281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.480639][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1769.480849][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1769.562873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.305167][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1770.305292][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1770.334060][T18254] ceph: No mds server is up or the cluster is laggy [ 1770.710510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.060690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.157046][T18273] ALSA: mixer_oss: invalid OSS volume '' [ 1771.230382][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.293173][T18076] chnl_net:caif_netlink_parms(): no params data found [ 1771.765356][T18282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1771.812482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.003931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.081306][T18288] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2778'. [ 1772.081335][T18288] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2778'. [ 1772.305124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.045718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.133053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.372177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1774.962586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1775.092237][ T1165] bridge_slave_1: left allmulticast mode [ 1775.092268][ T1165] bridge_slave_1: left promiscuous mode [ 1775.092549][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.238051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1775.269802][ T9121] libceph: connect (1)[c::]:6789 error -101 [ 1775.270019][ T9121] libceph: mon0 (1)[c::]:6789 connect error [ 1775.431823][ T1165] bridge_slave_0: left allmulticast mode [ 1775.431854][ T1165] bridge_slave_0: left promiscuous mode [ 1775.432117][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.526958][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1775.527084][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1775.701599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.068351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.202394][T14189] libceph: connect (1)[c::]:6789 error -101 [ 1776.202614][T14189] libceph: mon0 (1)[c::]:6789 connect error [ 1776.232158][T18303] ceph: No mds server is up or the cluster is laggy [ 1776.303515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.409660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.566650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.627566][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1776.667664][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.767260][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.808865][ T1165] bond0 (unregistering): Released all slaves [ 1776.905776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.977544][ C1] vkms_vblank_simulate: vblank timer overrun [ 1777.151629][ T1165] hsr_slave_0: left promiscuous mode [ 1777.186805][ T1165] hsr_slave_1: left promiscuous mode [ 1777.187491][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.217381][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.509098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1777.571558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1777.711418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1777.832795][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 1777.877936][T18325] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1777.877968][T18325] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1777.942262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1778.447016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1778.777859][T16399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1778.787902][T16399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1778.789793][T16399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1778.791646][T16399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1778.799658][T16399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1778.957911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1779.208483][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 1779.239134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1779.416613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.008752][T18344] ceph: No mds server is up or the cluster is laggy [ 1780.014286][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 1780.014506][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 1780.034230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.192216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.601502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.932518][T16399] Bluetooth: hci1: command tx timeout [ 1781.497558][T18357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1782.204941][T18076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.205149][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.205391][T18076] bridge_slave_0: entered allmulticast mode [ 1782.243090][T18076] bridge_slave_0: entered promiscuous mode [ 1782.291330][T18076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.291462][T18076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.291690][T18076] bridge_slave_1: entered allmulticast mode [ 1782.294442][T18076] bridge_slave_1: entered promiscuous mode [ 1782.568004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.882292][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.900519][T18076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.960328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.965946][T18076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1782.996805][T16399] Bluetooth: hci1: command tx timeout [ 1783.117578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.633728][T18368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2799'. [ 1783.633760][T18368] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2799'. [ 1783.830976][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.282228][T18076] team0: Port device team_slave_0 added [ 1784.286063][T18076] team0: Port device team_slave_1 added [ 1784.389557][T18376] overlayfs: missing 'workdir' [ 1785.120428][T18382] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1785.915021][T16399] Bluetooth: hci1: command tx timeout [ 1786.740925][T18076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.740943][T18076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.740969][T18076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.752815][T18076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.752832][T18076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.752859][T18076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.102604][T18393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1787.348306][T18076] hsr_slave_0: entered promiscuous mode [ 1787.349659][T18076] hsr_slave_1: entered promiscuous mode [ 1787.956961][T16399] Bluetooth: hci1: command tx timeout [ 1790.767444][T18337] chnl_net:caif_netlink_parms(): no params data found [ 1791.907461][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.907507][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.657376][T18438] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1793.783969][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.784108][T18337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.784357][T18337] bridge_slave_0: entered allmulticast mode [ 1793.789609][T18337] bridge_slave_0: entered promiscuous mode [ 1793.857754][T18337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.857893][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.858151][T18337] bridge_slave_1: entered allmulticast mode [ 1793.862625][T18337] bridge_slave_1: entered promiscuous mode [ 1794.389268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1794.622242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.177914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.326906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.477543][T18337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.580099][T18337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.822086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.982142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1796.089424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1796.853800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1797.037787][ T1165] bridge_slave_1: left allmulticast mode [ 1797.037816][ T1165] bridge_slave_1: left promiscuous mode [ 1797.038064][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.149324][ T1165] bridge_slave_0: left allmulticast mode [ 1797.149345][ T1165] bridge_slave_0: left promiscuous mode [ 1797.149517][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.365228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1798.348784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1798.406921][T18471] netlink: 'syz.7.2827': attribute type 4 has an invalid length. [ 1799.685438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1799.694230][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.787450][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.851025][ T1165] bond0 (unregistering): Released all slaves [ 1799.949594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1800.130784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1800.173692][T18337] team0: Port device team_slave_0 added [ 1800.241033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1800.495221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1800.656402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1800.941589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1801.865120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1801.917898][T18497] netlink: 'syz.7.2834': attribute type 4 has an invalid length. [ 1802.096826][ T1165] hsr_slave_0: left promiscuous mode [ 1802.146854][ T1165] hsr_slave_1: left promiscuous mode [ 1802.147809][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.207704][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.151038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.247217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.308593][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 1803.450740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.521953][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 1803.690594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1804.667865][T18337] team0: Port device team_slave_1 added [ 1805.073337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1805.255918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1805.346158][T18337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.346176][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.346203][T18337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.405965][T18337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.405982][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.406009][T18337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.520815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1805.583996][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1805.601974][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1805.603650][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1805.605470][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1805.606199][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1805.701124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.003022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.076565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.170629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.256234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.341080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.478408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1806.543094][T18337] hsr_slave_0: entered promiscuous mode [ 1806.544471][T18337] hsr_slave_1: entered promiscuous mode [ 1806.564431][T18337] debugfs: 'hsr0' already exists in 'hsr' [ 1806.564461][T18337] Cannot create hsr debugfs directory [ 1807.686034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.716705][ T5803] Bluetooth: hci2: command tx timeout [ 1808.086302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1809.226662][ T8721] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1809.309477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.388264][ T8721] usb 9-1: Using ep0 maxpacket: 32 [ 1809.390667][ T8721] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.390697][ T8721] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1809.390720][ T8721] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1809.390746][ T8721] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1809.390778][ T8721] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1809.390799][ T8721] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.396111][ T8721] usb 9-1: config 0 descriptor?? [ 1809.898839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.910301][ T5803] Bluetooth: hci2: command tx timeout [ 1810.056629][ C0] vkms_vblank_simulate: vblank timer overrun [ 1810.636798][T18547] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1810.639306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1810.837363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1810.842462][ T8721] usbhid 9-1:0.0: can't add hid device: -71 [ 1810.845064][ T8721] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1810.885101][ T8721] usb 9-1: USB disconnect, device number 51 [ 1812.172477][ T5803] Bluetooth: hci2: command tx timeout [ 1812.210501][ C0] vkms_vblank_simulate: vblank timer overrun [ 1813.148176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.125794][ T5803] Bluetooth: hci2: command tx timeout [ 1816.137657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.166579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.296573][T18582] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1816.297523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.367087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.610409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.884972][T18517] chnl_net:caif_netlink_parms(): no params data found [ 1817.654537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1818.422414][ C0] vkms_vblank_simulate: vblank timer overrun [ 1818.964774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1819.570334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1819.624244][T18609] block device autoloading is deprecated and will be removed. [ 1820.060427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1820.094826][T18517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.095036][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.095229][T18517] bridge_slave_0: entered allmulticast mode [ 1820.119916][T18517] bridge_slave_0: entered promiscuous mode [ 1820.124805][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.125004][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.125207][T18517] bridge_slave_1: entered allmulticast mode [ 1820.167364][T18517] bridge_slave_1: entered promiscuous mode [ 1820.379272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1820.569250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.085924][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.310757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.442561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.717591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.808443][T18634] binder: BINDER_SET_CONTEXT_MGR already set [ 1822.808459][T18634] binder: 18631:18634 ioctl 4018620d 200000000040 returned -16 [ 1822.999588][T18517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1823.021258][T18337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1823.093601][T18517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1823.093960][T18337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1823.197036][ T5786] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1823.263898][T18337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1823.442047][ T5786] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1823.442079][ T5786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.442100][ T5786] usb 8-1: Product: syz [ 1823.442115][ T5786] usb 8-1: Manufacturer: syz [ 1823.442129][ T5786] usb 8-1: SerialNumber: syz [ 1823.644243][ T5786] usb 8-1: config 0 descriptor?? [ 1823.952417][ C1] vkms_vblank_simulate: vblank timer overrun [ 1824.048363][T13803] bridge_slave_1: left allmulticast mode [ 1824.048409][T13803] bridge_slave_1: left promiscuous mode [ 1824.048655][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.082728][ T5786] airspy 8-1:0.0: Board ID: 00 [ 1824.082751][ T5786] airspy 8-1:0.0: Firmware version: [ 1824.303021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1824.361293][T13803] bridge_slave_0: left allmulticast mode [ 1824.361323][T13803] bridge_slave_0: left promiscuous mode [ 1824.361786][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.109490][T13803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1825.110894][ T5786] airspy 8-1:0.0: usb_control_msg() failed -71 request 10 [ 1825.114497][ T5786] airspy 8-1:0.0: Registered as swradio24 [ 1825.114516][ T5786] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1825.158196][ T5786] usb 8-1: USB disconnect, device number 51 [ 1825.489839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1825.576506][T13803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1826.049887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1826.505024][T13803] bond0 (unregistering): Released all slaves [ 1826.534015][T18661] binder_alloc: 18660: binder_alloc_buf, no vma [ 1827.027977][T18337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1827.190512][T18517] team0: Port device team_slave_0 added [ 1827.212470][T18517] team0: Port device team_slave_1 added [ 1827.322268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.411907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.646558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1828.286747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1828.462048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1828.859167][ T23] ================================================================== [ 1828.859180][ T23] BUG: KASAN: vmalloc-out-of-bounds in irq_work_single+0x32/0x2b0 [ 1828.859200][ T23] Read of size 4 at addr ffffc9000cdf9098 by task irq_work/0/23 [ 1828.859210][ T23] [ 1828.859218][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1828.859230][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1828.859238][ T23] Call Trace: [ 1828.859243][ T23] [ 1828.859248][ T23] dump_stack_lvl+0x189/0x250 [ 1828.859262][ T23] ? irq_work_single+0x32/0x2b0 [ 1828.859273][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1828.859285][ T23] ? __pfx__printk+0x10/0x10 [ 1828.859297][ T23] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1828.859314][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1828.859326][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1828.859338][ T23] print_report+0xca/0x240 [ 1828.859352][ T23] ? irq_work_single+0x32/0x2b0 [ 1828.859362][ T23] kasan_report+0x118/0x150 [ 1828.859375][ T23] ? irq_work_single+0x32/0x2b0 [ 1828.859387][ T23] kasan_check_range+0x2b0/0x2c0 [ 1828.859399][ T23] irq_work_single+0x32/0x2b0 [ 1828.859411][ T23] run_irq_workd+0x121/0x190 [ 1828.859421][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1828.859432][ T23] ? schedule+0x91/0x360 [ 1828.859447][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1828.859457][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1828.859465][ T23] smpboot_thread_fn+0x542/0xa60 [ 1828.859475][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1828.859486][ T23] kthread+0x711/0x8a0 [ 1828.859498][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1828.859507][ T23] ? __pfx_kthread+0x10/0x10 [ 1828.859518][ T23] ? rt_spin_unlock+0x150/0x200 [ 1828.859531][ T23] ? rt_spin_unlock+0x161/0x200 [ 1828.859548][ T23] ? __pfx_kthread+0x10/0x10 [ 1828.859560][ T23] ret_from_fork+0x4bc/0x870 [ 1828.859576][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1828.859593][ T23] ? __switch_to_asm+0x39/0x70 [ 1828.859606][ T23] ? __switch_to_asm+0x33/0x70 [ 1828.859618][ T23] ? __pfx_kthread+0x10/0x10 [ 1828.859630][ T23] ret_from_fork_asm+0x1a/0x30 [ 1828.859647][ T23] [ 1828.859650][ T23] [ 1828.859654][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1828.859667][ T23] Memory state around the buggy address: [ 1828.859673][ T23] ffffc9000cdf8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1828.859680][ T23] ffffc9000cdf9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1828.859687][ T23] >ffffc9000cdf9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1828.859696][ T23] ^ [ 1828.859702][ T23] ffffc9000cdf9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1828.859709][ T23] ffffc9000cdf9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1828.859714][ T23] ================================================================== [ 1828.859728][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1828.859736][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1828.859747][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1828.859753][ T23] Call Trace: [ 1828.859757][ T23] [ 1828.859761][ T23] dump_stack_lvl+0x99/0x250 [ 1828.859773][ T23] ? __asan_memcpy+0x40/0x70 [ 1828.859788][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1828.859800][ T23] ? __pfx__printk+0x10/0x10 [ 1828.859814][ T23] vpanic+0x237/0x6d0 [ 1828.859823][ T23] ? __pfx_vpanic+0x10/0x10 [ 1828.859835][ T23] panic+0xb9/0xc0 [ 1828.859844][ T23] ? __pfx_panic+0x10/0x10 [ 1828.859852][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1828.859869][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1828.859885][ T23] ? irq_work_single+0x32/0x2b0 [ 1828.859896][ T23] check_panic_on_warn+0x89/0xb0 [ 1828.859908][ T23] ? irq_work_single+0x32/0x2b0 [ 1828.859918][ T23] end_report+0x78/0x160 [ 1828.859929][ T23] kasan_report+0x129/0x150 [ 1828.859940][ T23] ? irq_work_single+0x32/0x2b0 [ 1828.859952][ T23] kasan_check_range+0x2b0/0x2c0 [ 1828.859963][ T23] irq_work_single+0x32/0x2b0 [ 1828.859975][ T23] run_irq_workd+0x121/0x190 [ 1828.859985][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1828.859995][ T23] ? schedule+0x91/0x360 [ 1828.860010][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1828.860019][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1828.860028][ T23] smpboot_thread_fn+0x542/0xa60 [ 1828.860038][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1828.860048][ T23] kthread+0x711/0x8a0 [ 1828.860060][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1828.860070][ T23] ? __pfx_kthread+0x10/0x10 [ 1828.860080][ T23] ? rt_spin_unlock+0x150/0x200 [ 1828.860094][ T23] ? rt_spin_unlock+0x161/0x200 [ 1828.860105][ T23] ? __pfx_kthread+0x10/0x10 [ 1828.860117][ T23] ret_from_fork+0x4bc/0x870 [ 1828.860132][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1828.860148][ T23] ? __switch_to_asm+0x39/0x70 [ 1828.860161][ T23] ? __switch_to_asm+0x33/0x70 [ 1828.860174][ T23] ? __pfx_kthread+0x10/0x10 [ 1828.860185][ T23] ret_from_fork_asm+0x1a/0x30 [ 1828.860202][ T23] [ 1828.860491][ T23] Kernel Offset: disabled