last executing test programs: 25m17.711361177s ago: executing program 32 (id=15): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) add_key$fscrypt_provisioning(&(0x7f0000002240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x2e) 24m20.760431607s ago: executing program 33 (id=63): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) fsopen(&(0x7f0000000480)='incremental-fs\x00', 0x1) 24m11.524711953s ago: executing program 34 (id=73): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) epoll_create(0x101) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f0000000400)="e1d906d69c5b05", 0x7, 0xcad309fe1ffd1257, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) 18m39.092340176s ago: executing program 35 (id=339): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x80000}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, 0x0, 0x4044) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 18m38.135595515s ago: executing program 36 (id=341): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) syz_emit_ethernet(0x36, 0x0, 0x0) 14m1.735212773s ago: executing program 8 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x0, "00d414ce8a"}, {0x18}]}}}}}}, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 14m0.444033438s ago: executing program 8 (id=566): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 13m58.592832212s ago: executing program 8 (id=567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 13m49.381823776s ago: executing program 37 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x100) bind$inet(r4, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) socket(0x40000000015, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 13m42.264474064s ago: executing program 38 (id=567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 12m1.842773875s ago: executing program 5 (id=680): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_get$uid(0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 11m58.190145375s ago: executing program 5 (id=683): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r8) 11m56.510651013s ago: executing program 5 (id=684): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x0, 0x7, 0xe, 0x25}, {0xfa, 0xe5, 0x9, 0x10000}]}, 0x10) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) syz_io_uring_setup(0x42e6, 0x0, &(0x7f0000000080), 0x0) 11m51.881034955s ago: executing program 5 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) 11m50.344751371s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(0x0, 0x2, 0x162, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, 0x0, 0x20000) 11m47.414924476s ago: executing program 5 (id=693): socket$inet(0x2, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) close(r0) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 11m31.85601596s ago: executing program 39 (id=693): socket$inet(0x2, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) close(r0) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 6m58.651750654s ago: executing program 4 (id=919): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000a40)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x1008}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) sendmsg$unix(r1, 0x0, 0x8000) syz_open_dev$vim2m(0x0, 0x9, 0x2) 6m53.772806307s ago: executing program 4 (id=922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket(0x25, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) socket(0x11, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite6\x00') read$FUSE(r2, &(0x7f0000016440)={0x2020}, 0x2020) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RGETATTR(r2, 0x0, 0x0) 6m50.845093099s ago: executing program 4 (id=926): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6m49.503829191s ago: executing program 4 (id=927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x100010, 0xffffffffffffffff, 0x963ac000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT(0x0, 0xd, 0x0) syz_emit_vhci(0x0, 0xf) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x21, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 6m48.080346684s ago: executing program 4 (id=928): syz_emit_ethernet(0xee, &(0x7f0000000ac0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x5, 0x6, '\a\x00', 0xb8, 0x3a, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x3e}, {[@srh={0xff, 0x2, 0x4, 0x1, 0x0, 0x60, 0x6, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x3a, 0x0, 0x1, 0x40}, @fragment={0x33, 0x0, 0xb, 0x0, 0x0, 0x17, 0x67}], @param_prob={0x4, 0x2, 0x0, 0x9b85, {0xa, 0x6, "e5a0a3", 0x8000, 0x5e, 0xff, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [@routing={0x87, 0xa, 0x2, 0x9c, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private2, @private0, @private2]}, @routing={0x3b, 0x0, 0x2, 0xa}]}}}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x2000) symlink(&(0x7f0000000080)='.\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x257) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x10, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x6, 0x1, 0xffffffff, 0x2, 0x2, 0x3e7}) 6m47.067268531s ago: executing program 4 (id=930): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) sched_setattr(0x0, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x86) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6m39.201213706s ago: executing program 1 (id=938): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="00350400"/15, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x1c, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9}) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x3}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001280)=[{0x0}], 0x1, 0x4, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @mcast1}}}, 0x48) 6m37.862744447s ago: executing program 1 (id=942): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c200000000000000000008004500002c00000000001190780000"], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 6m34.043517405s ago: executing program 1 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) 6m31.722974335s ago: executing program 40 (id=930): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) sched_setattr(0x0, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x86) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6m31.661052772s ago: executing program 1 (id=948): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x400c810) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) inotify_init1(0x0) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'aio_iiro_16\x00', [0x83eb, 0xe4, 0x4, 0x4, 0x5, 0xcc7, 0x8, 0x1, 0xe, 0x4, 0x6, 0x1, 0x1, 0x1, 0x4000006, 0x101, 0xfffffffd, 0x1a449, 0x5f57, 0x40000003, 0x8a, 0x6, 0x0, 0x4, 0x800, 0x81, 0x3a, 0x8, 0x6, 0xf7ffffff, 0xfffffff8]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)=0x1) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 6m29.851381208s ago: executing program 1 (id=949): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xae6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 6m28.874534102s ago: executing program 1 (id=950): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf8f98ced9c9c1015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, 0x0) shmdt(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) 6m13.215735914s ago: executing program 41 (id=950): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf8f98ced9c9c1015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, 0x0) shmdt(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) 3m16.137197762s ago: executing program 9 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0xff}, 0x20) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0d, &(0x7f0000000000)={'bridge_slave_1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x4004551e, &(0x7f00000004c0)={0x0, 0x1, "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"}) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000000)={0x7, 0xffff}) 3m12.218117106s ago: executing program 9 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 3m10.425039101s ago: executing program 9 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) dup(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 3m9.277045768s ago: executing program 9 (id=1151): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3m7.397879417s ago: executing program 9 (id=1152): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4b7d) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100"/17, 0x11}], 0x1, 0x9) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x7) 3m5.172791439s ago: executing program 9 (id=1153): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m48.810451993s ago: executing program 42 (id=1153): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 33.537231592s ago: executing program 0 (id=1244): mkdirat(0xffffffffffffff9c, 0x0, 0xa8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffb, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(0x0, &(0x7f00000002c0), &(0x7f0000000340)=@v1={0x1000000, [{0x6, 0xffffff44}]}, 0xc, 0x3) 30.586146552s ago: executing program 0 (id=1247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef995000040"]) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) cachestat(r0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28081}, 0x0) 29.522932538s ago: executing program 0 (id=1249): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) socket(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 24.197593908s ago: executing program 0 (id=1263): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = fanotify_init(0x16, 0x0) r4 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x40000010, r5, 0x0) execveat(r5, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 22.582879635s ago: executing program 6 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000680)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 22.582554867s ago: executing program 7 (id=1254): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 22.395980464s ago: executing program 2 (id=1255): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) 20.200888682s ago: executing program 6 (id=1257): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x8000000000000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r6, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 16.763435492s ago: executing program 6 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x541b, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000500)={&(0x7f0000000300)=""/235, 0x200000, 0x1000, 0x8001, 0x2}, 0x20) setreuid(0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x7fffffff, 0x9, 0x7, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) 15.389208665s ago: executing program 2 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x40) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 15.346806727s ago: executing program 3 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r4, 0x25, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000008140)={0x0, 0x91}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 15.332614038s ago: executing program 7 (id=1264): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', '\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000400)={0x596c, 0x101, 0x6, 0x8}) sendmsg$nl_route(r1, 0x0, 0x0) keyctl$session_to_parent(0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(r3) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfef, 0x2, "ec28a144f13d7607"}) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x23bc, @remote, 0x6}, 0x1c) syz_open_pts(r2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x44) socket$nl_route(0x10, 0x3, 0x0) 15.193082437s ago: executing program 0 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc4c}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) 13.740526215s ago: executing program 3 (id=1266): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',']) syz_open_dev$usbfs(0x0, 0x7, 0x20000) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) 13.711806261s ago: executing program 2 (id=1267): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) socket(0x21, 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = eventfd(0xd701) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000800)=r3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x4000423) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x2, 0x6, @multicast}, 0x14) 13.581362612s ago: executing program 0 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=""/51, 0x10000}) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) 10.837531228s ago: executing program 3 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000680)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 10.837210582s ago: executing program 6 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000540)={'pcm3724\x00', [0x109, 0x80008000, 0x86c, 0xc, 0x80000000, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x1, 0x5, 0x6, 0x746, 0x100, 0x6, 0xffffffa7, 0x2000001, 0x0, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2e0, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c014) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10.836559566s ago: executing program 7 (id=1271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000001700)={'syz0\x00', {0x54f, 0x1, 0x5, 0xfff}, 0x1b, [0x7, 0x4, 0x7ff, 0x1000004, 0x8, 0x3, 0x1, 0x3, 0x19d2, 0xaa, 0x123, 0x7, 0x3, 0x65f, 0x6, 0xa, 0x3, 0x5, 0x6, 0xe, 0x7fff, 0x800, 0x0, 0xc, 0x2, 0x3, 0xae, 0x2, 0xf0, 0x9, 0x40055c, 0x7, 0xc, 0x4, 0x6, 0xc, 0x0, 0x9, 0x80000001, 0x1200000, 0x2, 0xfffff8e4, 0x0, 0xcb0, 0x4, 0x9, 0x8, 0x4, 0x0, 0x3, 0xfff, 0x3ff, 0x1, 0x5b, 0xffffe9ab, 0x9, 0x7, 0x2169, 0xffff8000, 0x5, 0xee, 0x9, 0xd7a, 0x7fffffff], [0x36, 0x200, 0x6, 0x10ff, 0x6, 0x2, 0xe00, 0x6, 0x10, 0xfffffff8, 0x1c, 0x3, 0xd1, 0xa, 0x800, 0x4, 0xf8b, 0x3, 0x9, 0x1, 0x6, 0x6, 0x627e, 0x10000, 0x784, 0x7dd, 0x8, 0x1000, 0x5, 0x9, 0xa, 0xfffffffa, 0xa80, 0x7, 0x3, 0x3, 0xb, 0x80000001, 0x7f, 0x6, 0xfff, 0x591b999d, 0x80000000, 0xa7c1, 0x4, 0x101, 0xffff7fff, 0x4, 0x7, 0x3, 0x401, 0x8000, 0x1, 0x0, 0x2, 0xd, 0x5, 0x4, 0x3, 0x9, 0x8001, 0x68a3, 0x100, 0x8], [0x400, 0x5, 0x2, 0x9e4, 0x1, 0x100, 0x6d, 0x7, 0x8854, 0x4, 0x6, 0x2f, 0xe7, 0x9, 0x1, 0x2, 0xd3, 0x6, 0x0, 0xffff, 0xfffffffe, 0x3, 0xffffffff, 0x1, 0x1500, 0x0, 0xb8, 0x5, 0x80, 0x572, 0x9, 0x4, 0xe, 0x0, 0x0, 0x8, 0xe, 0x76, 0x60, 0x6, 0xf6b2, 0x5, 0x80000000, 0x0, 0x0, 0x4, 0xa20, 0x7, 0x97, 0x5, 0x18c9, 0x0, 0x0, 0x1, 0x6c, 0x0, 0x1, 0xfffffffb, 0x9264, 0x3, 0x9f, 0x2, 0x60e, 0x10000], [0x7, 0x1, 0x1, 0x1, 0x80000000, 0x9, 0x9, 0x4, 0x5, 0x6, 0x3, 0x4, 0x6, 0x242, 0x3800, 0x1, 0x0, 0x5e, 0xfff, 0xffffffff, 0x0, 0x6, 0x1, 0x5, 0x6, 0x80000000, 0x9, 0x6, 0x0, 0x100, 0x9, 0x4, 0xb98c, 0x2, 0xae341edd, 0xac4d, 0x9, 0x5, 0x5375, 0x8000, 0x800, 0x5, 0x6, 0xffffff15, 0x8, 0x3, 0x3a1, 0x0, 0x7, 0x7, 0x1, 0x5, 0x7, 0x7fff, 0x0, 0x7, 0x8, 0x6, 0x1000, 0x9, 0xe42, 0x1e, 0x94, 0x9]}, 0x45c) r5 = socket(0x80000000000000a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) 10.832942138s ago: executing program 2 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) 5.615347945s ago: executing program 7 (id=1273): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = gettid() tkill(r3, 0xb) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setreuid(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) 5.420996026s ago: executing program 6 (id=1274): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x6, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x10000, 0x4) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) close_range(r3, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.417186515s ago: executing program 3 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt(0xffffffffffffffff, 0x28, 0x6, 0xfffffffffffffffc, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x2, 0x0, 0xffffffffffffffd1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) close_range(r2, 0xffffffffffffffff, 0x0) 3.759133905s ago: executing program 3 (id=1275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x7, 0x101, 0x8d7b, 0x4, 0xc000, 0x8, r7, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000006c0)=ANY=[], 0x0) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0x8, 0xffffffffb3abdb0c, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.644635165s ago: executing program 2 (id=1276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000840) 3.129274424s ago: executing program 7 (id=1277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x40) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 2.312290668s ago: executing program 2 (id=1278): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x80) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffff9, 0x0, 0xc}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r2, 0x60}], 0x2, 0x0, 0x0, 0x0) 139.538613ms ago: executing program 3 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc02063a1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200000000000c00028005000100000001000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 63.138702ms ago: executing program 7 (id=1280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',']) syz_open_dev$usbfs(0x0, 0x7, 0x20000) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) 0s ago: executing program 6 (id=1281): r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) setuid(0xee01) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x21, &(0x7f0000000600)=ANY=[@ANYBLOB="1800f36adca5b8ca4b8cce096e88b4cc6d22d2eb0018110000ff61dac26edca60040e824ac108192e1913bda063e6989386a879a11576bda3a12e7552a30f387c78885ed06c62f29408281a2947e618b30c1612ade991ebc7100"/99, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000", @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", '\x00', "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x60b, 0x23, 0xfffffff9, 0x5, 0x20000007, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x2, 0x7, 0xbd, 0x6, 0x21, 0xff}) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 1] team0 (unregistering): Port device team_slave_0 removed [ 1143.124763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.195262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.291138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.395001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.401847][ T5840] Bluetooth: hci4: command tx timeout [ 1143.565663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.605024][T10339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1143.630503][T10339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1143.640233][T10339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1143.679633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.681539][T10339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1143.698720][T10339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1144.146466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.261341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.502208][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.054205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.376725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.511232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.665846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.795253][T10339] Bluetooth: hci5: command tx timeout [ 1145.795466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.881117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.958092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.031872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.244432][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.296194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.527271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.600187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.664132][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1146.714511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.855424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.982915][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1147.019845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.061284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.872336][T10339] Bluetooth: hci5: command tx timeout [ 1148.122015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.261117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.796797][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.010904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.064557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.549570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.647435][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1149.670892][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1149.677410][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1149.679897][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1149.680770][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1149.774507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.849100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.953626][T10339] Bluetooth: hci5: command tx timeout [ 1149.998364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.077759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.133444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.435885][T10617] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1150.469206][T10635] chnl_net:caif_netlink_parms(): no params data found [ 1151.170577][T10813] lo speed is unknown, defaulting to 1000 [ 1151.195087][T10806] lo speed is unknown, defaulting to 1000 [ 1151.233752][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.267017][T10809] lo speed is unknown, defaulting to 1000 [ 1151.333327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.429567][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.561176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.719050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.791993][T10339] Bluetooth: hci6: command tx timeout [ 1152.040993][T10339] Bluetooth: hci5: command tx timeout [ 1152.331538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.419045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.903413][T10813] chnl_net:caif_netlink_parms(): no params data found [ 1152.911447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.914731][T10806] chnl_net:caif_netlink_parms(): no params data found [ 1153.560890][T10809] chnl_net:caif_netlink_parms(): no params data found [ 1153.872292][T10339] Bluetooth: hci6: command tx timeout [ 1154.148901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.334812][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.334963][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.335212][T10813] bridge_slave_0: entered allmulticast mode [ 1154.338170][T10813] bridge_slave_0: entered promiscuous mode [ 1154.376161][T10806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.376362][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.376685][T10806] bridge_slave_0: entered allmulticast mode [ 1154.380375][T10806] bridge_slave_0: entered promiscuous mode [ 1154.416746][T10806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.416919][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.417163][T10806] bridge_slave_1: entered allmulticast mode [ 1154.420750][T10806] bridge_slave_1: entered promiscuous mode [ 1154.425882][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.426045][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.426372][T10813] bridge_slave_1: entered allmulticast mode [ 1154.430336][T10813] bridge_slave_1: entered promiscuous mode [ 1154.767012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.077940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.106590][T10806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.112590][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.114234][T10809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.114396][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.114660][T10809] bridge_slave_0: entered allmulticast mode [ 1155.117917][T10809] bridge_slave_0: entered promiscuous mode [ 1155.176751][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.177653][T10809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.177852][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.178088][T10809] bridge_slave_1: entered allmulticast mode [ 1155.217910][T10809] bridge_slave_1: entered promiscuous mode [ 1155.238577][T10806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.740911][T10813] team0: Port device team_slave_0 added [ 1155.747312][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.750324][T10806] team0: Port device team_slave_0 added [ 1155.786684][T10806] team0: Port device team_slave_1 added [ 1155.790661][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.797575][T10813] team0: Port device team_slave_1 added [ 1155.952212][T10339] Bluetooth: hci6: command tx timeout [ 1156.583730][T10806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.583749][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.583779][T10806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.587972][T10809] team0: Port device team_slave_0 added [ 1156.590539][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.590556][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.590585][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.695069][T10806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.695087][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.695118][T10806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.705852][T10809] team0: Port device team_slave_1 added [ 1156.707613][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.707631][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.707665][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.076081][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.076107][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.076137][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.225827][ T9391] IPVS: stop unused estimator thread 0... [ 1157.335395][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.335415][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.335446][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.496965][T10806] hsr_slave_0: entered promiscuous mode [ 1157.498967][T10806] hsr_slave_1: entered promiscuous mode [ 1157.500069][T10806] debugfs: 'hsr0' already exists in 'hsr' [ 1157.500097][T10806] Cannot create hsr debugfs directory [ 1157.540427][T10813] hsr_slave_0: entered promiscuous mode [ 1157.547168][T10813] hsr_slave_1: entered promiscuous mode [ 1157.548402][T10813] debugfs: 'hsr0' already exists in 'hsr' [ 1157.548432][T10813] Cannot create hsr debugfs directory [ 1158.032087][ T5840] Bluetooth: hci6: command tx timeout [ 1158.048309][T10809] hsr_slave_0: entered promiscuous mode [ 1158.052737][T10809] hsr_slave_1: entered promiscuous mode [ 1158.053902][T10809] debugfs: 'hsr0' already exists in 'hsr' [ 1158.053941][T10809] Cannot create hsr debugfs directory [ 1160.083664][ T9391] bridge_slave_1: left allmulticast mode [ 1160.083701][ T9391] bridge_slave_1: left promiscuous mode [ 1160.084047][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.140707][ T9391] bridge_slave_0: left allmulticast mode [ 1160.140746][ T9391] bridge_slave_0: left promiscuous mode [ 1160.141061][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.207083][ T9391] bridge_slave_1: left allmulticast mode [ 1160.207119][ T9391] bridge_slave_1: left promiscuous mode [ 1160.207383][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.263486][ T9391] bridge_slave_0: left allmulticast mode [ 1160.263523][ T9391] bridge_slave_0: left promiscuous mode [ 1160.263795][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.337050][ T9391] bridge_slave_1: left allmulticast mode [ 1160.337086][ T9391] bridge_slave_1: left promiscuous mode [ 1160.337459][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.403570][ T9391] bridge_slave_0: left allmulticast mode [ 1160.403604][ T9391] bridge_slave_0: left promiscuous mode [ 1160.403883][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.476851][ T9391] bridge_slave_1: left allmulticast mode [ 1160.476887][ T9391] bridge_slave_1: left promiscuous mode [ 1160.477173][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.533784][ T9391] bridge_slave_0: left allmulticast mode [ 1160.533818][ T9391] bridge_slave_0: left promiscuous mode [ 1160.534126][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.596238][ T9391] bridge_slave_1: left allmulticast mode [ 1160.596265][ T9391] bridge_slave_1: left promiscuous mode [ 1160.596449][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.655776][ T9391] bridge_slave_0: left allmulticast mode [ 1160.655813][ T9391] bridge_slave_0: left promiscuous mode [ 1160.656077][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.964148][ T9391] bond0 (unregistering): Released all slaves [ 1161.164119][ T9391] bond0 (unregistering): Released all slaves [ 1161.362858][ T9391] bond0 (unregistering): Released all slaves [ 1161.594955][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.663020][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.738368][ T9391] bond0 (unregistering): Released all slaves [ 1161.927428][ T9391] bond0 (unregistering): Released all slaves [ 1162.170833][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.227606][ T9391] bond0 (unregistering): Released all slaves [ 1162.455486][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.532724][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.602537][ T9391] bond0 (unregistering): Released all slaves [ 1162.822778][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.905808][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.967773][ T9391] bond0 (unregistering): Released all slaves [ 1163.211597][ T9391] bond0 (unregistering): Released all slaves [ 1163.483140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.550902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.578085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.663260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.751284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.867235][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.980903][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.311156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.411967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.953108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.081304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.482021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.559807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.714476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.350671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1167.403053][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1167.596442][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1167.697117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.271789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.366739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.665911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.848318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.915456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.976244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.595600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.759972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.089015][T10806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1172.163954][T10806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1172.252167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.279304][T10806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1172.331037][T10806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1172.667764][T10813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1172.738806][T10813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1172.764488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.826743][T10813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1172.976481][T10813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1173.325671][T10809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1173.379298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.409918][T10809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1173.463985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.474408][T10809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1173.514927][T10809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1173.728015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.955890][T10806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.992334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.188884][T10806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.296126][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.296378][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.378059][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.378232][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.452339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.723818][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.790574][T10809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.909376][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.085680][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.089952][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.136666][T10809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.249423][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.249706][ T7811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.366087][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.371982][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.491410][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.491954][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.829739][T10806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.808044][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.876882][T10809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.179287][T10813] veth0_vlan: entered promiscuous mode [ 1177.199097][T10806] veth0_vlan: entered promiscuous mode [ 1177.256062][T10809] veth0_vlan: entered promiscuous mode [ 1177.279049][T10813] veth1_vlan: entered promiscuous mode [ 1177.297327][T10806] veth1_vlan: entered promiscuous mode [ 1177.334832][T10809] veth1_vlan: entered promiscuous mode [ 1177.537793][T10813] veth0_macvtap: entered promiscuous mode [ 1177.541349][T10806] veth0_macvtap: entered promiscuous mode [ 1177.598288][T10806] veth1_macvtap: entered promiscuous mode [ 1177.601502][T10813] veth1_macvtap: entered promiscuous mode [ 1177.614263][T10809] veth0_macvtap: entered promiscuous mode [ 1177.659577][T10809] veth1_macvtap: entered promiscuous mode [ 1177.741160][T10806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.745527][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.807027][T10809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.810524][T10806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.818619][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.876809][T10809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.896610][ T1285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.898444][ T1285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.898773][ T1285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.899086][ T1285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.900360][ T1285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.900409][ T1285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.900450][ T1285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.900490][ T1285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.977585][ T6045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.986864][ T6045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.998079][ T6045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.060420][ T6045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.831165][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.831188][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.966442][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.966467][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.104154][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.104178][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.232200][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.232223][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.364026][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.364048][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.459838][ T9391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.459861][ T9391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.939331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.614217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.937413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.088346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.191968][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 1181.191990][ T38] audit: type=1800 audit(1758983290.290:191): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.854" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1181.743366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.879742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1182.397358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1184.292832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1184.502547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1184.535163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1185.367632][ C1] vkms_vblank_simulate: vblank timer overrun [ 1185.388369][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.388583][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.706419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1185.928710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1186.245481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.407125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.255506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.890905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.267376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.497780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.082970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.431436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.444028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.646830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.209319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.298300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.553741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.226354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.270389][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.462006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.989889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.589280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.644199][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.856042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.881244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.100434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.732778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.055480][T11097] Mount JFS Failure: -22 [ 1200.055536][T11097] jfs_mount failed w/return code = -22 [ 1200.134969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.907752][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.437248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.520771][T11111] comedi comedi0: Minor 3 could not be opened [ 1202.152527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.302296][T11114] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1202.494959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.896004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.093030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.620690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.025540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.560626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.607564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.352997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.619328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.682257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.033887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.168142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.608174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.043792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.081078][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.565182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.811583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.209382][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.535033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.102917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.514827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.846712][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.460565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.503534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.972440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.958821][ T38] audit: type=1326 audit(1758983320.630:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1211.958897][ T38] audit: type=1326 audit(1758983320.630:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1211.958945][ T38] audit: type=1326 audit(1758983320.630:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1211.958994][ T38] audit: type=1326 audit(1758983320.630:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1211.959042][ T38] audit: type=1326 audit(1758983320.630:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1211.959089][ T38] audit: type=1326 audit(1758983320.630:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1211.959144][ T38] audit: type=1326 audit(1758983321.140:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11166 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac48aeec9 code=0x7ffc0000 [ 1212.104916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.452152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.825573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.871495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.138305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.494518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.891449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.202453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.223151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.659722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.795874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.019829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.075557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.174446][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.276392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.657694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.322423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.882507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.303597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.329579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.876970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.064841][T11211] syz.1.891: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1219.068018][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.1.891 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1219.068046][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1219.068065][T11211] Call Trace: [ 1219.068075][T11211] [ 1219.068085][T11211] dump_stack_lvl+0x189/0x250 [ 1219.068138][T11211] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.068174][T11211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.068229][T11211] warn_alloc+0x22e/0x3b0 [ 1219.068262][T11211] ? __pfx_warn_alloc+0x10/0x10 [ 1219.068290][T11211] ? __kasan_kmalloc+0x93/0xb0 [ 1219.068317][T11211] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 1219.068347][T11211] ? xskq_create+0x56/0x170 [ 1219.068379][T11211] ? xsk_init_queue+0xb0/0x110 [ 1219.068409][T11211] ? xsk_setsockopt+0x4dc/0x8d0 [ 1219.068438][T11211] ? do_sock_setsockopt+0x179/0x1b0 [ 1219.068458][T11211] ? __x64_sys_setsockopt+0x145/0x1b0 [ 1219.068479][T11211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.068510][T11211] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1219.068580][T11211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1219.068623][T11211] ? __kasan_kmalloc+0x93/0xb0 [ 1219.068655][T11211] vmalloc_user_noprof+0xad/0xf0 [ 1219.068737][T11211] ? xskq_create+0xbf/0x170 [ 1219.068771][T11211] xskq_create+0xbf/0x170 [ 1219.068810][T11211] xsk_init_queue+0xb0/0x110 [ 1219.068847][T11211] xsk_setsockopt+0x4dc/0x8d0 [ 1219.068883][T11211] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1219.068931][T11211] ? __fget_files+0x2a/0x420 [ 1219.068963][T11211] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1219.068985][T11211] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1219.069019][T11211] do_sock_setsockopt+0x179/0x1b0 [ 1219.069047][T11211] __x64_sys_setsockopt+0x145/0x1b0 [ 1219.069076][T11211] do_syscall_64+0xfa/0x3b0 [ 1219.069100][T11211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.069121][T11211] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1219.069143][T11211] ? clear_bhb_loop+0x60/0xb0 [ 1219.069170][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.069199][T11211] RIP: 0033:0x7f58dac2eec9 [ 1219.069225][T11211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.069245][T11211] RSP: 002b:00007f58d8e6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1219.069269][T11211] RAX: ffffffffffffffda RBX: 00007f58dae86090 RCX: 00007f58dac2eec9 [ 1219.069287][T11211] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1219.069300][T11211] RBP: 00007f58dacb1f91 R08: 0000000000000004 R09: 0000000000000000 [ 1219.069315][T11211] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.069329][T11211] R13: 00007f58dae86128 R14: 00007f58dae86090 R15: 00007ffe2ce862e8 [ 1219.069368][T11211] [ 1219.069408][T11211] Mem-Info: [ 1219.069555][T11211] active_anon:6678 inactive_anon:29446 isolated_anon:0 [ 1219.069555][T11211] active_file:18111 inactive_file:37408 isolated_file:0 [ 1219.069555][T11211] unevictable:1381 dirty:184 writeback:0 [ 1219.069555][T11211] slab_reclaimable:12875 slab_unreclaimable:108380 [ 1219.069555][T11211] mapped:32424 shmem:31053 pagetables:1704 [ 1219.069555][T11211] sec_pagetables:0 bounce:0 [ 1219.069555][T11211] kernel_misc_reclaimable:0 [ 1219.069555][T11211] free:1279293 free_pcp:5334 free_cma:0 [ 1219.069753][T11211] Node 0 active_anon:26712kB inactive_anon:117784kB active_file:72240kB inactive_file:149632kB unevictable:3988kB isolated(anon):0kB isolated(file):0kB mapped:129696kB dirty:732kB writeback:0kB shmem:122676kB kernel_stack:13864kB pagetables:6688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1219.069920][T11211] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:80kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1219.070093][T11211] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.070280][T11211] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 1219.070513][T11211] Node 0 DMA32 free:1198196kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26708kB inactive_anon:117744kB active_file:71220kB inactive_file:149564kB unevictable:3988kB writepending:732kB present:3129332kB managed:2572276kB mlocked:0kB bounce:0kB free_pcp:21336kB local_pcp:4396kB free_cma:0kB [ 1219.070721][T11211] lowmem_reserve[]: 0 0 1 1 1 [ 1219.070926][T11211] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1020kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.071051][T11211] lowmem_reserve[]: 0 0 0 0 0 [ 1219.071187][T11211] Node 1 Normal free:3903616kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.071317][T11211] lowmem_reserve[]: 0 0 0 0 0 [ 1219.071461][T11211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1219.074473][T11211] Node 0 DMA32: 339*4kB (UM) 245*8kB (UE) 958*16kB (UE) 922*32kB (UME) 304*64kB (UE) 340*128kB (U) 36*256kB (UM) 25*512kB (UM) 24*1024kB (UME) 8*2048kB (UM) 250*4096kB (ME) = 1198100kB [ 1219.075356][T11211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1219.076105][T11211] Node 1 Normal: 206*4kB (UME) 53*8kB (UME) 41*16kB (UME) 215*32kB (UME) 105*64kB (UME) 24*128kB (UME) 10*256kB (UM) 9*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3903632kB [ 1219.076902][T11211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.076984][T11211] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1219.077053][T11211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.077113][T11211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1219.077179][T11211] 86568 total pagecache pages [ 1219.077251][T11211] 0 pages in swap cache [ 1219.077261][T11211] Free swap = 124996kB [ 1219.077314][T11211] Total swap = 124996kB [ 1219.077388][T11211] 2097051 pages RAM [ 1219.077397][T11211] 0 pages HighMem/MovableOnly [ 1219.077459][T11211] 422084 pages reserved [ 1219.077468][T11211] 0 pages cma reserved [ 1221.613888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.856618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.891259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.069865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.199147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.423917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.770579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.114461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.071244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.489199][T10339] Bluetooth: hci6: command 0x0405 tx timeout [ 1224.913652][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.320414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.364921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.389584][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.948885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.272455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.522281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.618176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.736857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.761939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.823718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1227.271056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1227.706590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1227.877749][ T38] audit: type=1326 audit(1758983337.360:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11246 comm="syz.1.900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58dac2eec9 code=0x0 [ 1228.850871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1229.368367][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.091701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.724352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.863447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.272563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.624224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.130256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.155201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.550370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.582480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.844851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.129566][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.437732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.390540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.723627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.982187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.005290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.234637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.633609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.156853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.731765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.522841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.548969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.700069][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.993646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.437417][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.088838][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.409934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.802522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.835333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.104276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.624612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.582217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.096633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.138837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.637573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1246.177512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.199178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.365769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.326759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.948558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.163240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.257667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.463751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.492566][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.492649][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.645231][ C1] vkms_vblank_simulate: vblank timer overrun [ 1250.357996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.232022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.128059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.238530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1254.390049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1254.785254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.489548][T11426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1255.740998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.903864][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.010809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.957960][T11417] syz.4.930 (11417): drop_caches: 2 [ 1257.190293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.355048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.453793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.607464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.910821][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.788396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.574238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.162101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.254531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.896334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.918079][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1262.043620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.157525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.344330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.522087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.603910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1263.184081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1263.599398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1263.731220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1263.953402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.219273][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.243634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.992223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.062156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.478980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.661673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.399905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.822377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.344261][ T9759] Bluetooth: hci5: command 0x0406 tx timeout [ 1267.344548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.017897][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1271.078265][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.097644][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1271.150161][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1271.236355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.260910][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1271.282160][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1271.807417][T11520] lo speed is unknown, defaulting to 1000 [ 1271.952028][T10339] Bluetooth: hci6: command 0x0405 tx timeout [ 1272.096535][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.359322][T11534] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1272.896684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.114400][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.392729][ T9759] Bluetooth: hci1: command tx timeout [ 1275.123112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.471781][ T9759] Bluetooth: hci1: command tx timeout [ 1275.550156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.479309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.636261][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.491435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.525687][T11520] chnl_net:caif_netlink_parms(): no params data found [ 1277.671342][T11563] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1277.685574][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.092435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.292294][ T9759] Bluetooth: hci1: command tx timeout [ 1278.667741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.147294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.772190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.813406][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.835160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.492153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.578070][T10339] Bluetooth: hci1: command tx timeout [ 1282.026094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.413585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.435917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.073595][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.076055][ T9759] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1283.280081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.803021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.980824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.215588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.239625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.269756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.849682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.102405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.339101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.368837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.085179][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.364099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.437656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.293034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.419955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.945233][T11520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.945384][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.945637][T11520] bridge_slave_0: entered allmulticast mode [ 1287.952360][T11520] bridge_slave_0: entered promiscuous mode [ 1287.996565][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.996718][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.996981][T11520] bridge_slave_1: entered allmulticast mode [ 1287.999904][T11520] bridge_slave_1: entered promiscuous mode [ 1289.179162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.441509][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1289.466483][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1289.467970][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1289.493717][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1289.495197][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1290.044061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.196754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.316316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.510233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.595412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.889410][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1290.893455][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1290.895061][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1291.031234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.185593][T11520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.199086][T11634] infiniband syz2: set active [ 1291.199113][T11634] infiniband syz2: added vxcan1 [ 1291.203173][T11634] syz2: rxe_create_cq: returned err = -12 [ 1291.203264][T11634] infiniband syz2: Couldn't create ib_mad CQ [ 1291.203530][T11634] infiniband syz2: Couldn't open port 1 [ 1291.263386][T11634] RDS/IB: syz2: added [ 1291.268813][T11634] smc: adding ib device syz2 with port count 1 [ 1291.269068][T11634] smc: ib device syz2 port 1 has pnetid [ 1291.408117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.490890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.530953][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.544539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.558108][ T5840] Bluetooth: hci0: command tx timeout [ 1291.609017][T11226] vxcan1 speed is unknown, defaulting to 1000 [ 1291.616268][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1291.651338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.720238][T11520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.741880][ T9533] vxcan1 speed is unknown, defaulting to 1000 [ 1292.059656][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1292.397399][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1292.415403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.011552][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.746689][ T9759] Bluetooth: hci0: command tx timeout [ 1294.030988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.079580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.226436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.304978][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1294.644128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.102330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.142210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.656555][T11656] Malformed UNC in devname [ 1295.656555][T11656] [ 1295.656852][T11656] CIFS: VFS: Malformed UNC in devname [ 1295.719062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.988776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.080623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.124254][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.135414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.451481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.510903][ T5840] Bluetooth: hci0: command tx timeout [ 1296.522238][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1296.672629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.698905][T11520] team0: Port device team_slave_0 added [ 1296.721450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.907576][T11634] vxcan1 speed is unknown, defaulting to 1000 [ 1297.414538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.544334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.689649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.936200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.956469][T11520] team0: Port device team_slave_1 added [ 1298.280041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.341756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.635988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.700068][ T5840] Bluetooth: hci0: command tx timeout [ 1298.700203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.845635][T11626] lo speed is unknown, defaulting to 1000 [ 1299.679097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.701265][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.881926][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1300.061864][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 1300.091343][ T44] usb 1-1: config index 0 descriptor too short (expected 61732, got 36) [ 1300.091375][ T44] usb 1-1: config 15 has too many interfaces: 130, using maximum allowed: 32 [ 1300.091396][ T44] usb 1-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.091416][ T44] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 130 [ 1300.096207][ T44] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1300.096247][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.096271][ T44] usb 1-1: Product: syz [ 1300.096289][ T44] usb 1-1: Manufacturer: syz [ 1300.096306][ T44] usb 1-1: SerialNumber: syz [ 1300.202430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.372979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.824993][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.915401][T11626] vxcan1 speed is unknown, defaulting to 1000 [ 1301.146504][T11520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.146524][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.146693][T11520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.474205][ T7069] usb 1-1: USB disconnect, device number 2 [ 1301.550862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.630687][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.990384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.077097][T11520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.077114][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.077144][T11520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.184943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.399110][T11699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1302.401320][T11699] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1302.477761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.706223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.154533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.708239][T11520] hsr_slave_0: entered promiscuous mode [ 1303.724951][T11520] hsr_slave_1: entered promiscuous mode [ 1303.738198][T11520] debugfs: 'hsr0' already exists in 'hsr' [ 1303.738239][T11520] Cannot create hsr debugfs directory [ 1305.709058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.312236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.586992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.754691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.796117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.738667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.845362][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.876000][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.345682][ T37] bridge_slave_1: left allmulticast mode [ 1310.345717][ T37] bridge_slave_1: left promiscuous mode [ 1310.346035][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.545086][ T37] bridge_slave_0: left allmulticast mode [ 1310.545125][ T37] bridge_slave_0: left promiscuous mode [ 1310.545427][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.857392][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.857501][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.672710][T11755] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1312.217097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.717733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.015595][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.186265][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.645033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.822422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.218796][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.333720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.656440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.673548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.701528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.963289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.332041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.829848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.029961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.052153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.888696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.285039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.556959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.603410][ T8024] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1318.672778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.795172][ T8024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.795237][ T8024] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1318.795287][ T8024] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1318.795312][ T8024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.853827][ T8024] usb 3-1: config 0 descriptor?? [ 1318.889617][ T8024] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1319.572640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.888289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.928005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1320.522449][T11819] autofs: Unknown parameter 'contention_end' [ 1320.522478][ T8024] Process accounting resumed [ 1320.526583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1320.711682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.061929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.091203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.222214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.378032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1322.576455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1324.335354][ T44] usb 3-1: USB disconnect, device number 2 [ 1324.774224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1325.229996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1325.745964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1325.971747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.350785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.624913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.450470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.532864][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.592563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.683970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.920554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.227168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.204068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.449751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.641949][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1330.642211][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1330.779291][T11852] ceph: No mds server is up or the cluster is laggy [ 1331.140783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.171431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.506807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.191396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.932588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.250829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.449511][T11880] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1008'. [ 1333.455837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.636529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.817080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.339329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.463999][ T9759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1334.472298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.496444][ T9759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1334.509604][ T9759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1334.511239][ T9759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1334.516263][ T9759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1334.737851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.212711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.250999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1336.575046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1336.929817][ T9759] Bluetooth: hci3: command tx timeout [ 1336.989012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.066298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.284640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.639128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.827441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.112412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.263162][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.535227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.656521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.682174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.085730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.461366][ T9759] Bluetooth: hci3: command tx timeout [ 1339.483193][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.555585][ T37] bond0 (unregistering): Released all slaves [ 1340.846968][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.021923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.383932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.801701][ T9759] Bluetooth: hci3: command tx timeout [ 1341.973802][T11879] lo speed is unknown, defaulting to 1000 [ 1341.976715][T11879] vxcan1 speed is unknown, defaulting to 1000 [ 1342.428642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.946775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.964985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.250554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.452003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.892489][ T9759] Bluetooth: hci3: command tx timeout [ 1343.892615][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.756921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.815224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.917817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.260961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.285824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.866152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.044790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.142142][T11626] chnl_net:caif_netlink_parms(): no params data found [ 1347.277897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.536713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.963747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1348.496740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1348.759470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.007471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.257756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.285214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.504699][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.504835][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.506135][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.527893][T11966] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1349.556947][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.560005][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.563215][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.566326][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.569355][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.572499][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.575589][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.578634][T11966] wlan0 speed is unknown, defaulting to 1000 [ 1349.733673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.876927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.897301][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1349.920386][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1350.542089][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1350.575124][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1350.580859][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1350.759880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.184474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1352.123507][T11987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1352.262185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1352.675793][ T9759] Bluetooth: hci1: command tx timeout [ 1352.763560][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.300890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.483847][T11998] input: syz0 as /devices/virtual/input/input8 [ 1353.514580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.636891][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.290042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.402528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.799646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.802530][ T9759] Bluetooth: hci1: command tx timeout [ 1354.908970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.931933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.865822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.230591][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.722693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.836013][ T9759] Bluetooth: hci1: command tx timeout [ 1356.979564][T12015] futex_wake_op: syz.2.1032 tries to shift op by 36; fix this program [ 1357.023253][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.776107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.809085][T11969] lo speed is unknown, defaulting to 1000 [ 1358.441938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.703985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.705942][ T9759] Bluetooth: hci1: command tx timeout [ 1359.895093][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.897596][ T37] hsr_slave_0: left promiscuous mode [ 1360.335290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.352556][ T37] hsr_slave_1: left promiscuous mode [ 1360.353511][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.353543][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.769905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.160954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.261457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.412049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.900589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.111722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.588054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.682951][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.682987][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.020455][ T37] veth1_macvtap: left promiscuous mode [ 1365.020586][ T37] veth0_macvtap: left promiscuous mode [ 1365.020892][ T37] veth1_vlan: left promiscuous mode [ 1365.021108][ T37] veth0_vlan: left promiscuous mode [ 1365.314494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.669843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.400320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.498662][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.423019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.469453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.532003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.512623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.688026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.382583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.630772][T12075] kernel profiling enabled (shift: 7) [ 1370.821944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.281263][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.281341][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.527463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.729478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.856448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.219448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.944690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.166316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.285659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.362600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.535711][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1049'. [ 1376.579409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.387557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.747480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.043108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.136139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.270999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.097826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.463920][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.882218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.552521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.005659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.637554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.754826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.766413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.981602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.146692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.806105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.120763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.257388][T12137] overlayfs: failed to resolve './file1': -2 [ 1385.461518][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1385.683006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.915580][T12147] 9pnet_virtio: no channels available for device syz [ 1385.941765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.056419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.110932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.340474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.402305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.447773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.779002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.152439][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1388.291211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.025677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.479506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.518652][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.747660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.564990][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.806484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.098246][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.583035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.817972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.191327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.293173][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.083572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.816571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.937395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.404412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.846297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.935554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.193331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.214481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.680471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.396333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.978215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.063462][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1398.396050][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1398.398969][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1398.401016][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1398.426565][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1399.420669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.692004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.203726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.701820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.801818][ T5840] Bluetooth: hci0: command tx timeout [ 1401.131449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.315669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.592605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.970634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.288886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.484970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.839666][ T5840] Bluetooth: hci0: command tx timeout [ 1403.033509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.678232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.318711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.055094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.056139][ T5840] Bluetooth: hci0: command tx timeout [ 1405.265681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.846822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.048160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.474895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.041862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.078707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.541359][ T5840] Bluetooth: hci0: command tx timeout [ 1408.247761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.469544][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.651800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.442336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.781205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.889374][ C1] vkms_vblank_simulate: vblank timer overrun [ 1411.066041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1411.229719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1411.773376][T12257] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1411.773398][T12257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1411.993132][T12257] vhci_hcd vhci_hcd.0: Device attached [ 1412.064631][T12257] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.065729][T12257] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.066906][T12257] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.067883][T12257] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.069632][T12261] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(7) [ 1412.069657][T12261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1412.076773][T12261] vhci_hcd vhci_hcd.0: Device attached [ 1412.121160][T12261] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.141289][T12261] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.173629][T12257] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(19) [ 1412.173657][T12257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1412.173757][T12257] vhci_hcd vhci_hcd.0: Device attached [ 1412.177034][T12269] vhci_hcd: connection closed [ 1412.207003][T12258] vhci_hcd: connection closed [ 1412.209483][T12263] vhci_hcd: connection closed [ 1412.234691][ T7811] vhci_hcd: stop threads [ 1412.237234][ T7811] vhci_hcd: release socket [ 1412.300723][ T7811] vhci_hcd: disconnect device [ 1412.300903][ T7811] vhci_hcd: stop threads [ 1412.300917][ T7811] vhci_hcd: release socket [ 1412.300989][ T7811] vhci_hcd: disconnect device [ 1412.301179][ T7811] vhci_hcd: stop threads [ 1412.301187][ T7811] vhci_hcd: release socket [ 1412.301261][ T7811] vhci_hcd: disconnect device [ 1412.361991][ T8021] vhci_hcd: vhci_device speed not set [ 1412.433363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.533973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.549169][ T9759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1412.564666][ T9759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1412.566148][ T9759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1412.567791][ T9759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1412.570517][ T9759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1413.585302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.361511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.671828][ T9759] Bluetooth: hci4: command tx timeout [ 1415.095440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.327249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.396098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.689678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.755460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.155843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.756229][ T9759] Bluetooth: hci4: command tx timeout [ 1417.799840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.932066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.677172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.832084][ T9759] Bluetooth: hci4: command tx timeout [ 1419.150626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.221411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.971232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.268159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.838895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.948054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.287695][ T9759] Bluetooth: hci4: command tx timeout [ 1421.579134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.979125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.789839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.929122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.240171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.715343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.743494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.291370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.352260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.434551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.979211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.018868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.316460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.345405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.438961][T12345] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1426.662666][ T9533] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1426.971826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.249421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.610711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.666987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.681331][ T9533] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1427.687785][ T9533] usb 10-1: not running at top speed; connect to a high speed hub [ 1427.689749][ T9533] usb 10-1: config 128 interface 0 has no altsetting 0 [ 1427.778484][ T9533] usb 10-1: New USB device found, idVendor=15a4, idProduct=901b, bcdDevice=7a.d1 [ 1427.778519][ T9533] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.778541][ T9533] usb 10-1: Product: syz [ 1427.778557][ T9533] usb 10-1: Manufacturer: syz [ 1427.778573][ T9533] usb 10-1: SerialNumber: syz [ 1427.868682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.144548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.369339][ T9759] Bluetooth: hci0: command 0x0401 tx timeout [ 1428.439892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.461517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.848068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.887384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.352801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.747785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.561718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.680036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.729428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1432.506674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1432.649584][ T9533] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1432.729585][ T9533] dvb_usb_af9015 10-1:128.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1432.844055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1432.912461][T11969] vxcan1 speed is unknown, defaulting to 1000 [ 1433.010676][T11226] lo speed is unknown, defaulting to 1000 [ 1433.010727][T11226] syz0: Port: 1 Link DOWN [ 1433.162358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1433.172001][ T9533] usb 10-1: USB disconnect, device number 2 [ 1433.462600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.967526][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.451025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.554289][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1435.554899][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.233038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.515108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.703159][T12398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1436.803454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1437.651708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1437.787076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.265908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.357002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.439168][T11969] wlan0 speed is unknown, defaulting to 1000 [ 1438.474257][T12272] vxcan1 speed is unknown, defaulting to 1000 [ 1438.703616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.639244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.994480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.316473][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.366958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.955854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.995316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.303455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.861064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.304465][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.342291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.750612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.350013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.976256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.158030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.868932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.369462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.906213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.547152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.561948][ T6518] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1446.736807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.765404][ T6518] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x41, changing to 0x1 [ 1446.765439][ T6518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1446.769396][ T6518] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1446.769428][ T6518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.769450][ T6518] usb 3-1: Product: syz [ 1446.769466][ T6518] usb 3-1: Manufacturer: syz [ 1446.769482][ T6518] usb 3-1: SerialNumber: syz [ 1446.802170][ T6518] usb 3-1: config 0 descriptor?? [ 1446.864038][ T6518] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1447.033985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.079010][T12462] program syz.2.1126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.120925][ T9533] usb 3-1: USB disconnect, device number 3 [ 1447.207363][T12272] wlan0 speed is unknown, defaulting to 1000 [ 1447.207380][T12198] vxcan1 speed is unknown, defaulting to 1000 [ 1447.391007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1447.778896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.371971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.724486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.119577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.446556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.863844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.187537][ T7069] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1450.212073][ T37] IPVS: stop unused estimator thread 0... [ 1450.363196][ T7069] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1450.363229][ T7069] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1450.363250][ T7069] usb 1-1: Product: syz [ 1450.363265][ T7069] usb 1-1: Manufacturer: syz [ 1450.363280][ T7069] usb 1-1: SerialNumber: syz [ 1450.599751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.174774][ T7069] usb 1-1: config 0 descriptor?? [ 1451.860670][ T7069] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1451.861464][ T7069] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1453.081827][ T7069] usb 1-1: USB disconnect, device number 3 [ 1454.621178][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1454.647445][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1454.648837][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1454.650447][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1454.651219][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.081651][T12519] input: syz0 as /devices/virtual/input/input9 [ 1456.911932][ T9759] Bluetooth: hci3: command tx timeout [ 1458.168872][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.530655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.606814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.224553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.441642][ T9759] Bluetooth: hci3: command tx timeout [ 1460.057914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.391212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.124650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.386260][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.441812][T12198] wlan0 speed is unknown, defaulting to 1000 [ 1461.471703][ T5840] Bluetooth: hci3: command tx timeout [ 1461.909510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.220855][T12558] fuse: Unknown parameter 'group_id00000000000000000000' [ 1463.151885][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 1465.409629][ T9391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.721616][T12568] usb usb8: usbfs: process 12568 (syz.9.1145) did not claim interface 7 before use [ 1466.725329][ T9759] Bluetooth: hci3: command tx timeout [ 1467.290619][T12272] chnl_net:caif_netlink_parms(): no params data found [ 1469.050788][ T9391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.991709][T12507] vxcan1 speed is unknown, defaulting to 1000 [ 1474.683078][ T9391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.075252][T10339] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1476.094157][T10339] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1476.121838][T10339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1476.126756][T10339] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1476.127691][T10339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1477.058520][T10339] Bluetooth: hci1: command 0x0406 tx timeout [ 1480.479007][T12640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1482.029119][ T9391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.872265][T12507] wlan0 speed is unknown, defaulting to 1000 [ 1482.875065][T12619] vxcan1 speed is unknown, defaulting to 1000 [ 1483.404928][ T9759] Bluetooth: hci7: command tx timeout [ 1483.551440][T12659] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 1485.522450][ T9759] Bluetooth: hci7: command tx timeout [ 1487.058077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.316137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.323316][ T9759] Bluetooth: hci7: command tx timeout [ 1488.441353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.546526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.252319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1490.341806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1490.443482][T12559] Bluetooth: hci7: command tx timeout [ 1490.492769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1490.676786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.326998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.395820][ T9759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1492.422028][ T9759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1492.448181][ T9759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1492.469508][ T9759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1492.489165][ T9759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1493.109293][T12619] wlan0 speed is unknown, defaulting to 1000 [ 1494.682600][T12559] Bluetooth: hci4: command tx timeout [ 1495.159151][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.159236][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.077037][T12729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1496.752037][T12559] Bluetooth: hci4: command tx timeout [ 1496.933544][ T9391] bridge_slave_1: left allmulticast mode [ 1496.933581][ T9391] bridge_slave_1: left promiscuous mode [ 1496.933907][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.066577][ T9391] bridge_slave_0: left allmulticast mode [ 1497.066604][ T9391] bridge_slave_0: left promiscuous mode [ 1497.066810][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.226837][ T9391] bridge_slave_1: left allmulticast mode [ 1497.226876][ T9391] bridge_slave_1: left promiscuous mode [ 1497.227143][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.403220][ T9391] bridge_slave_0: left allmulticast mode [ 1497.403256][ T9391] bridge_slave_0: left promiscuous mode [ 1497.403517][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.689897][T12559] Bluetooth: hci4: command tx timeout [ 1500.815671][ T9391] bond0 (unregistering): Released all slaves [ 1501.452521][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.592442][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.676731][ T9391] bond0 (unregistering): Released all slaves [ 1501.761590][T12559] Bluetooth: hci4: command tx timeout [ 1506.731610][ T38] audit: type=1326 audit(1758983616.130:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12805 comm="syz.0.1182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e8b37eec9 code=0x0 [ 1511.870631][ T9759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1511.899555][ T9759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1511.901163][ T9759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1511.958965][ T9759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1511.962828][ T9759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1514.051607][T12559] Bluetooth: hci2: command tx timeout [ 1515.712613][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.985571][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.403947][T12559] Bluetooth: hci2: command tx timeout [ 1517.009812][ T9391] bond0 (unregistering): Released all slaves [ 1517.406483][T12712] vxcan1 speed is unknown, defaulting to 1000 [ 1519.680846][T12559] Bluetooth: hci2: command tx timeout [ 1521.713638][ T9759] Bluetooth: hci2: command tx timeout [ 1522.951062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.291762][ T9759] Bluetooth: hci0: command 0x0401 tx timeout [ 1523.343446][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.555816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.717128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.842634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.950048][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 1523.951280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.346092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.696750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.844640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.033599][T12888] bridge_slave_1: left allmulticast mode [ 1525.033651][T12888] bridge_slave_1: left promiscuous mode [ 1525.059042][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.062327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.178481][T12888] bridge_slave_0: left allmulticast mode [ 1525.178516][T12888] bridge_slave_0: left promiscuous mode [ 1525.178835][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.410696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.488078][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.746639][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.102646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.399971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.421118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.778167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.021844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.152418][T12712] wlan0 speed is unknown, defaulting to 1000 [ 1527.168567][T12826] vxcan1 speed is unknown, defaulting to 1000 [ 1527.343918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.618705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.957792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.575596][ T9534] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1530.546667][ T9534] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.546696][ T9534] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1530.548305][ T9534] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1530.548333][ T9534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1530.548355][ T9534] usb 3-1: SerialNumber: syz [ 1531.048446][T12826] wlan0 speed is unknown, defaulting to 1000 [ 1532.097120][T12944] ubi: mtd0 is already attached to ubi31 [ 1532.839153][ T9534] usb 3-1: invalid UAC_HEADER (v1) [ 1535.915319][ T9534] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1535.933861][ T9534] usb 3-1: USB disconnect, device number 4 [ 1536.078293][ T9759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1536.092970][ T9759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1536.096875][ T9759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1536.098928][ T9759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1536.100494][ T9759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1538.337013][T12945] udevd[12945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1539.970906][ T9759] Bluetooth: hci0: command tx timeout [ 1542.640244][ T9759] Bluetooth: hci0: command tx timeout [ 1544.066029][ T38] audit: type=1326 audit(1758983653.590:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.066501][ T38] audit: type=1326 audit(1758983653.600:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.073045][ T38] audit: type=1326 audit(1758983653.610:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.075946][ T38] audit: type=1326 audit(1758983653.610:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.076522][ T38] audit: type=1326 audit(1758983653.610:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.082887][ T38] audit: type=1326 audit(1758983653.620:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.083414][ T38] audit: type=1326 audit(1758983653.620:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.083851][ T38] audit: type=1326 audit(1758983653.620:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.084273][ T38] audit: type=1326 audit(1758983653.620:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.084587][ T38] audit: type=1326 audit(1758983653.620:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12997 comm="syz.2.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf2d81eec9 code=0x7ffc0000 [ 1544.621699][ T9391] hsr_slave_0: left promiscuous mode [ 1544.671660][ T9759] Bluetooth: hci0: command tx timeout [ 1544.680172][ T9391] hsr_slave_1: left promiscuous mode [ 1544.681193][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.694118][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.781861][T13008] trusted_key: encrypted_key: keylen parameter is missing [ 1546.085552][ T9391] hsr_slave_0: left promiscuous mode [ 1546.123996][ T9391] hsr_slave_1: left promiscuous mode [ 1546.138177][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.138225][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.205199][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.205237][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.565412][ T9391] veth1_macvtap: left promiscuous mode [ 1546.565540][ T9391] veth0_macvtap: left promiscuous mode [ 1546.565836][ T9391] veth1_vlan: left promiscuous mode [ 1546.566082][ T9391] veth0_vlan: left promiscuous mode [ 1546.751834][ T9759] Bluetooth: hci0: command tx timeout [ 1548.904555][T13037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1553.501594][T13057] binder: 13054:13057 ioctl 4018620d 0 returned -22 [ 1556.645091][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.645172][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.924970][T13078] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1225'. [ 1557.733883][ T6518] IPVS: starting estimator thread 0... [ 1557.821890][T13082] IPVS: using max 6 ests per chain, 14400 per kthread [ 1558.503889][T12559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1558.719714][T12559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1558.734928][T12559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1558.736280][T12559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1558.755555][T12559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1561.012520][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1561.151692][ T9759] Bluetooth: hci1: command tx timeout [ 1561.192593][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1563.242067][ T9759] Bluetooth: hci1: command tx timeout [ 1564.142705][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1564.423554][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1565.331799][ T9759] Bluetooth: hci1: command tx timeout [ 1567.385401][T12957] vxcan1 speed is unknown, defaulting to 1000 [ 1567.391745][ T9759] Bluetooth: hci1: command tx timeout [ 1567.954709][T12826] chnl_net:caif_netlink_parms(): no params data found [ 1568.329450][T12957] wlan0 speed is unknown, defaulting to 1000 [ 1568.331086][T13083] vxcan1 speed is unknown, defaulting to 1000 [ 1569.043910][T13083] wlan0 speed is unknown, defaulting to 1000 [ 1569.046079][T12826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.046252][T12826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.046501][T12826] bridge_slave_0: entered allmulticast mode [ 1569.049641][T12826] bridge_slave_0: entered promiscuous mode [ 1569.125958][T12826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.126122][T12826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.126340][T12826] bridge_slave_1: entered allmulticast mode [ 1569.129471][T12826] bridge_slave_1: entered promiscuous mode [ 1569.516522][T12826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.549102][T12826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.927805][T12826] team0: Port device team_slave_0 added [ 1569.956894][T12826] team0: Port device team_slave_1 added [ 1570.279099][T12826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.279120][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.279151][T12826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.355641][T12826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.355660][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.355690][T12826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.854124][T12826] hsr_slave_0: entered promiscuous mode [ 1570.855683][T12826] hsr_slave_1: entered promiscuous mode [ 1570.857264][T12957] chnl_net:caif_netlink_parms(): no params data found [ 1571.305330][T13083] chnl_net:caif_netlink_parms(): no params data found [ 1571.969911][T12559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1571.997070][T12559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1571.999319][T12559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1572.011471][T12559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1572.013669][T12559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1572.405641][T12957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.405803][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.406063][T12957] bridge_slave_0: entered allmulticast mode [ 1572.409240][T12957] bridge_slave_0: entered promiscuous mode [ 1572.688433][ T9391] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.780141][T12957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.780296][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.780527][T12957] bridge_slave_1: entered allmulticast mode [ 1572.805530][T12957] bridge_slave_1: entered promiscuous mode [ 1573.453576][ T9391] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.513419][T12957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.693048][T13143] vxcan1 speed is unknown, defaulting to 1000 [ 1573.696968][T12957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.717055][T13083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.717221][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.717491][T13083] bridge_slave_0: entered allmulticast mode [ 1573.742924][T13083] bridge_slave_0: entered promiscuous mode [ 1574.121739][ T9759] Bluetooth: hci2: command tx timeout [ 1574.206320][ T9391] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.282306][T13083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.282490][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.282705][T13083] bridge_slave_1: entered allmulticast mode [ 1574.284715][T13083] bridge_slave_1: entered promiscuous mode [ 1574.415054][T13143] wlan0 speed is unknown, defaulting to 1000 [ 1574.559046][T12957] team0: Port device team_slave_0 added [ 1574.896384][ T9391] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.992138][T12957] team0: Port device team_slave_1 added [ 1575.079190][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.224005][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.475375][T12957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.475395][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.475423][T12957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.667048][T12957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.667067][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.667096][T12957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.729375][T13083] team0: Port device team_slave_0 added [ 1575.814024][T13083] team0: Port device team_slave_1 added [ 1576.191642][ T9759] Bluetooth: hci2: command tx timeout [ 1576.436035][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.436054][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.436082][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.617316][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.617335][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.617364][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.652157][T12957] hsr_slave_0: entered promiscuous mode [ 1576.653868][T12957] hsr_slave_1: entered promiscuous mode [ 1576.654908][T12957] debugfs: 'hsr0' already exists in 'hsr' [ 1576.654939][T12957] Cannot create hsr debugfs directory [ 1577.010682][ T9391] bridge_slave_1: left allmulticast mode [ 1577.010717][ T9391] bridge_slave_1: left promiscuous mode [ 1577.010999][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.122922][ T9391] bridge_slave_0: left allmulticast mode [ 1577.122958][ T9391] bridge_slave_0: left promiscuous mode [ 1577.123255][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.780437][ T9391] bond0 (unregistering): Released all slaves [ 1578.276388][ T9759] Bluetooth: hci2: command tx timeout [ 1579.819015][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.902437][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.936657][ T9391] bond0 (unregistering): Released all slaves [ 1580.121065][ T9391] bond0 (unregistering): Released all slaves [ 1580.373711][ T9759] Bluetooth: hci2: command tx timeout [ 1580.891402][T13083] hsr_slave_0: entered promiscuous mode [ 1580.904992][T13083] hsr_slave_1: entered promiscuous mode [ 1580.905944][T13083] debugfs: 'hsr0' already exists in 'hsr' [ 1580.905970][T13083] Cannot create hsr debugfs directory [ 1582.265679][T13143] chnl_net:caif_netlink_parms(): no params data found [ 1584.302146][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.302301][T13143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.302555][T13143] bridge_slave_0: entered allmulticast mode [ 1584.307142][T13143] bridge_slave_0: entered promiscuous mode [ 1584.744277][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.744434][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.744717][T13143] bridge_slave_1: entered allmulticast mode [ 1584.763553][T13143] bridge_slave_1: entered promiscuous mode [ 1585.835142][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.840080][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.295995][T13143] team0: Port device team_slave_0 added [ 1586.300900][T13143] team0: Port device team_slave_1 added [ 1586.724197][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.724215][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.724247][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.901871][ T9391] hsr_slave_0: left promiscuous mode [ 1586.921870][ T9391] hsr_slave_1: left promiscuous mode [ 1586.922848][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.922879][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.952961][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.952995][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.095562][ T9391] veth1_macvtap: left promiscuous mode [ 1587.095691][ T9391] veth0_macvtap: left promiscuous mode [ 1587.095989][ T9391] veth1_vlan: left promiscuous mode [ 1587.097540][ T9391] veth0_vlan: left promiscuous mode [ 1590.152784][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1590.419206][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1591.925687][T12559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1591.941352][T12559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1591.943323][T12559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1591.944644][T12559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1591.946301][T12559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1593.911077][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.911097][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.911128][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.031891][T12559] Bluetooth: hci3: command tx timeout [ 1594.729255][T13143] hsr_slave_0: entered promiscuous mode [ 1594.730687][T13143] hsr_slave_1: entered promiscuous mode [ 1594.732273][T13143] debugfs: 'hsr0' already exists in 'hsr' [ 1594.732305][T13143] Cannot create hsr debugfs directory [ 1594.756834][T13295] vxcan1 speed is unknown, defaulting to 1000 [ 1595.461713][T13295] wlan0 speed is unknown, defaulting to 1000 [ 1596.111805][T12559] Bluetooth: hci3: command tx timeout [ 1596.481375][ T9391] IPVS: stop unused estimator thread 0... [ 1596.697942][T13083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1596.753758][T13083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1597.393024][T13083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1597.442937][ T9391] bridge_slave_1: left allmulticast mode [ 1597.442972][ T9391] bridge_slave_1: left promiscuous mode [ 1597.443225][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.508047][ T9391] bridge_slave_0: left allmulticast mode [ 1597.508073][ T9391] bridge_slave_0: left promiscuous mode [ 1597.508295][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.832501][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.942254][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.015814][ T9391] bond0 (unregistering): Released all slaves [ 1598.078626][T13083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1598.191797][T12559] Bluetooth: hci3: command tx timeout [ 1598.382725][T13295] chnl_net:caif_netlink_parms(): no params data found [ 1598.941902][ T9391] hsr_slave_0: left promiscuous mode [ 1598.983345][ T9391] hsr_slave_1: left promiscuous mode [ 1598.985248][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.021660][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.614376][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1599.792738][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1600.271774][T12559] Bluetooth: hci3: command tx timeout [ 1600.959810][T13295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.960033][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.960267][T13295] bridge_slave_0: entered allmulticast mode [ 1600.965133][T13295] bridge_slave_0: entered promiscuous mode [ 1600.973864][T13295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.974033][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.974276][T13295] bridge_slave_1: entered allmulticast mode [ 1600.977450][T13295] bridge_slave_1: entered promiscuous mode [ 1601.323381][T13295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.375016][T13295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.700796][T13295] team0: Port device team_slave_0 added [ 1601.729488][T13295] team0: Port device team_slave_1 added [ 1602.050767][T13143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1602.092314][T13295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.092334][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.092374][T13295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.097775][T13143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1602.181145][T13295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.181164][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.181190][T13295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.189858][T13143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1602.260276][T13143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1602.570279][T13295] hsr_slave_0: entered promiscuous mode [ 1602.577929][T13295] hsr_slave_1: entered promiscuous mode [ 1603.432708][T13083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.555443][T13083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.669492][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.669779][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.746279][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.746503][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.959297][ T9391] bridge_slave_1: left allmulticast mode [ 1603.959325][ T9391] bridge_slave_1: left promiscuous mode [ 1603.959507][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.035585][ T9391] bridge_slave_0: left allmulticast mode [ 1604.035621][ T9391] bridge_slave_0: left promiscuous mode [ 1604.035884][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.392384][ T9391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.502485][ T9391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.569006][ T9391] bond0 (unregistering): Released all slaves [ 1604.876497][T13143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.150752][T13143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.361918][ T9391] hsr_slave_0: left promiscuous mode [ 1605.401715][ T9391] hsr_slave_1: left promiscuous mode [ 1605.402560][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.443001][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.224113][ T9391] team0 (unregistering): Port device team_slave_1 removed [ 1606.382721][ T9391] team0 (unregistering): Port device team_slave_0 removed [ 1607.124661][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.127733][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.306284][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.306513][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.430970][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.040205][T13295] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1608.110684][T13295] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1608.248013][T13295] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1608.307312][T13295] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1608.515062][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.578649][T13083] veth0_vlan: entered promiscuous mode [ 1608.635347][T13083] veth1_vlan: entered promiscuous mode [ 1608.774509][T13143] veth0_vlan: entered promiscuous mode [ 1608.847627][T13143] veth1_vlan: entered promiscuous mode [ 1608.851283][T13083] veth0_macvtap: entered promiscuous mode [ 1608.876150][T13295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.888947][T13083] veth1_macvtap: entered promiscuous mode [ 1608.947912][T13295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.979458][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.001419][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.001714][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.040868][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.066071][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.066230][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.073249][T13143] veth0_macvtap: entered promiscuous mode [ 1609.113256][ T7751] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.133439][ T7751] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.134179][T13143] veth1_macvtap: entered promiscuous mode [ 1609.139370][ T7751] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.164263][ T7751] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.359882][T13143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.419866][T13143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.575248][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.580353][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.604273][ T7751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.604295][ T7751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.606751][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.643712][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.779625][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.780234][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.184373][ T7751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.184395][ T7751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.385510][T13342] orangefs_mount: mount request failed with -4 [ 1615.108796][ T9814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.108822][ T9814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.236505][T13295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1618.039200][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.039280][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1622.632062][T13295] veth0_vlan: entered promiscuous mode [ 1622.827694][T13295] veth1_vlan: entered promiscuous mode [ 1624.286958][T13423] overlayfs: overlapping lowerdir path [ 1624.300712][T13295] veth0_macvtap: entered promiscuous mode [ 1625.362223][T13295] veth1_macvtap: entered promiscuous mode [ 1625.996962][T13295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.034663][T13295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1627.903679][T13445] overlayfs: overlapping lowerdir path [ 1628.441248][T13441] ceph: No mds server is up or the cluster is laggy [ 1628.442854][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1628.443128][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1628.463408][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.547822][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.781582][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.789385][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.396933][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.396956][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.413171][ T9391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.413194][ T9391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.105904][T13533] random: crng reseeded on system resumption [ 1643.127989][T13541] QAT: Invalid ioctl 21531 [ 1643.607052][T13542] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1645.791706][T12559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1647.173239][T13568] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1268'. [ 1659.520983][T12559] =========[ 1659.520983][T12559] ================================================================== [ 1659.521009][T12559] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 1659.521043][T12559] Read of size 8 at addr ffff888028d46500 by task kworker/u9:0/12559 [ 1659.521063][T12559] [ 1659.521076][T12559] CPU: 1 UID: 0 PID: 12559 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1659.521103][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1659.521119][T12559] Workqueue: hci5 hci_rx_work [ 1659.521146][T12559] Call Trace: [ 1659.521156][T12559] [ 1659.521165][T12559] dump_stack_lvl+0x189/0x250 [ 1659.521197][T12559] ? __kasan_check_byte+0x12/0x40 [ 1659.521227][T12559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1659.521260][T12559] ? lock_release+0x4b/0x3e0 [ 1659.521293][T12559] ? __virt_addr_valid+0x4a5/0x5c0 [ 1659.521322][T12559] print_report+0xca/0x240 [ 1659.521351][T12559] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1659.521370][T12559] kasan_report+0x118/0x150 [ 1659.521399][T12559] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1659.521424][T12559] l2cap_connect_cfm+0x6e4/0x1040 [ 1659.521452][T12559] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1659.521475][T12559] ? mutex_lock_nested+0x154/0x1d0 [ 1659.521500][T12559] ? hci_connect_cfm+0x2c/0x140 [ 1659.521527][T12559] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1659.521547][T12559] hci_connect_cfm+0x95/0x140 [ 1659.521577][T12559] le_conn_complete_evt+0xfb8/0x1500 [ 1659.521614][T12559] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1659.521646][T12559] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1659.521680][T12559] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.521714][T12559] ? skb_pull_data+0xfb/0x200 [ 1659.521743][T12559] hci_le_conn_complete_evt+0x187/0x450 [ 1659.521778][T12559] hci_event_packet+0x78f/0x1200 [ 1659.521804][T12559] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1659.521836][T12559] ? __pfx_hci_event_packet+0x10/0x10 [ 1659.521861][T12559] ? __pfx_migrate_enable+0x10/0x10 [ 1659.521891][T12559] ? hci_send_to_monitor+0xe2/0x570 [ 1659.521925][T12559] hci_rx_work+0x46a/0xe80 [ 1659.521955][T12559] ? process_scheduled_works+0x9ef/0x17b0 [ 1659.521983][T12559] process_scheduled_works+0xae1/0x17b0 [ 1659.522026][T12559] ? __pfx_process_scheduled_works+0x10/0x10 [ 1659.522064][T12559] worker_thread+0x8a0/0xda0 [ 1659.522092][T12559] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1659.522132][T12559] ? __kthread_parkme+0x7b/0x200 [ 1659.522166][T12559] kthread+0x711/0x8a0 [ 1659.522199][T12559] ? __pfx_worker_thread+0x10/0x10 [ 1659.522227][T12559] ? __pfx_kthread+0x10/0x10 [ 1659.522259][T12559] ? ret_from_fork+0x42d/0x7d0 [ 1659.522289][T12559] ? __pfx_kthread+0x10/0x10 [ 1659.522332][T12559] ret_from_fork+0x436/0x7d0 [ 1659.522363][T12559] ? __pfx_ret_from_fork+0x10/0x10 [ 1659.522395][T12559] ? __switch_to_asm+0x39/0x70 [ 1659.522414][T12559] ? __switch_to_asm+0x33/0x70 [ 1659.522433][T12559] ? __pfx_kthread+0x10/0x10 [ 1659.522466][T12559] ret_from_fork_asm+0x1a/0x30 [ 1659.522494][T12559] [ 1659.522502][T12559] [ 1659.522508][T12559] Allocated by task 12559: [ 1659.522518][T12559] kasan_save_track+0x3e/0x80 [ 1659.522542][T12559] __kasan_kmalloc+0x93/0xb0 [ 1659.522565][T12559] __kmalloc_cache_noprof+0x1a8/0x320 [ 1659.522594][T12559] l2cap_chan_create+0x50/0x780 [ 1659.522615][T12559] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 1659.522638][T12559] l2cap_connect_cfm+0x377/0x1040 [ 1659.522655][T12559] hci_connect_cfm+0x95/0x140 [ 1659.522682][T12559] le_conn_complete_evt+0xfb8/0x1500 [ 1659.522711][T12559] hci_le_conn_complete_evt+0x187/0x450 [ 1659.522738][T12559] hci_event_packet+0x78f/0x1200 [ 1659.522759][T12559] hci_rx_work+0x46a/0xe80 [ 1659.522781][T12559] process_scheduled_works+0xae1/0x17b0 [ 1659.522805][T12559] worker_thread+0x8a0/0xda0 [ 1659.522829][T12559] kthread+0x711/0x8a0 [ 1659.522857][T12559] ret_from_fork+0x436/0x7d0 [ 1659.522881][T12559] ret_from_fork_asm+0x1a/0x30 [ 1659.522900][T12559] [ 1659.522905][T12559] Freed by task 13645: [ 1659.522915][T12559] kasan_save_track+0x3e/0x80 [ 1659.522936][T12559] kasan_save_free_info+0x46/0x50 [ 1659.522955][T12559] __kasan_slab_free+0x5b/0x80 [ 1659.522979][T12559] kfree+0x195/0x550 [ 1659.523002][T12559] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 1659.523023][T12559] l2cap_sock_release+0x6a/0x230 [ 1659.523040][T12559] sock_close+0xc3/0x240 [ 1659.523063][T12559] __fput+0x45b/0xa80 [ 1659.523081][T12559] task_work_run+0x1d1/0x260 [ 1659.523098][T12559] do_exit+0x6b5/0x2300 [ 1659.523115][T12559] do_group_exit+0x21c/0x2d0 [ 1659.523133][T12559] get_signal+0x125e/0x1310 [ 1659.523155][T12559] arch_do_signal_or_restart+0x9a/0x750 [ 1659.523179][T12559] exit_to_user_mode_loop+0x75/0x110 [ 1659.523205][T12559] do_syscall_64+0x2bd/0x3b0 [ 1659.523223][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.523242][T12559] [ 1659.523248][T12559] The buggy address belongs to the object at ffff888028d46000 [ 1659.523248][T12559] which belongs to the cache kmalloc-2k of size 2048 [ 1659.523267][T12559] The buggy address is located 1280 bytes inside of [ 1659.523267][T12559] freed 2048-byte region [ffff888028d46000, ffff888028d46800) [ 1659.523291][T12559] [ 1659.523296][T12559] The buggy address belongs to the physical page: [ 1659.523323][T12559] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28d40 [ 1659.523349][T12559] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1659.523368][T12559] anon flags: 0x80000000000040(head|node=0|zone=1) [ 1659.523387][T12559] page_type: f5(slab) [ 1659.523406][T12559] raw: 0080000000000040 ffff888019842000 0000000000000000 dead000000000001 [ 1659.523426][T12559] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1659.523447][T12559] head: 0080000000000040 ffff888019842000 0000000000000000 dead000000000001 [ 1659.523465][T12559] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1659.523486][T12559] head: 0080000000000003 ffffea0000a35001 00000000ffffffff 00000000ffffffff [ 1659.523504][T12559] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1659.523516][T12559] page dumped because: kasan: bad access detected [ 1659.523527][T12559] page_owner tracks the page as allocated [ 1659.523535][T12559] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 68, tgid 68 (kworker/u8:4), ts 17774516215, free_ts 0 [ 1659.523578][T12559] post_alloc_hook+0x240/0x2a0 [ 1659.523607][T12559] get_page_from_freelist+0x2119/0x21b0 [ 1659.523627][T12559] __alloc_frozen_pages_noprof+0x181/0x370 [ 1659.523648][T12559] alloc_pages_mpol+0xd1/0x380 [ 1659.523674][T12559] allocate_slab+0x8a/0x370 [ 1659.523694][T12559] ___slab_alloc+0x8d1/0xdc0 [ 1659.523710][T12559] __kmalloc_noprof+0x145/0x430 [ 1659.523735][T12559] scsi_alloc_target+0x138/0xbb0 [ 1659.523756][T12559] __scsi_scan_target+0x15b/0xd10 [ 1659.523778][T12559] scsi_scan_host_selected+0x375/0x690 [ 1659.523800][T12559] do_scan_async+0x124/0x760 [ 1659.523822][T12559] async_run_entry_fn+0xa5/0x3f0 [ 1659.523844][T12559] process_scheduled_works+0xae1/0x17b0 [ 1659.523867][T12559] worker_thread+0x8a0/0xda0 [ 1659.523892][T12559] kthread+0x711/0x8a0 [ 1659.523919][T12559] ret_from_fork+0x436/0x7d0 [ 1659.523943][T12559] page_owner free stack trace missing [ 1659.523951][T12559] [ 1659.523956][T12559] Memory state around the buggy address: [ 1659.523967][T12559] ffff888028d46400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1659.523982][T12559] ffff888028d46480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1659.523997][T12559] >ffff888028d46500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1659.524009][T12559] ^ [ 1659.524020][T12559] ffff888028d46580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1659.524035][T12559] ffff888028d46600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1659.524047][T12559] ================================================================== [ 1659.524329][T12559] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1659.524351][T12559] CPU: 1 UID: 0 PID: 12559 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1659.524381][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1659.524399][T12559] Workqueue: hci5 hci_rx_work [ 1659.524432][T12559] Call Trace: [ 1659.524442][T12559] [ 1659.524453][T12559] dump_stack_lvl+0x99/0x250 [ 1659.524491][T12559] ? __asan_memcpy+0x40/0x70 [ 1659.524518][T12559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1659.524555][T12559] ? __pfx__printk+0x10/0x10 [ 1659.524589][T12559] vpanic+0x281/0x750 [ 1659.524625][T12559] ? preempt_schedule+0xae/0xc0 [ 1659.524662][T12559] ? __pfx_vpanic+0x10/0x10 [ 1659.524698][T12559] ? preempt_schedule_common+0x83/0xd0 [ 1659.524736][T12559] ? preempt_schedule+0xae/0xc0 [ 1659.524772][T12559] ? __pfx_preempt_schedule+0x10/0x10 [ 1659.524811][T12559] panic+0xb9/0xc0 [ 1659.524847][T12559] ? __pfx_panic+0x10/0x10 [ 1659.524885][T12559] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1659.524930][T12559] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1659.524952][T12559] check_panic_on_warn+0x89/0xb0 [ 1659.524978][T12559] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1659.525000][T12559] end_report+0x78/0x160 [ 1659.525032][T12559] kasan_report+0x129/0x150 [ 1659.525065][T12559] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1659.525093][T12559] l2cap_connect_cfm+0x6e4/0x1040 [ 1659.525122][T12559] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1659.525147][T12559] ? mutex_lock_nested+0x154/0x1d0 [ 1659.525176][T12559] ? hci_connect_cfm+0x2c/0x140 [ 1659.525208][T12559] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1659.525231][T12559] hci_connect_cfm+0x95/0x140 [ 1659.525267][T12559] le_conn_complete_evt+0xfb8/0x1500 [ 1659.525311][T12559] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1659.525400][T12559] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1659.525439][T12559] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.525481][T12559] ? skb_pull_data+0xfb/0x200 [ 1659.525512][T12559] hci_le_conn_complete_evt+0x187/0x450 [ 1659.525553][T12559] hci_event_packet+0x78f/0x1200 [ 1659.525584][T12559] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1659.525620][T12559] ? __pfx_hci_event_packet+0x10/0x10 [ 1659.525649][T12559] ? __pfx_migrate_enable+0x10/0x10 [ 1659.525686][T12559] ? hci_send_to_monitor+0xe2/0x570 [ 1659.525728][T12559] hci_rx_work+0x46a/0xe80 [ 1659.525763][T12559] ? process_scheduled_works+0x9ef/0x17b0 [ 1659.525896][T12559] process_scheduled_works+0xae1/0x17b0 [ 1659.525987][T12559] ? __pfx_process_scheduled_works+0x10/0x10 [ 1659.526068][T12559] worker_thread+0x8a0/0xda0 [ 1659.526126][T12559] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1659.526230][T12559] ? __kthread_parkme+0x7b/0x200 [ 1659.526309][T12559] kthread+0x711/0x8a0 [ 1659.526399][T12559] ? __pfx_worker_thread+0x10/0x10 [ 1659.526455][T12559] ? __pfx_kthread+0x10/0x10 [ 1659.526530][T12559] ? ret_from_fork+0x42d/0x7d0 [ 1659.526604][T12559] ? __pfx_kthread+0x10/0x10 [ 1659.526679][T12559] ret_from_fork+0x436/0x7d0 [ 1659.526751][T12559] ? __pfx_ret_from_fork+0x10/0x10 [ 1659.526813][T12559] ? __switch_to_asm+0x39/0x70 [ 1659.526863][T12559] ? __switch_to_asm+0x33/0x70 [ 1659.526899][T12559] ? __pfx_kthread+0x10/0x10 [ 1659.526987][T12559] ret_from_fork_asm+0x1a/0x30 [ 1659.527035][T12559] [ 1659.527380][T12559] Kernel Offset: disabled