last executing test programs: 29m27.13510135s ago: executing program 32 (id=545): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 27m31.147455401s ago: executing program 33 (id=697): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040), 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 24m20.523115118s ago: executing program 34 (id=899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x56) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) 24m13.928191865s ago: executing program 35 (id=904): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x5}, 0x3c) ioctl$TIOCSBRK(r0, 0x5427) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x52, 0x5, 0xfffe, {0x0, 0x1}, {0x49, 0x2}, @period={0x5c, 0x2, 0xff7f, 0x7, 0x0, {0x5, 0xfff9, 0x9, 0x1}, 0x0, 0x0}}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@local]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) 23m38.114665194s ago: executing program 7 (id=913): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xe, {0x9}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x54) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 23m35.363055255s ago: executing program 7 (id=937): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_uring_setup(0x566, &(0x7f00000002c0)={0x0, 0x338c, 0x4000, 0x1, 0x1cd}) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000090003704000000000000000000000076f25c30a0007816c05e2e8b0c6ba227fad79d634accd69b0beae1704f9892e898cc5429b1fbd2991370b9a770d541392d72d57646e0a51a64848e35a48e6290826ac67e685a315276a06236a82cf44e58131dbbaa825774316b05337f31fcf99342e06fae683d10dac3db29e3af7f9aa6d971e7058535fc542807a00a26da76bc1ce1b8f53216294c5f4191630cb1848fd9c6a0efa906b0c390a5d7fd25abbc8e75131b1ec6559b51d2df1d8485e9b1fb2d73961f", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) 23m26.689295945s ago: executing program 7 (id=949): syz_usb_connect(0x4, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES16], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='projid_map\x00') syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x8, 0x0}) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109029d0003010520080904000000010100000a2401800009020199f30fbc05020306040105240426000c07000000000000000000060924030103030205100c24020404020200"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x14, 0x7, 0x1, 0x8, 0x6}, 0x16, &(0x7f0000000480)=ANY=[], 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x409}}, {0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1303dbad9fc55c9f64106b4d824c3d561c3da14af45f8f576fcaeb2acedcb0aebeea7c"]}, {0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$msr(r0, &(0x7f0000000480)=""/130, 0x82) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e2, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c1802d400680000002f9078ac1e0001ac1414aa830faaac1e0101ac1e01017f000001445421937f00000100000003ac1414bb000000096401010100000005e0000002000000ff7f00000100000c887f00000100000003e0000001000000030a01010000000004ac1e0001ffffdef20a0101010000ffff44348c210a010100fffffff900000000000000060000000000000000ffffffff0000000c0000000000000003000000000000000794040000000c21880b00190001c99980b6c007a055c2bf2a755eb5a660b192e53dc7a2df1b1f040008000009e00def7a8bbde34e7d96ba60e9eebfdad4d690cec30551dc3a844580a13df3f4ea5fc024c0f5c4acbdefb3ec6d96e5a4e09296e35cf315817d2117734f45478dd30b60b43a2be40b0c359c16828433751070b857c661162dfe747cd5c03fca79aa555018299703a91cb19a76c281eee4574cdf89753a897b880494f992f944d2b899619c45c18b3d9440b66a8d925231c5b0a4cf8d6fef01e0367244c31ca172080086dd04000009a37e2609b71758cea9b7fde667353d12a80fb5fb6cd2219c7525445af746ac46b243b38778155265c3f5e0ff37fa82075251c213b1fc4daa7b17c1f33903b4331ab013900307784ad2b277c4c2ae7ea4d6b268edf402a869ceb7ab2d3cdebc27c199e07c8a06fbe36f472d2642274c53b22d38a8628c7603e647ddfcc50969f93351d76e1661dfdae5e6076d51c1080088be000000021b02fd030100000000000006080022eb000000002903ea0502000000000000520006800a0800655800000003d2da867ca3ad03f8906e2b970eb0678dfc7c0693260d799037305fdf93d096936c407efca44870f8ca98d60e440660c64925d9a4e1109de37e4ccc95cd6c1cee9d0219f74d839e811cd2a0912708e9802e86984ac755bd3d909596f517af234cc0a1df15ac09c8e4e749c7a1167158ae071833d7b5792c1ac368e88419d374251eec74688578481712bacc4cacda1f2c376e4f459bc97e59d756a335a953dbfda45440f6e9367442f3cdecfd866c9f62a9ff3a5cb1aa24c0c11e68a79289866e7e85ff5cfd96bf8f624b6b3b22c26438418dd1259525a1029853ad21d62095fc7a706da3a4a2af720847722089c9a63ff5e86d84a6128341dd74c6c30efc5e0e1307deda7014f376d405f6d0c2af4a6905b65ae548a0dd0355524f230e700cafb5843ddb4939cb379c611206a20a8d09ffde6a511af3d8840aaa54c2aeef776c651d789b02352c64782d9637471bfc3c0ac5915fa3ff14c8142ee0d71d888d8a2b32f4220439a65443f356447add60c6ad13eccac72d"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) 23m21.331724117s ago: executing program 7 (id=955): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r6, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r7}], 0x1, 0x0) 23m17.87458297s ago: executing program 36 (id=939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0xc, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r3, 0x3}, 0x8) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d00000000000000"]) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000004a00)={{0x0, 0x0, 0xffffffda, {0x1000, 0x1}}, "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", "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"}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) 23m17.79771665s ago: executing program 7 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) fsopen(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000380)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 23m3.821576213s ago: executing program 37 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x880) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={r7, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23m3.503538904s ago: executing program 38 (id=956): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x3, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x6, 0x7}}) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x9, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(0x0, 0x205, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="8a4de083eb8093ab1cac60a82a950f41686f3731a2fdb72bb2b07926f3a39ed5a05b3bc2ad7621b9a510b0addf3e5fd260348534a8d66b84a7f82156fb007ec7fa6e4c5d3d83d540c438f79ce18b3b0e3e785a2af26b92369a4baff3400c89145eb67946e695a3dee1db44ed27cdcfdc84bef6097f8f70cb48917a5e2c7f61b26f16d1f6f134cdf3f235c4a02a61922ff5b6d8a4c4057b8dd51af4b486e1085ac519e044f04b66804c9bf40733bee9092b90fe8884401813c862e12490"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close(r5) mmap(&(0x7f0000130000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r3, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x1c1a2bd}], 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 23m0.961449967s ago: executing program 39 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) fsopen(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000380)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 18m20.313310031s ago: executing program 9 (id=1163): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 18m18.341598596s ago: executing program 9 (id=1165): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) read$FUSE(r0, &(0x7f0000003940)={0x2020}, 0x2020) 18m18.240896509s ago: executing program 9 (id=1166): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001200a70000000000000000001c0000000c00350000000000000000000c0029"], 0x2c}], 0x1}, 0x0) 18m17.160591146s ago: executing program 9 (id=1167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 18m17.067574645s ago: executing program 9 (id=1168): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x10000, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0x9}}, 0x34840) 18m16.944155616s ago: executing program 9 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) 18m16.515114114s ago: executing program 0 (id=1170): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0x9, 0x3, 0x1, {0xb, 0xfdfffe40, 0x7, 0x2}}) 18m16.457284598s ago: executing program 0 (id=1171): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 18m16.328072506s ago: executing program 0 (id=1172): mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) 18m16.282456309s ago: executing program 0 (id=1173): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c562dff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 18m16.122048496s ago: executing program 0 (id=1174): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 18m15.973078931s ago: executing program 0 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xcff, 0x7e}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) 18m1.485233245s ago: executing program 40 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) 18m0.742107238s ago: executing program 41 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xcff, 0x7e}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) 13m26.780946388s ago: executing program 2 (id=1882): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000480)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="6d9aafcf9848296e05050e19cb375c2ae9b01c9ffab12c5dc66f8a0eb734bafda797d6ca75c25f0c06016f42761f"}, {&(0x7f0000000180)="ebeebf32afc78a2cd0ac94d692625855c6d87d6bc59650c51ecfe9cd1c76aa5c1b1d7e717a7794247078e5f660bbdd9c0ca94e3606fbc9c19b9c79c3b7f94ee38e9f53b42ff17c0a5b5dc200d1530aa85a54c28569cb31555048e7a0fda6971e9041dd18149dbe169e6d556104ab30e289e3b25697e4912f07e9e7612f91f35164bf0dfbb9b0d98d157becdd0d4b617deb19811f18a3e5335abac3c8b5ab37f4d47667a82da854"}, {&(0x7f0000000240)="9b783e2450229f4560f06601c7a3d0d1fe8afccb44d0fe3041b4d6fe5073ac5abdf42b85c10ae2bc133657d6995a11dfee0e1d00d47978f1f9d5594ffbcebbc949288ea0f70460a1e490a16e42f41e189a28e676d2e2b7706d6282db53e7eb1c506af5"}], 0x0, &(0x7f0000000440)=[@cred], 0x0, 0x4000000}}], 0x400000000000167, 0x8040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 13m25.764755522s ago: executing program 2 (id=1897): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13m22.626398814s ago: executing program 2 (id=1918): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) sendmmsg$alg(r1, &(0x7f00000020c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="e7f323deba198d3f866066da9e573e014978e89b0376e5da5fd716", 0x1b}, {&(0x7f0000000080)}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x20040810) 13m22.354202462s ago: executing program 2 (id=1924): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020) 13m21.312142018s ago: executing program 2 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x12}, 0x18) 13m21.123615028s ago: executing program 2 (id=1943): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d9, 0x0) 13m5.855805304s ago: executing program 42 (id=1943): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d9, 0x0) 11m32.793542025s ago: executing program 8 (id=2644): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000500000040"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_emit_vhci(0x0, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}], 0x1}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 11m28.214407888s ago: executing program 8 (id=2656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 11m26.430075537s ago: executing program 8 (id=2659): mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 11m26.252673147s ago: executing program 8 (id=2661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x20, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 11m24.848014213s ago: executing program 8 (id=2665): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5c", 0x2b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 11m23.337312235s ago: executing program 8 (id=2667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000001d0000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x40, &(0x7f0000002500)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup2(0xffffffffffffffff, r2) ftruncate(r2, 0xc17a) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x8004) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r5) 11m8.245155849s ago: executing program 43 (id=2667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000001d0000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x40, &(0x7f0000002500)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup2(0xffffffffffffffff, r2) ftruncate(r2, 0xc17a) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x8004) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r5) 8m37.805835146s ago: executing program 4 (id=3970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xb0000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = fanotify_init(0x202, 0x1000) fanotify_mark(r5, 0x1, 0x48000013, r3, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) 8m29.89940448s ago: executing program 4 (id=3992): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 8m27.660528022s ago: executing program 4 (id=4001): r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) pwritev2(r0, &(0x7f00000004c0), 0x0, 0xffffe9cb, 0x8390, 0xe) openat$sndseq(0xffffffffffffff9c, 0x0, 0x109982) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8m22.831067647s ago: executing program 4 (id=4013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x281, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r5, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 8m20.150232203s ago: executing program 4 (id=4018): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e22, @broadcast}}, 0x8696, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x2, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x33, 0x61, 0x33, 0x65, 0x33, 0x36, 0x32, 0xad, 0x33, 0x66, 0x6c, 0x66, 0x66, 0x62, 0x34, 0xe]}, &(0x7f0000000180)={0x0, "33fe6728ac6cbe0d38e38e48be4342949cdcdbbf6eab85b3f122610b00000000000000151bc98f1f559a560ede6bd98700", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, r2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000040)=[{r0, 0xe7d4c009da6c1985}], 0x1, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 8m14.75605402s ago: executing program 5 (id=4029): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) syz_open_procfs(0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r1, 0x406, r2) socket$netlink(0x10, 0x3, 0x4) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)) 8m12.841799762s ago: executing program 5 (id=4036): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) select(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) 8m12.01268948s ago: executing program 4 (id=4042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x40000c4) socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg(r1, 0x0, 0x40844) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001100)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m10.540634192s ago: executing program 5 (id=4045): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00'}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) memfd_create(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4000) 8m9.147759608s ago: executing program 5 (id=4048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002a80)={0x338, 0x0, 0x0, [{{0x6, 0x1, 0x5, 0x9e8, 0x0, 0x3, {0x5, 0x7f, 0x7, 0x2, 0x9, 0x78b, 0x800, 0x0, 0xdbaf, 0xc000, 0x7, 0x0, 0x0, 0x6, 0x80000000}}, {0x3, 0x4, 0x3, 0x2d484071, '[%]'}}, {{0x6, 0x1, 0x10001, 0x4, 0x4048, 0x10, {0x4, 0x0, 0x5, 0xb, 0x2, 0x1c52000000, 0x5, 0x7, 0x4, 0x8000, 0xfff, 0x0, 0x0, 0x7, 0x1000}}, {0x0, 0xffffffffffffffa2, 0x1, 0xfffffc01, '^'}}, {{0x6, 0x1, 0x100, 0xcf4e, 0x6, 0xfff, {0x2, 0x5, 0xa, 0x4, 0xffffffffffffffff, 0x7, 0x6, 0x1, 0x3, 0x6000, 0x2009, 0x0, 0x0, 0x9, 0x7}}, {0x2, 0x10, 0x2, 0x5, ',,'}}, {{0x4, 0x3, 0x0, 0x7, 0x26b, 0x6, {0x0, 0x7, 0x800, 0x8, 0x9, 0x57f6, 0xf, 0x8, 0xfffffffe, 0x8000, 0xc, 0x0, 0x0, 0x7, 0x5e}}, {0x1, 0x7, 0xa, 0x4, '/dev/cec#\x00'}}, {{0x5, 0x0, 0xffffffffffff82a0, 0x5, 0xd2c3, 0x4, {0x1, 0x2, 0x9, 0x6, 0x9, 0x4, 0x8, 0x3, 0x1, 0x8000, 0x6, 0x0, 0x0, 0x3ff, 0x3}}, {0x1, 0x3, 0x2, 0x81, '*)'}}]}, 0x338) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000000036) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) 8m7.525776867s ago: executing program 5 (id=4052): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x202, 0x0) statfs(0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007379"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000180)="c7e1599740c4b3a21de9935050895f380b0076b287960d50937502b3c97d2652f949a6a0d5d685e95a7ecc0ac3143e947d300f45d1856dfcfd92738648278ae07981f4729bd387d5d2b21a4a6121e756b3d52c4252c8a165219e3f346f36de2939be1abdc19e01fb3a88b7f58fc8e29b86d480c148750d766850c0e6b7405503bd33e56109dd98592111e07f33c3696c021ac38c7adaa20dd4b6b96d982a610ea5b25c1e5c5081988cb76bd6c18b471eac1ed09b23bc92") ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r3, 0x0, 0x0, 0xfffffffe, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 8m1.236188015s ago: executing program 5 (id=4068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x888000, 0x0) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 7m50.957618318s ago: executing program 44 (id=4042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x40000c4) socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg(r1, 0x0, 0x40844) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001100)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m45.621857632s ago: executing program 45 (id=4068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x888000, 0x0) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 15.262709205s ago: executing program 3 (id=5356): mkdir(0x0, 0x21) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 14.976354403s ago: executing program 3 (id=5359): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r3 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f00000001c0)={0x0, &(0x7f0000000240)="580cc8e1acc94039686c2ff7070044ff25e2b467c8a4596df557af6ada95c51f4145d5689ccd192def5e940e08303bad59dd6c42f719a014afc62fa55403ff", 0x3f}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000040), 0x2) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13.530425419s ago: executing program 6 (id=5363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000300), 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08902200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 12.18854862s ago: executing program 3 (id=5368): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x24008094) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7f, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept4$unix(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 11.881399349s ago: executing program 6 (id=5371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 10.155294818s ago: executing program 6 (id=5378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x2c}}, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08902200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 9.672841656s ago: executing program 3 (id=5384): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7f, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept4$unix(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 8.489765598s ago: executing program 6 (id=5386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 6.308474875s ago: executing program 6 (id=5388): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, 0x0, 0x0) 6.30079262s ago: executing program 3 (id=5389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 4.549547718s ago: executing program 3 (id=5392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r10, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 4.037601106s ago: executing program 1 (id=5393): syz_usb_connect(0x4, 0x1cb, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mq_open(&(0x7f00000007c0)='(\x00', 0x41, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) r8 = fcntl$dupfd(r7, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) close_range(0xffffffffffffffff, r5, 0x0) 4.036375327s ago: executing program 1 (id=5394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000940), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000b00)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x40, {{0x8, 0x4, 0x1, 0xb, 0x20, 0x65, 0x0, 0xe, 0x2f, 0x0, @broadcast, @multicast1, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001080)={0x164, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x480d4}, 0x4040000) r6 = dup(0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}}}}}}, 0x0) 3.995305335s ago: executing program 1 (id=5395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 3.992406939s ago: executing program 6 (id=5396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 1.972530219s ago: executing program 1 (id=5397): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r3 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f00000001c0)={0x0, &(0x7f0000000240)="580cc8e1acc94039686c2ff7070044ff25e2b467c8a4596df557af6ada95c51f4145d5689ccd192def5e940e08303bad59dd6c42f719a014afc62fa55403ff", 0x3f}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000040), 0x2) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 965.937537ms ago: executing program 1 (id=5398): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdir(0x0, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 0s ago: executing program 1 (id=5399): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_procfs$namespace(r3, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000001bc0), 0x0, 0x40010140, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0xfff, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x9, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0xffffffff, 0x3, 0x1, 0x4f, 0x100006, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x0, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0xe9, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x7, 0x8000, 0x0, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x9b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0xb, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0xb, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0x1, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x6, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r6) timer_create(0x2, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) setns(r1, 0x20000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000040)={0x1, 0x40, 0x2, 0x1, 0x0, 0x0, 0x80, 0x800, 0x40, 0x4, 0x0, 0x4000cf16, 0x0, 0xffffffffffffff65, 0x0}) kernel console output (not intermixed with test programs): HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 1231.845365][ T8533] usb 4-1: Decoder not found [ 1231.845389][ T8533] em28xx 4-1:0.132: failed to create media graph [ 1231.845483][ T8533] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1231.875702][ T8533] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1231.875781][T11401] em28xx 4-1:0.132: Closing input extension [ 1231.907445][T11401] em28xx 4-1:0.132: Freeing device [ 1232.536068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.570805][ T8533] usb 9-1: USB disconnect, device number 4 [ 1232.956999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.048480][T14216] fido_id[14216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1233.935733][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1746'. [ 1234.768830][T14280] netlink: 566 bytes leftover after parsing attributes in process `syz.2.1755'. [ 1234.952318][T14288] batadv_slave_1: entered promiscuous mode [ 1234.954434][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 1234.954605][T14288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.123710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.233485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.286970][T14288] batadv_slave_1 (unregistering): left promiscuous mode [ 1235.287096][T14288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.594670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.730619][T14307] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 1235.730644][T14307] netlink: 'syz.4.1767': attribute type 4 has an invalid length. [ 1235.730658][T14307] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1767'. [ 1239.064100][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 1239.225199][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 1239.226286][T12956] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.234553][T12956] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.234625][T12956] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.234664][T12956] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.524291][T11400] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1239.675761][T11400] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1239.675800][T11400] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1239.675844][T11400] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.675869][T11400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.736169][T14427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1239.759270][T11400] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1240.118049][T11400] usb 4-1: USB disconnect, device number 15 [ 1240.131000][ T5954] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1240.292703][ T5954] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1240.292735][ T5954] usb 5-1: config 1 has no interface number 0 [ 1240.292790][ T5954] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1240.313137][ T5954] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1240.313175][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.313200][ T5954] usb 5-1: Product: syz [ 1240.313218][ T5954] usb 5-1: Manufacturer: syz [ 1240.313236][ T5954] usb 5-1: SerialNumber: syz [ 1241.270907][ T5954] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1241.282698][ T5954] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1241.406756][ T5954] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 1241.545261][ T5954] usb 5-1: USB disconnect, device number 16 [ 1241.573974][ T5954] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1242.713672][ T5954] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1242.713814][ T5954] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1242.713955][ T5954] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1243.280796][ T9877] Bluetooth: hci4: command 0x1003 tx timeout [ 1243.281236][ T5821] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1243.754229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.348248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.454830][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.454907][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.991074][T14565] loop2: detected capacity change from 0 to 7 [ 1244.996908][T14565] Dev loop2: unable to read RDB block 7 [ 1244.996957][T14565] loop2: unable to read partition table [ 1244.997202][T14565] loop2: partition table beyond EOD, truncated [ 1244.997243][T14565] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1245.196203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.408165][T14580] input: syz1 as /devices/virtual/input/input18 [ 1245.841495][T14595] fuse: Bad value for 'fd' [ 1246.127468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1246.343125][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 1246.564851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.150861][ T5954] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1247.309695][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1247.309729][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.309751][ T5954] usb 3-1: Product: syz [ 1247.309767][ T5954] usb 3-1: Manufacturer: syz [ 1247.309782][ T5954] usb 3-1: SerialNumber: syz [ 1247.365085][ T5954] usb 3-1: config 0 descriptor?? [ 1247.607409][ T5954] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1248.384535][T14651] overlayfs: failed to clone upperpath [ 1248.665937][ T5954] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1248.702243][ T5954] usb 3-1: USB disconnect, device number 10 [ 1250.114791][T14681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1250.740338][ T5954] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1250.805771][T14712] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 1250.805798][T14712] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 1250.805812][T14712] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1935'. [ 1250.808210][T14712] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 1250.808232][T14712] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 1250.808247][T14712] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1935'. [ 1250.910531][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1250.913469][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1250.917274][ T5954] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 1250.917302][ T5954] usb 5-1: config 8 has no interface number 0 [ 1250.917338][ T5954] usb 5-1: config 8 interface 255 has no altsetting 0 [ 1250.957577][ T5954] usb 5-1: string descriptor 0 read error: -22 [ 1250.957762][ T5954] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1250.957789][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.200568][ T5954] catc 5-1:8.255: Can't set altsetting 1. [ 1251.200642][ T5954] catc 5-1:8.255: probe with driver catc failed with error -5 [ 1251.208886][ T5954] usb 5-1: USB disconnect, device number 17 [ 1251.856829][T14747] overlayfs: failed to clone lowerpath [ 1251.882762][T14747] overlayfs: failed to clone lowerpath [ 1252.378562][T14774] overlayfs: failed to clone upperpath [ 1252.870186][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1253.021887][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1253.024282][ T9] usb 5-1: config 0 has no interfaces? [ 1253.024319][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1253.024345][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.032174][ T9] usb 5-1: config 0 descriptor?? [ 1253.285831][ T9] usb 5-1: USB disconnect, device number 18 [ 1254.809360][T14849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1254.809398][T14849] overlayfs: failed to set xattr on upper [ 1254.809408][T14849] overlayfs: ...falling back to redirect_dir=nofollow. [ 1254.809417][T14849] overlayfs: ...falling back to metacopy=off. [ 1254.809426][T14849] overlayfs: ...falling back to index=off. [ 1254.809435][T14849] overlayfs: ...falling back to uuid=null. [ 1256.491568][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 1257.153499][T14921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1261.908282][T15006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1262.124147][T15019] comedi comedi3: pcl812: I/O port conflict (0x5,16) [ 1262.439902][ T5954] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1262.599657][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 1262.604986][ T5954] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1262.605019][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.605041][ T5954] usb 5-1: Product: syz [ 1262.605056][ T5954] usb 5-1: Manufacturer: syz [ 1262.605072][ T5954] usb 5-1: SerialNumber: syz [ 1262.656145][ T5954] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1262.656174][ T5954] r8152-cfgselector 5-1: config 0 descriptor?? [ 1263.118284][ T5954] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 1268.027715][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1268.054170][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1268.055786][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1268.058239][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1268.061591][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1268.539679][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1270.249614][ T9877] Bluetooth: hci4: command tx timeout [ 1270.467862][ T7901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.586827][T15175] chnl_net:caif_netlink_parms(): no params data found [ 1271.103387][ T7901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.448043][ T38] audit: type=1800 audit(2000000692.695:73): pid=15260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2179" name="/" dev="9p" ino=2 res=0 errno=0 [ 1271.765087][ T7901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.283373][ T7901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.321984][ T9877] Bluetooth: hci4: command tx timeout [ 1272.730052][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.736701][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.736985][T15175] bridge_slave_0: entered allmulticast mode [ 1272.795212][T15175] bridge_slave_0: entered promiscuous mode [ 1272.816996][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.817139][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.817346][T15175] bridge_slave_1: entered allmulticast mode [ 1272.863950][T15175] bridge_slave_1: entered promiscuous mode [ 1273.521680][T15175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.795449][T15175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.409031][ T9877] Bluetooth: hci4: command tx timeout [ 1274.463580][T15175] team0: Port device team_slave_0 added [ 1274.484272][T15175] team0: Port device team_slave_1 added [ 1275.288755][T15175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.288990][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.289022][T15175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.500510][T15175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.500529][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.500573][T15175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.593066][ T7901] bridge_slave_1: left allmulticast mode [ 1275.593099][ T7901] bridge_slave_1: left promiscuous mode [ 1275.593370][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.717654][ T7901] bridge_slave_0: left allmulticast mode [ 1275.717686][ T7901] bridge_slave_0: left promiscuous mode [ 1275.719387][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.479149][ T9877] Bluetooth: hci4: command tx timeout [ 1277.655434][T15395] binder: 15394:15395 ioctl c0306201 200000000640 returned -22 [ 1278.201903][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2243'. [ 1280.880069][ T7901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.978339][ T7901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.022496][ T7901] bond0 (unregistering): Released all slaves [ 1284.162359][T15175] hsr_slave_0: entered promiscuous mode [ 1284.163988][T15175] hsr_slave_1: entered promiscuous mode [ 1284.165184][T15175] debugfs: 'hsr0' already exists in 'hsr' [ 1284.165210][T15175] Cannot create hsr debugfs directory [ 1285.726366][T15554] netlink: 'syz.8.2302': attribute type 1 has an invalid length. [ 1285.888024][T15559] binder: 15558:15559 unknown command 0 [ 1285.888050][T15559] binder: 15558:15559 ioctl c0306201 200000000080 returned -22 [ 1287.247060][T15554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1287.279890][T15556] bond1: (slave gretap1): making interface the new active one [ 1287.302835][T15556] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1287.365936][T15557] bond1: entered allmulticast mode [ 1287.365962][T15557] gretap1: entered allmulticast mode [ 1287.371618][T15578] syz_tun: entered allmulticast mode [ 1287.479087][T15596] dvmrp1: entered allmulticast mode [ 1287.706078][T15573] syz_tun: left allmulticast mode [ 1287.888272][ T7901] hsr_slave_0: left promiscuous mode [ 1287.929649][ T7901] hsr_slave_1: left promiscuous mode [ 1287.930749][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.930777][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.093289][ T7901] veth1_macvtap: left promiscuous mode [ 1288.093396][ T7901] veth0_macvtap: left promiscuous mode [ 1288.093667][ T7901] veth1_vlan: left promiscuous mode [ 1288.093848][ T7901] veth0_vlan: left promiscuous mode [ 1290.168473][ T5809] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1290.380399][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.380450][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1290.388719][ T5809] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1290.388755][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.388779][ T5809] usb 5-1: Product: syz [ 1290.388797][ T5809] usb 5-1: Manufacturer: syz [ 1290.388816][ T5809] usb 5-1: SerialNumber: syz [ 1290.501613][ T5809] usb 5-1: config 0 descriptor?? [ 1290.507175][ T5809] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1290.536609][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1290.556335][ T5809] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1290.556404][ T5809] usb 5-1: media controller created [ 1290.635950][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1290.982123][ T5809] DVB: Unable to find symbol tda10046_attach() [ 1290.982140][ T5809] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1290.982241][ T5809] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1291.576471][T15673] netlink: 'syz.4.2353': attribute type 28 has an invalid length. [ 1291.821973][ T5809] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1291.826670][ T5809] usb 5-1: USB disconnect, device number 20 [ 1296.212816][ T7901] team0 (unregistering): Port device team_slave_1 removed [ 1296.888576][ T7901] team0 (unregistering): Port device team_slave_0 removed [ 1299.693849][T15826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1299.697285][T15829] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1301.704848][ T9877] Bluetooth: hci0: command 0x0406 tx timeout [ 1302.424445][T15618] syz_tun: entered allmulticast mode [ 1303.271129][T15923] overlayfs: failed to clone upperpath [ 1303.357746][T15919] overlayfs: failed to clone upperpath [ 1303.988558][ T9877] Bluetooth: hci0: command 0x0406 tx timeout [ 1305.604600][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.604676][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.251980][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1307.316094][T15972] ref_ctr increment failed for inode: 0x370 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888052bcb980 [ 1308.315426][T15972] uprobe: syz.4.2476:15972 failed to unregister, leaking uprobe [ 1309.818896][T16020] netlink: 'syz.8.2490': attribute type 1 has an invalid length. [ 1310.065818][T16024] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1310.484867][T16020] veth3: entered promiscuous mode [ 1310.491184][T16020] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1310.932690][ T38] audit: type=1326 audit(2000000022.011:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.932765][ T38] audit: type=1326 audit(2000000022.011:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.932813][ T38] audit: type=1326 audit(2000000022.011:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.932859][ T38] audit: type=1326 audit(2000000022.011:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.932903][ T38] audit: type=1326 audit(2000000022.011:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.932949][ T38] audit: type=1326 audit(2000000022.011:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.932994][ T38] audit: type=1326 audit(2000000022.011:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.933039][ T38] audit: type=1326 audit(2000000022.011:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1310.933084][ T38] audit: type=1326 audit(2000000022.011:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca4915d710 code=0x7ffc0000 [ 1310.933129][ T38] audit: type=1326 audit(2000000022.011:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16049 comm="syz.8.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4915eec9 code=0x7ffc0000 [ 1311.047161][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1311.197145][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1311.199790][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.199824][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.199865][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1311.199890][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.206102][ T9] usb 5-1: config 0 descriptor?? [ 1311.255067][ T9] hub 5-1:0.0: USB hub found [ 1311.506955][ T9] hub 5-1:0.0: 1 port detected [ 1312.708351][ T9] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 1312.708382][ T9] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 1312.718614][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 1312.718766][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1312.853410][ T9] usb 5-1: USB disconnect, device number 21 [ 1318.315697][T15175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1318.385639][T15175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1318.477161][T15175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1318.531497][T15175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1319.160036][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'. [ 1320.730897][T15175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.695869][T15175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.655122][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.655224][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.775201][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.775301][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.255074][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1330.279348][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1330.305382][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1330.313986][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1330.331834][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1332.657620][ T5821] Bluetooth: hci2: command tx timeout [ 1335.536522][ T5821] Bluetooth: hci2: command tx timeout [ 1338.528865][ T5821] Bluetooth: hci2: command tx timeout [ 1338.942876][T16296] chnl_net:caif_netlink_parms(): no params data found [ 1340.609844][ T5821] Bluetooth: hci2: command tx timeout [ 1353.447048][T16296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.447142][T16296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.447314][T16296] bridge_slave_0: entered allmulticast mode [ 1353.465583][T16296] bridge_slave_0: entered promiscuous mode [ 1353.573607][T16296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.573794][T16296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.574083][T16296] bridge_slave_1: entered allmulticast mode [ 1353.607188][T16296] bridge_slave_1: entered promiscuous mode [ 1353.754875][T16487] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2622'. [ 1354.529606][T16296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.690124][T16296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.188582][T16296] team0: Port device team_slave_0 added [ 1359.310485][T16296] team0: Port device team_slave_1 added [ 1362.160158][T16571] sp0: Synchronizing with TNC [ 1364.845304][T16296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.845323][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.845352][T16296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.891815][T16296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.891833][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.891863][T16296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.225859][ T6947] bridge_slave_1: left allmulticast mode [ 1366.225890][ T6947] bridge_slave_1: left promiscuous mode [ 1366.229239][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.425410][ T6947] bridge_slave_0: left allmulticast mode [ 1366.425443][ T6947] bridge_slave_0: left promiscuous mode [ 1366.425723][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.212443][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.212522][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.372493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.540160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.496751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.749922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.956642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.703878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.834430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.039653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.280314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.843508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.321690][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 1382.969415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.038862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.169338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.726214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.390149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.684748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.820809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1385.024281][ T6947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.276654][ T6947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.373355][ T6947] bond0 (unregistering): Released all slaves [ 1385.460055][ T9877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1385.479146][ T9877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1385.480694][ T9877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1385.483771][ T9877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1385.484982][ T9877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1385.831633][T16651] tipc: Started in network mode [ 1385.831652][T16651] tipc: Node identity b9, cluster identity 4711 [ 1385.831662][T16651] tipc: Node number set to 185 [ 1386.054747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.292506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.311524][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 1386.311544][ T38] audit: type=1326 audit(2000000097.415:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.311597][ T38] audit: type=1326 audit(2000000097.415:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.314751][ T38] audit: type=1326 audit(2000000097.415:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.314808][ T38] audit: type=1326 audit(2000000097.425:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.314863][ T38] audit: type=1326 audit(2000000097.425:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.314909][ T38] audit: type=1326 audit(2000000097.425:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.315472][ T38] audit: type=1326 audit(2000000097.425:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.315522][ T38] audit: type=1326 audit(2000000097.425:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.316024][ T38] audit: type=1326 audit(2000000097.425:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.316075][ T38] audit: type=1326 audit(2000000097.425:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16814 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0ef8eec9 code=0x7ffc0000 [ 1386.735378][T16296] hsr_slave_0: entered promiscuous mode [ 1386.737020][T16296] hsr_slave_1: entered promiscuous mode [ 1386.738078][T16296] debugfs: 'hsr0' already exists in 'hsr' [ 1386.738103][T16296] Cannot create hsr debugfs directory [ 1386.973248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.236092][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1387.602311][ T5821] Bluetooth: hci4: command tx timeout [ 1387.786082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.884816][ T6947] hsr_slave_0: left promiscuous mode [ 1387.922760][ T6947] hsr_slave_1: left promiscuous mode [ 1387.923813][ T6947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.974084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.003418][ T6947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.194111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.297559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.348866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.354575][ T9877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1388.383363][ T9877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1388.423376][ T9877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1388.426228][ T9877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1388.427139][ T9877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1388.714565][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.781945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.879471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.949804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.039221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.110795][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.207054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.325167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.383741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.439551][ T6947] team0 (unregistering): Port device team_slave_1 removed [ 1389.491056][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.643675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.706309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.708684][ T9877] Bluetooth: hci4: command tx timeout [ 1389.760187][ T6947] team0 (unregistering): Port device team_slave_0 removed [ 1389.889314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.948918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.009437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.084755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.151814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.226727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.296161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.375108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.456120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.472632][ T9877] Bluetooth: hci3: command tx timeout [ 1391.756400][ T9877] Bluetooth: hci4: command tx timeout [ 1392.552386][ T9877] Bluetooth: hci3: command tx timeout [ 1393.333407][T16651] syz_tun (unregistering): left allmulticast mode [ 1394.486859][ T9877] Bluetooth: hci4: command tx timeout [ 1394.632281][ T9877] Bluetooth: hci3: command tx timeout [ 1396.712134][ T9877] Bluetooth: hci3: command tx timeout [ 1397.762251][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2804'. [ 1397.762285][T17031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2804'. [ 1398.300022][T17049] ieee802154 phy0 wpan0: encryption failed: -22 [ 1399.515892][T16807] chnl_net:caif_netlink_parms(): no params data found [ 1400.102164][T16835] chnl_net:caif_netlink_parms(): no params data found [ 1400.151957][ T5809] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1400.322800][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 1400.337822][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.337884][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1400.337928][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1400.337955][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1400.341039][ T5809] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1400.341071][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1400.341092][ T5809] usb 4-1: Product: syz [ 1400.341108][ T5809] usb 4-1: Manufacturer: syz [ 1400.341123][ T5809] usb 4-1: SerialNumber: syz [ 1400.438930][ T5809] usb 4-1: config 0 descriptor?? [ 1400.496922][ T5809] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 1400.497019][ T5809] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1400.518271][ T5809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1401.184675][ T6947] bridge_slave_1: left allmulticast mode [ 1401.184706][ T6947] bridge_slave_1: left promiscuous mode [ 1401.184980][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.310155][ T6947] bridge_slave_0: left allmulticast mode [ 1401.310187][ T6947] bridge_slave_0: left promiscuous mode [ 1401.310470][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.014439][ T6947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.133036][ T6947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.223689][ T6947] bond0 (unregistering): Released all slaves [ 1402.321591][T16807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.321926][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.322196][T16807] bridge_slave_0: entered allmulticast mode [ 1402.325113][T16807] bridge_slave_0: entered promiscuous mode [ 1402.435839][T17166] bond1: peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1402.486527][T17166] bond1 (unregistering): Released all slaves [ 1402.653928][T16807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.654069][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.656698][T16807] bridge_slave_1: entered allmulticast mode [ 1402.665556][T16807] bridge_slave_1: entered promiscuous mode [ 1402.922196][ T5954] usb 4-1: USB disconnect, device number 16 [ 1403.249328][T17214] netlink: 'syz.4.2865': attribute type 1 has an invalid length. [ 1403.249353][T17214] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2865'. [ 1403.503273][ T6947] hsr_slave_0: left promiscuous mode [ 1403.561680][ T6947] hsr_slave_1: left promiscuous mode [ 1403.562715][ T6947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.654582][ T6947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.533287][ T6947] team0 (unregistering): Port device team_slave_1 removed [ 1404.812478][ T6947] team0 (unregistering): Port device team_slave_0 removed [ 1406.061613][ T5809] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1406.221585][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1406.227333][ T5809] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 1406.227366][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.227387][ T5809] usb 4-1: Product: syz [ 1406.227401][ T5809] usb 4-1: Manufacturer: syz [ 1406.227416][ T5809] usb 4-1: SerialNumber: syz [ 1406.296763][ T5809] usb 4-1: config 0 descriptor?? [ 1406.370482][T16807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.543002][ T5809] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1406.635178][T17256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.646190][T16807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.657044][T16835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.657240][T16835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.657571][T16835] bridge_slave_0: entered allmulticast mode [ 1406.690000][T16835] bridge_slave_0: entered promiscuous mode [ 1406.715765][T11400] usb 4-1: USB disconnect, device number 17 [ 1406.964401][T16835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.964541][T16835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.964760][T16835] bridge_slave_1: entered allmulticast mode [ 1406.968966][T16835] bridge_slave_1: entered promiscuous mode [ 1407.389683][T16807] team0: Port device team_slave_0 added [ 1407.558815][T16807] team0: Port device team_slave_1 added [ 1407.940258][T16835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.129590][T16835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.211164][T16807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.211178][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.211198][T16807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.393682][T16807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.393701][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.393731][T16807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.994790][T16835] team0: Port device team_slave_0 added [ 1409.047467][T16835] team0: Port device team_slave_1 added [ 1409.849196][T17358] netlink: 'syz.3.2929': attribute type 15 has an invalid length. [ 1409.849220][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1409.954042][T16807] hsr_slave_0: entered promiscuous mode [ 1409.960772][T16807] hsr_slave_1: entered promiscuous mode [ 1409.962530][T16807] debugfs: 'hsr0' already exists in 'hsr' [ 1409.962564][T16807] Cannot create hsr debugfs directory [ 1409.985716][T16835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.985734][T16835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.985762][T16835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.050801][T16835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.050820][T16835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.050849][T16835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.067658][T17397] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2945'. [ 1411.210234][T16835] hsr_slave_0: entered promiscuous mode [ 1411.221968][T16835] hsr_slave_1: entered promiscuous mode [ 1411.226159][T16835] debugfs: 'hsr0' already exists in 'hsr' [ 1411.226187][T16835] Cannot create hsr debugfs directory [ 1411.872402][T17430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1413.806894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.035923][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2987'. [ 1415.189807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.714266][T17591] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1417.520823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.991651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.049536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.052530][T11400] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1418.124511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.241169][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.258451][T11400] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 55911, setting to 64 [ 1418.258489][T11400] usb 5-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1418.258533][T11400] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1418.258557][T11400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.310973][T17605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1418.533562][T11453] usb 5-1: USB disconnect, device number 22 [ 1418.537468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1419.130908][T11453] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1419.269856][T16807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1419.282308][T11453] usb 4-1: Using ep0 maxpacket: 16 [ 1419.285151][T11453] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1419.285195][T11453] usb 4-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 1419.285220][T11453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.335666][T11453] usb 4-1: config 0 descriptor?? [ 1419.411837][T16807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1419.524496][T16807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1419.631256][T16807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1419.813673][T11453] hid_parser_main: 6 callbacks suppressed [ 1419.813697][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813731][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813759][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813787][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813815][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813843][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813872][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813900][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813928][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.813958][T11453] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 1419.814967][T11453] apple 0003:05AC:0250.0013: reserved main item tag 0xe [ 1419.815007][T11453] apple 0003:05AC:0250.0013: ignoring exceeding usage max [ 1419.911914][T11453] apple 0003:05AC:0250.0013: unknown global tag 0xe [ 1419.911942][T11453] apple 0003:05AC:0250.0013: item 0 2 1 14 parsing failed [ 1419.912800][T11453] apple 0003:05AC:0250.0013: parse failed [ 1419.912918][T11453] apple 0003:05AC:0250.0013: probe with driver apple failed with error -22 [ 1419.997445][T11453] usb 4-1: USB disconnect, device number 18 [ 1420.306923][T16835] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1420.386869][T16835] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1420.437978][T16835] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1420.511333][T16835] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1420.925731][T17704] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1421.102734][T16807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.250280][T16807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.290362][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.311303][ T7901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.402446][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.402591][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.513385][T16835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.670346][T16835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.715187][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.726857][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.782924][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.783067][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1423.004014][T16807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.114026][T16835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.279537][T17816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.716020][T16807] veth0_vlan: entered promiscuous mode [ 1424.720337][T16835] veth0_vlan: entered promiscuous mode [ 1424.856553][T16835] veth1_vlan: entered promiscuous mode [ 1424.909265][T16807] veth1_vlan: entered promiscuous mode [ 1425.189179][T16807] veth0_macvtap: entered promiscuous mode [ 1425.196545][T16835] veth0_macvtap: entered promiscuous mode [ 1425.239800][T16807] veth1_macvtap: entered promiscuous mode [ 1425.243808][T16835] veth1_macvtap: entered promiscuous mode [ 1425.386852][T16807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.396841][T16835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.465220][T16835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.467919][T16807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.577120][ T6947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.578967][ T6947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.579224][ T6947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.579466][ T6947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.579712][ T6947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.580633][ T6947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.580952][ T6947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.581924][ T6947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.666097][ T6947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.666121][ T6947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.980419][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.980442][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.204059][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.204080][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.384686][ T6250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.384711][ T6250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.477506][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.477582][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.980289][ T5954] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1429.130512][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 1429.148751][ T5954] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1429.148782][ T5954] usb 5-1: config 0 has no interface number 0 [ 1429.185787][ T5954] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1429.185823][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.185844][ T5954] usb 5-1: Product: syz [ 1429.185860][ T5954] usb 5-1: Manufacturer: syz [ 1429.185875][ T5954] usb 5-1: SerialNumber: syz [ 1429.252994][ T5954] usb 5-1: config 0 descriptor?? [ 1429.269988][ T5954] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1429.694447][ T5954] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1429.800615][T17957] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1429.800615][T17957] The task syz.6.3136 (17957) triggered the difference, watch for misbehavior. [ 1429.882586][ T5954] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1430.073713][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1430.089855][ T5954] usb 5-1: USB disconnect, device number 23 [ 1430.159785][ T5954] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1430.292922][ T5954] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1430.298186][ T5954] quatech2 5-1:0.51: device disconnected [ 1431.380146][ T5796] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1431.605784][ T5796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1431.605840][ T5796] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1431.605865][ T5796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.677711][ T5796] usb 7-1: config 0 descriptor?? [ 1431.681886][T17978] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1432.213970][ T5796] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1432.445427][ T5796] usb 7-1: USB disconnect, device number 2 [ 1432.998500][T18002] fido_id[18002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1434.459211][T18047] sd 0:0:1:0: device reset [ 1435.460084][ T9666] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1435.612428][ T9666] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1435.612458][ T9666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.617508][ T9666] usb 5-1: config 0 descriptor?? [ 1435.626351][ T9666] cp210x 5-1:0.0: cp210x converter detected [ 1435.642975][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1435.670069][ T5954] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1435.821179][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1435.839897][ T5954] usb 7-1: Using ep0 maxpacket: 32 [ 1435.847320][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.847373][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.847414][ T5954] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1435.847446][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.867257][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1435.867367][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.867393][ T9] usb 6-1: Product: syz [ 1435.867409][ T9] usb 6-1: Manufacturer: syz [ 1435.867426][ T9] usb 6-1: SerialNumber: syz [ 1435.927502][ T5954] usb 7-1: config 0 descriptor?? [ 1435.950341][ T9] usb 6-1: config 0 descriptor?? [ 1436.093812][ T9666] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1436.224928][T11453] usb 6-1: USB disconnect, device number 2 [ 1436.320342][ T9666] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1436.364319][ T5954] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1436.509878][ T1234] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1436.514313][ T9666] usb 5-1: USB disconnect, device number 24 [ 1436.529230][ T9666] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1436.622753][T11453] usb 7-1: USB disconnect, device number 3 [ 1436.650945][ T9666] cp210x 5-1:0.0: device disconnected [ 1436.660359][ T1234] usb 4-1: Using ep0 maxpacket: 32 [ 1436.663374][ T1234] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1436.663411][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.714363][ T1234] usb 4-1: config 0 descriptor?? [ 1436.948094][ T1234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1436.963324][ T1234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1436.964468][ T1234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1436.964533][ T1234] usb 4-1: media controller created [ 1437.015557][ T1234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1437.163820][ T1234] az6027: usb out operation failed. (-71) [ 1437.164243][ T1234] az6027: usb out operation failed. (-71) [ 1437.164258][ T1234] stb0899_attach: Driver disabled by Kconfig [ 1437.164269][ T1234] az6027: no front-end attached [ 1437.164269][ T1234] [ 1437.168090][ T1234] az6027: usb out operation failed. (-71) [ 1437.168110][ T1234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1437.178067][ T1234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 1437.187340][ T1234] dvb-usb: schedule remote query interval to 400 msecs. [ 1437.187369][ T1234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1437.204992][ T1234] usb 4-1: USB disconnect, device number 19 [ 1437.849785][T11453] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1437.882364][ T1234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1438.000248][T11453] usb 7-1: Using ep0 maxpacket: 16 [ 1438.002036][T18155] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 1438.002435][T11453] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.002506][T11453] usb 7-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1438.003075][T18155] macsec1: entered promiscuous mode [ 1438.003324][T18155] macsec1: entered allmulticast mode [ 1438.003344][T18155] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 1438.005532][T11453] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1438.005560][T11453] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.005582][T11453] usb 7-1: Product: syz [ 1438.005596][T11453] usb 7-1: Manufacturer: syz [ 1438.005611][T11453] usb 7-1: SerialNumber: syz [ 1438.299797][ T1234] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1438.463618][ T1234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.463684][ T1234] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1438.466989][ T1234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1438.467021][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.467042][ T1234] usb 4-1: Product: syz [ 1438.467057][ T1234] usb 4-1: Manufacturer: syz [ 1438.467073][ T1234] usb 4-1: SerialNumber: syz [ 1438.935851][T11400] usb 7-1: USB disconnect, device number 4 [ 1439.635299][ T1234] cdc_ncm 4-1:1.0: bind() failure [ 1439.659752][ T1234] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1439.662327][ T1234] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1439.717280][ T1234] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1439.759730][ T1234] usb 4-1: USB disconnect, device number 20 [ 1440.377582][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 1440.756241][ T38] kauditd_printk_skb: 36 callbacks suppressed [ 1440.756260][ T38] audit: type=1326 audit(2000000152.862:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.3.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348a7deec9 code=0x7fc00000 [ 1441.367708][ T38] audit: type=1326 audit(2000000153.472:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.3.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f348a7deec9 code=0x7fc00000 [ 1441.540102][T18281] ceph: No mds server is up or the cluster is laggy [ 1442.042800][ T38] audit: type=1326 audit(2000000154.152:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18305 comm="syz.5.3290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb47b48eec9 code=0x0 [ 1442.159584][T11453] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1442.199696][T11400] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1442.309561][T11453] usb 4-1: Using ep0 maxpacket: 16 [ 1442.313797][T11453] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1442.313830][T11453] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1442.313857][T11453] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.313886][T11453] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1442.317697][T11453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1442.317731][T11453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.317753][T11453] usb 4-1: Product: syz [ 1442.317770][T11453] usb 4-1: Manufacturer: syz [ 1442.317785][T11453] usb 4-1: SerialNumber: syz [ 1442.398292][T11400] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1442.398329][T11400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1442.398357][T11400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1442.398380][T11400] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1442.398426][T11400] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1442.398451][T11400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.468735][T11400] usb 7-1: config 0 descriptor?? [ 1442.766806][T11453] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1442.945801][T11400] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1444.993190][ T1234] usb 4-1: USB disconnect, device number 21 [ 1445.023198][ T9] usb 7-1: USB disconnect, device number 5 [ 1445.038854][ T1234] usblp0: removed [ 1445.384981][T11453] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1445.590155][T11453] usb 6-1: Using ep0 maxpacket: 8 [ 1445.594666][T11453] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1445.594703][T11453] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1445.594757][T11453] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1445.594784][T11453] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1445.594831][T11453] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1445.594857][T11453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.706431][T18432] binder: 18431:18432 ioctl c0306201 200000000200 returned -14 [ 1445.935598][T18442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1445.935635][T18442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1445.960164][T11453] usb 6-1: GET_CAPABILITIES returned 0 [ 1445.960217][T11453] usbtmc 6-1:16.0: can't read capabilities [ 1446.109433][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1446.242629][ T5809] usb 6-1: USB disconnect, device number 3 [ 1446.259280][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1446.262801][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1446.262831][ T9] usb 5-1: config 179 has no interface number 0 [ 1446.262881][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1446.262911][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1446.262940][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1446.262968][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1446.262998][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1446.263046][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1446.263070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.282214][T18441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1447.003055][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1447.003130][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1447.003616][T11438] usb 5-1: USB disconnect, device number 25 [ 1447.285699][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1447.385184][ T38] audit: type=1326 audit(2000000159.493:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18476 comm="syz.3.3368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f348a7deec9 code=0x0 [ 1448.569331][T11453] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1448.719183][T11453] usb 4-1: Using ep0 maxpacket: 8 [ 1448.721597][T11453] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1448.721619][T11453] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1448.721636][T11453] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1448.721654][T11453] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1448.721685][T11453] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1448.721701][T11453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.015741][T11453] usb 4-1: GET_CAPABILITIES returned 0 [ 1449.015791][T11453] usbtmc 4-1:16.0: can't read capabilities [ 1449.242614][T11453] usb 4-1: USB disconnect, device number 22 [ 1449.608027][T18567] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1452.527582][T18640] loop6: detected capacity change from 0 to 7 [ 1452.529140][T18640] Dev loop6: unable to read RDB block 7 [ 1452.529187][T18640] loop6: AHDI p1 p2 [ 1452.529222][T18640] loop6: partition table partially beyond EOD, truncated [ 1452.529355][T18640] loop6: p1 start 926365495 is beyond EOD, truncated [ 1452.572905][T18642] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3441'. [ 1452.659026][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1452.808992][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1452.811692][ T9] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1452.811720][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1452.830158][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1452.830198][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.830224][ T9] usb 7-1: Product: syz [ 1452.830241][ T9] usb 7-1: Manufacturer: syz [ 1452.830259][ T9] usb 7-1: SerialNumber: syz [ 1453.285794][ T9] usb 7-1: 0:2 : does not exist [ 1453.302186][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1454.253483][ T9] usb 7-1: USB disconnect, device number 6 [ 1454.795134][T18678] veth1_to_bond: entered allmulticast mode [ 1454.795238][T18684] veth1_to_bond: entered promiscuous mode [ 1454.796587][T18675] veth1_to_bond: left promiscuous mode [ 1454.796764][T18675] veth1_to_bond: left allmulticast mode [ 1455.122636][T18694] Bluetooth: hci0: unsupported parameter 133 [ 1455.122659][T18694] Bluetooth: hci0: unsupported parameter 1792 [ 1455.122673][T18694] Bluetooth: hci0: unsupported parameter 133 [ 1455.122686][T18694] Bluetooth: hci0: unsupported parameter 1792 [ 1456.668718][T11400] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1456.821476][T11400] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.821508][T11400] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1456.823080][T11400] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1456.823111][T11400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1456.823133][T11400] usb 6-1: SerialNumber: syz [ 1456.935695][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3493'. [ 1457.027818][T18757] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1457.122229][T11400] usb 6-1: 0:2 : does not exist [ 1457.185327][T11400] usb 6-1: USB disconnect, device number 4 [ 1457.273279][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.448607][ T5809] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1458.599309][ T5809] usb 7-1: Using ep0 maxpacket: 8 [ 1458.605837][ T5809] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1458.605871][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.605892][ T5809] usb 7-1: Product: syz [ 1458.605907][ T5809] usb 7-1: Manufacturer: syz [ 1458.605921][ T5809] usb 7-1: SerialNumber: syz [ 1458.616440][ T5809] usb 7-1: config 0 descriptor?? [ 1458.624620][ T5809] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1458.828581][T11453] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1458.980974][T11453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.981024][T11453] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1458.981051][T11453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.986602][T11453] usb 5-1: config 0 descriptor?? [ 1459.429202][T11453] lenovo 0003:17EF:6047.0017: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1460.088642][ T5809] gspca_sonixj: i2c_w8 err -71 [ 1460.170189][ T5809] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1460.178171][ T5809] usb 7-1: USB disconnect, device number 7 [ 1460.353878][T18877] kvm: emulating exchange as write [ 1460.486249][ T5809] usb 5-1: USB disconnect, device number 26 [ 1461.010969][T18903] KVM: debugfs: duplicate directory 18903-5 [ 1461.398452][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1461.574642][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1461.574676][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.574698][ T9] usb 7-1: Product: syz [ 1461.574713][ T9] usb 7-1: Manufacturer: syz [ 1461.574729][ T9] usb 7-1: SerialNumber: syz [ 1461.588828][ T9] usb 7-1: config 0 descriptor?? [ 1462.024308][ T9] airspy 7-1:0.0: Board ID: 00 [ 1462.024333][ T9] airspy 7-1:0.0: Firmware version: [ 1462.318534][T11453] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1462.472215][T11453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.472251][T11453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.472275][T11453] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1462.472329][T11453] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1462.472355][T11453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.477878][T11453] usb 5-1: config 0 descriptor?? [ 1462.999410][T11453] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1463.135746][ T9] airspy 7-1:0.0: Registered as swradio24 [ 1463.135773][ T9] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1463.265245][ T9] usb 7-1: USB disconnect, device number 8 [ 1463.395244][T11438] usb 5-1: USB disconnect, device number 27 [ 1465.393395][T19050] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1467.429015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.712437][T11438] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1467.858217][T11438] usb 6-1: Using ep0 maxpacket: 8 [ 1467.881283][T11438] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1467.881316][T11438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.881338][T11438] usb 6-1: Product: syz [ 1467.881352][T11438] usb 6-1: Manufacturer: syz [ 1467.881368][T11438] usb 6-1: SerialNumber: syz [ 1467.912742][T11438] usb 6-1: config 0 descriptor?? [ 1468.151710][T11438] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1468.668551][T11438] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1468.691545][T11438] usb 6-1: USB disconnect, device number 5 [ 1470.176939][T19161] Device name cannot be null; rc = [-22] [ 1470.963837][T19177] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3656'. [ 1471.599184][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3679'. [ 1472.344475][T11453] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1472.510135][T11453] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.510166][T11453] usb 7-1: config 0 has no interface number 0 [ 1472.510222][T11453] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1472.510252][T11453] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1472.510294][T11453] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1472.510320][T11453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.516717][T11453] usb 7-1: config 0 descriptor?? [ 1472.526902][T19210] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1472.618128][T11453] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1472.791168][T11438] usb 7-1: USB disconnect, device number 9 [ 1477.283463][T19332] bridge0: port 3(syz_tun) entered blocking state [ 1477.283669][T19332] bridge0: port 3(syz_tun) entered disabled state [ 1477.285286][T19332] syz_tun: entered allmulticast mode [ 1477.330952][T19332] syz_tun: entered promiscuous mode [ 1477.410869][T19332] bridge0: port 3(syz_tun) entered blocking state [ 1477.411082][T19332] bridge0: port 3(syz_tun) entered forwarding state [ 1479.317683][T19356] netfs: Couldn't get user pages (rc=-14) [ 1481.107469][ T5821] Bluetooth: hci2: command 0x1003 tx timeout [ 1481.107552][ T9877] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1482.334405][T19419] input: syz0 as /devices/virtual/input/input22 [ 1484.878977][T19453] binder: 19452:19453 ioctl c0306201 200000000500 returned -14 [ 1485.306210][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3800'. [ 1485.370906][T19479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1485.537680][T19483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1485.538257][T19483] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1485.539952][T19483] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1485.762518][T19479] macvlan2: entered promiscuous mode [ 1485.762545][T19479] macvlan2: entered allmulticast mode [ 1485.762933][T19479] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 1486.897088][ T5809] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1487.704705][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1487.773343][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.773392][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.773418][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1487.773464][ T5809] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1487.773489][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.838504][T19529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1487.838654][T19529] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1487.861354][ T5809] usb 4-1: config 0 descriptor?? [ 1487.981546][T19529] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1488.019572][T19529] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1488.099843][ T9877] Bluetooth: hci0: unexpected cc 0x203c length: 9 > 1 [ 1488.099894][ T9877] Bluetooth: hci0: unexpected event for opcode 0x203c [ 1488.106915][T19529] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1488.107484][T19529] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1488.310520][ T5809] usbhid 4-1:0.0: can't add hid device: -71 [ 1488.310662][ T5809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1488.315255][ T5809] usb 4-1: USB disconnect, device number 23 [ 1488.422494][T19529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1488.422592][T19529] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1489.117314][T19529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1489.117403][T19529] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1489.228988][T19529] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1489.320874][T19529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1489.320959][T19529] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1489.380196][T19529] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1489.999976][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.000050][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.036110][ T9877] Bluetooth: hci1: command 0x0406 tx timeout [ 1491.315773][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 1491.316230][ T9877] Bluetooth: hci0: command 0x0406 tx timeout [ 1491.478596][ T9877] Bluetooth: hci5: command 0x0406 tx timeout [ 1491.478645][ T9877] Bluetooth: hci3: command 0x0c1a tx timeout [ 1492.181143][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 1493.462139][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 1493.462181][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 1493.506965][ T9877] Bluetooth: hci3: command 0x0c1a tx timeout [ 1493.507005][ T9877] Bluetooth: hci5: command 0x0406 tx timeout [ 1494.230521][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 1495.634899][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 1496.081999][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 1496.306498][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 1499.529781][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3859'. [ 1499.773942][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802822f800: rx timeout, send abort [ 1500.274421][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802822f800: abort rx timeout. Force session deactivation [ 1500.275900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c88e400: rx timeout, send abort [ 1500.791873][ C1] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff88805c88e400: abort rx timeout. Force session deactivation [ 1503.658077][T19688] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1503.758544][ T38] audit: type=1326 audit(2000000217.872:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.758849][ T38] audit: type=1326 audit(2000000217.872:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.771377][ T38] audit: type=1326 audit(2000000217.882:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.771445][ T38] audit: type=1326 audit(2000000217.882:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.771501][ T38] audit: type=1326 audit(2000000217.882:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.775030][ T38] audit: type=1326 audit(2000000217.882:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4f86dd710 code=0x7ffc0000 [ 1503.775991][ T38] audit: type=1326 audit(2000000217.882:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.777803][ T38] audit: type=1326 audit(2000000217.892:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.782916][ T38] audit: type=1326 audit(2000000217.892:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1503.828298][ T38] audit: type=1326 audit(2000000217.912:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f86deec9 code=0x7ffc0000 [ 1510.876574][T19750] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3900'. [ 1514.263131][T19781] fuse: Unknown parameter 'user_i00000000000000000000' [ 1515.550459][T19787] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3908'. [ 1521.509864][T19844] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1521.509886][T19844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1521.540498][T19844] vhci_hcd vhci_hcd.0: Device attached [ 1521.561721][T19846] vhci_hcd: connection closed [ 1521.875060][ T9666] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1521.912654][T18663] vhci_hcd: stop threads [ 1521.923540][T18663] vhci_hcd: release socket [ 1521.954949][T18663] vhci_hcd: disconnect device [ 1527.127345][ T9666] vhci_hcd: vhci_device speed not set [ 1527.880944][T19894] sctp: [Deprecated]: syz.4.3949 (pid 19894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1527.880944][T19894] Use struct sctp_sack_info instead [ 1531.112774][T19915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1540.478797][ T1234] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1541.830524][ T1234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.830587][ T1234] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1541.830614][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.167903][ T1234] usb 4-1: config 0 descriptor?? [ 1542.238432][ T1234] pwc: Askey VC010 type 2 USB webcam detected. [ 1543.162688][ T1234] pwc: send_video_command error -71 [ 1543.162720][ T1234] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1543.162861][ T1234] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1543.197759][ T1234] usb 4-1: USB disconnect, device number 24 [ 1543.315464][T20009] tipc: Started in network mode [ 1543.315515][T20009] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1543.316744][T20009] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1543.325951][T20009] tipc: Enabled bearer , priority 10 [ 1544.553805][T11400] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1544.577133][T11453] tipc: Node number set to 1 [ 1544.760028][T11400] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1544.760062][T11400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.760086][T11400] usb 7-1: Product: syz [ 1544.760110][T11400] usb 7-1: Manufacturer: syz [ 1544.760125][T11400] usb 7-1: SerialNumber: syz [ 1544.883757][T11400] usb 7-1: config 0 descriptor?? [ 1544.986017][T20039] random: crng reseeded on system resumption [ 1545.094829][T11400] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1548.747774][T20050] kvm: kvm [20049]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1548.848986][T20050] kvm: kvm [20049]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1549.176828][T20066] netlink: 'syz.3.4008': attribute type 3 has an invalid length. [ 1549.176855][T20066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'. [ 1549.379024][T20050] kvm: kvm [20049]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1549.381971][T20050] kvm: kvm [20049]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1549.502255][T11400] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1549.558556][T11400] usb 7-1: USB disconnect, device number 10 [ 1550.009426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.378771][T20082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1550.434899][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.524099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.562759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.696683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.800586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.411840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.671336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.993251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1552.006953][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.007028][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.807800][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4017'. [ 1558.710583][T20120] delete_channel: no stack [ 1559.901263][T20154] Bluetooth: hci0: service_discovery: too big uuid_count value 48429 [ 1562.062793][ T5796] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1562.541825][ T5796] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1562.541864][ T5796] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1562.541894][ T5796] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1562.541938][ T5796] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1562.541963][ T5796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.121450][T20173] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1563.183643][ T5796] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1564.343709][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1564.362072][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1564.401570][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1564.401867][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1564.406907][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1564.408101][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1564.409009][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1564.409216][T20197] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1564.409237][T20197] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1564.691573][ T5796] usb 7-1: USB disconnect, device number 11 [ 1565.228841][ T5954] hid_parser_main: 52 callbacks suppressed [ 1565.228870][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.228906][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.228936][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.228965][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.228994][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.229022][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.229051][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.229080][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.229109][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.229137][ T5954] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1565.333084][ T5954] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on sy [ 1571.998323][T20255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.201000][ T9877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1586.236227][ T9877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1586.240636][ T9877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1586.315166][T18636] bridge0: port 3(syz_tun) entered disabled state [ 1586.620981][ T9877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1586.624547][ T9877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1586.740532][T18636] syz_tun (unregistering): left allmulticast mode [ 1586.740563][T18636] syz_tun (unregistering): left promiscuous mode [ 1586.760864][T18636] bridge0: port 3(syz_tun) entered disabled state [ 1588.447648][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1588.467808][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1588.469628][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1588.471024][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1588.474612][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1589.664077][ T5821] Bluetooth: hci2: command tx timeout [ 1590.625672][ T5821] Bluetooth: hci5: command tx timeout [ 1591.298054][T12953] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.298096][T12953] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.239245][ T5821] Bluetooth: hci2: command tx timeout [ 1592.781228][ T5821] Bluetooth: hci5: command tx timeout [ 1594.301113][ T5821] Bluetooth: hci2: command tx timeout [ 1595.063992][ T5821] Bluetooth: hci5: command tx timeout [ 1596.381171][ T5821] Bluetooth: hci2: command tx timeout [ 1597.100817][ T5821] Bluetooth: hci5: command tx timeout [ 1597.985542][T12953] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.985571][T12953] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.442018][T12953] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.442059][T12953] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.786723][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.786779][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.356152][T12953] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.356209][T12953] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.684416][T20306] chnl_net:caif_netlink_parms(): no params data found [ 1617.279705][T20324] chnl_net:caif_netlink_parms(): no params data found [ 1621.587039][T20306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.587252][T20306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.587549][T20306] bridge_slave_0: entered allmulticast mode [ 1621.620681][T20306] bridge_slave_0: entered promiscuous mode [ 1621.829644][T20306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.829785][T20306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.830076][T20306] bridge_slave_1: entered allmulticast mode [ 1621.901792][T20306] bridge_slave_1: entered promiscuous mode [ 1628.944445][T20306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.944779][T12953] bridge_slave_1: left allmulticast mode [ 1628.944804][T12953] bridge_slave_1: left promiscuous mode [ 1628.945109][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.100715][T12953] bridge_slave_0: left allmulticast mode [ 1629.100748][T12953] bridge_slave_0: left promiscuous mode [ 1629.101016][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.996930][T12953] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1634.996958][T12953] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 2a:f6:23:c8:60:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1645.104888][ T9877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1645.169857][ T9877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1645.171786][ T9877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1645.176348][ T9877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1645.182618][ T9877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1645.209438][T12953] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1645.209470][T12953] gretap1 (unregistering): left allmulticast mode [ 1647.262124][ T9877] Bluetooth: hci4: command tx timeout [ 1649.321409][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1649.326114][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1649.339325][ T5821] Bluetooth: hci4: command tx timeout [ 1649.354964][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1649.356490][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1649.385945][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1651.417967][ T5821] Bluetooth: hci4: command tx timeout [ 1651.518055][ T5821] Bluetooth: hci6: command tx timeout [ 1653.510801][ T5821] Bluetooth: hci4: command tx timeout [ 1653.582295][ T5821] Bluetooth: hci6: command tx timeout [ 1655.657713][ T5821] Bluetooth: hci6: command tx timeout [ 1658.012322][ T5821] Bluetooth: hci6: command tx timeout [ 1658.158657][T12953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.014049][T12953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.741044][T12953] bond0 (unregistering): Released all slaves [ 1674.354634][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.354711][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.379839][T12953] bond1 (unregistering): Released all slaves [ 1676.438657][T12953] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1676.699774][T12953] bond2 (unregistering): Released all slaves [ 1676.774786][T20324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.774937][T20324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.775174][T20324] bridge_slave_0: entered allmulticast mode [ 1676.783641][T20324] bridge_slave_0: entered promiscuous mode [ 1676.827296][T20306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.023962][T12953] tipc: Left network mode [ 1678.123796][T20746] chnl_net:caif_netlink_parms(): no params data found [ 1693.594318][T20746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.595444][T20746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.595803][T20746] bridge_slave_0: entered allmulticast mode [ 1693.607617][T20746] bridge_slave_0: entered promiscuous mode [ 1695.254166][T12953] hsr_slave_0: left promiscuous mode [ 1695.295628][T12953] hsr_slave_1: left promiscuous mode [ 1695.298315][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1695.298358][T12953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1695.365923][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1695.365955][T12953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.865177][T12953] veth1_macvtap: left promiscuous mode [ 1696.865291][T12953] veth0_macvtap: left promiscuous mode [ 1696.865573][T12953] veth1_vlan: left promiscuous mode [ 1696.865760][T12953] veth0_vlan: left promiscuous mode [ 1707.800987][ T9877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1707.859709][ T9877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1707.865107][ T9877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1707.876320][ T9877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1707.879747][ T9877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1709.633624][ T9877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1709.672697][ T9877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1709.688096][ T9877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1709.691230][ T9877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1709.692083][ T9877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1711.030892][ T9877] Bluetooth: hci2: command tx timeout [ 1711.814378][ T9877] Bluetooth: hci5: command tx timeout [ 1713.095315][ T9877] Bluetooth: hci2: command tx timeout [ 1713.894165][ T9877] Bluetooth: hci5: command tx timeout [ 1715.176484][ T9877] Bluetooth: hci2: command tx timeout [ 1715.974055][ T9877] Bluetooth: hci5: command tx timeout [ 1717.254580][ T9877] Bluetooth: hci2: command tx timeout [ 1718.053930][ T9877] Bluetooth: hci5: command tx timeout [ 1735.485483][T12953] team0 (unregistering): Port device team_slave_1 removed [ 1735.660254][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.660331][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1739.855535][T12953] team0 (unregistering): Port device team_slave_0 removed [ 1755.615809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.672006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1755.937681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.477381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.555838][ C1] vkms_vblank_simulate: vblank timer overrun [ 1756.674856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.204286][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.430850][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.540626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.690750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.822301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.981905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1758.077558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1759.975657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.084239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.513459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1763.912560][ T9666] IPVS: starting estimator thread 0... [ 1764.241415][T21521] IPVS: using max 7 ests per chain, 16800 per kthread [ 1768.263003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.583054][T21553] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1769.592359][T21553] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1769.649651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.701181][T21553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1769.737358][T21553] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1769.738274][T21553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1770.008676][T21553] Bluetooth: hci4: command 0x0406 tx timeout [ 1770.116180][T20746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.116321][T20746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.116617][T20746] bridge_slave_1: entered allmulticast mode [ 1770.120744][T20746] bridge_slave_1: entered promiscuous mode [ 1770.141636][T20718] chnl_net:caif_netlink_parms(): no params data found [ 1770.526479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.479004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.811259][ T5821] Bluetooth: hci7: command tx timeout [ 1772.198652][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.040326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.487896][ T9877] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1773.508842][ T9877] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1773.511530][ T9877] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1773.525238][ T9877] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1773.529747][ T9877] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1773.731356][ T9877] Bluetooth: hci6: command 0x0406 tx timeout [ 1773.998697][ T9877] Bluetooth: hci7: command tx timeout [ 1775.766341][T21553] Bluetooth: hci8: command tx timeout [ 1776.103067][T21553] Bluetooth: hci7: command tx timeout [ 1777.851758][T21553] Bluetooth: hci8: command tx timeout [ 1778.137968][T21553] Bluetooth: hci7: command tx timeout [ 1780.341123][T21553] Bluetooth: hci8: command tx timeout [ 1782.392278][T21553] Bluetooth: hci8: command tx timeout [ 1785.246023][T21551] chnl_net:caif_netlink_parms(): no params data found [ 1797.351691][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.351755][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.608296][T21551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.608452][T21551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.608745][T21551] bridge_slave_0: entered allmulticast mode [ 1797.637194][T21551] bridge_slave_0: entered promiscuous mode [ 1797.670244][T21551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.670383][T21551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.670674][T21551] bridge_slave_1: entered allmulticast mode [ 1797.673596][T21551] bridge_slave_1: entered promiscuous mode [ 1804.226219][T21551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.062886][T21551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1816.787461][T21579] chnl_net:caif_netlink_parms(): no params data found [ 1817.123491][T21551] team0: Port device team_slave_0 added [ 1817.193515][T21551] team0: Port device team_slave_1 added [ 1819.132610][T12953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.560593][T21551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1820.560613][T21551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1820.560643][T21551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1824.523227][T12953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.817863][T21551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1824.817882][T21551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1824.817912][T21551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.714169][ C1] vkms_vblank_simulate: vblank timer overrun [ 1826.416507][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.208431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.356368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.957658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.965941][T12953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.412351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1828.681316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1828.727272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1828.812188][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1828.908513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1829.390837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1829.392279][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1829.428186][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1829.429505][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1829.431631][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1829.601051][T21579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.601192][T21579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.601514][T21579] bridge_slave_0: entered allmulticast mode [ 1829.612662][T21579] bridge_slave_0: entered promiscuous mode [ 1829.889888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1832.516680][T21553] Bluetooth: hci2: command tx timeout [ 1833.930743][T12953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.609878][T21553] Bluetooth: hci2: command tx timeout [ 1834.988104][T21579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.988249][T21579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.988535][T21579] bridge_slave_1: entered allmulticast mode [ 1834.991413][T21579] bridge_slave_1: entered promiscuous mode [ 1835.388370][T22012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1835.839177][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1835.855675][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1835.859099][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1835.861224][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1835.862806][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1837.215877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.233651][ T5821] Bluetooth: hci2: command tx timeout [ 1837.434789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.493967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.978058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1838.214946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1838.378039][T21553] Bluetooth: hci4: command tx timeout [ 1838.397250][ C1] vkms_vblank_simulate: vblank timer overrun [ 1838.515089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.027246][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.243733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.385016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.537969][ T5821] Bluetooth: hci2: command tx timeout [ 1839.563786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.748626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.563387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.626715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.653086][ T5821] Bluetooth: hci4: command tx timeout [ 1841.289173][ C1] vkms_vblank_simulate: vblank timer overrun [ 1841.514062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1843.732075][ T5821] Bluetooth: hci4: command tx timeout [ 1846.326717][ T5821] Bluetooth: hci4: command tx timeout [ 1846.880906][T12953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1846.880949][T12953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.758686][T22178] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 1853.449797][T12953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1853.449837][T12953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.855799][T12953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1855.855841][T12953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.312668][T21982] chnl_net:caif_netlink_parms(): no params data found [ 1860.149199][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.149277][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.510163][T12953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1860.510194][T12953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.567573][T22013] chnl_net:caif_netlink_parms(): no params data found [ 1865.075315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1865.138547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1865.455324][T21982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.455467][T21982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.456034][T21982] bridge_slave_0: entered allmulticast mode [ 1865.459223][T21982] bridge_slave_0: entered promiscuous mode [ 1865.549502][T21982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.553467][T21982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.557665][T21982] bridge_slave_1: entered allmulticast mode [ 1865.571630][T21982] bridge_slave_1: entered promiscuous mode [ 1866.315958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.259072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.482145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1868.488019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1868.580309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1868.653433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.483996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.787693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.002083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.050548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.110992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.173301][T22013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.173727][T22013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.173979][T22013] bridge_slave_0: entered allmulticast mode [ 1870.202043][T22013] bridge_slave_0: entered promiscuous mode [ 1870.253610][T21982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.253957][T22013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.254093][T22013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.254301][T22013] bridge_slave_1: entered allmulticast mode [ 1870.287925][T22013] bridge_slave_1: entered promiscuous mode [ 1870.308187][T21982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.428114][T12953] bridge_slave_1: left allmulticast mode [ 1871.428146][T12953] bridge_slave_1: left promiscuous mode [ 1871.428405][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.807199][T12953] bridge_slave_0: left allmulticast mode [ 1871.807233][T12953] bridge_slave_0: left promiscuous mode [ 1871.807503][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.829500][T12953] bridge_slave_1: left allmulticast mode [ 1872.829534][T12953] bridge_slave_1: left promiscuous mode [ 1872.829831][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.967378][T12953] bridge_slave_0: left allmulticast mode [ 1872.967411][T12953] bridge_slave_0: left promiscuous mode [ 1872.967678][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.937278][T12953] bridge_slave_0: left allmulticast mode [ 1873.937312][T12953] bridge_slave_0: left promiscuous mode [ 1873.937588][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.057476][T12953] bridge_slave_1: left allmulticast mode [ 1874.057510][T12953] bridge_slave_1: left promiscuous mode [ 1874.057778][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.983540][T12953] bridge_slave_0: left allmulticast mode [ 1874.983574][T12953] bridge_slave_0: left promiscuous mode [ 1874.983836][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.155420][T12953] bridge_slave_1: left allmulticast mode [ 1875.155690][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.439928][T12953] bridge_slave_0: left allmulticast mode [ 1875.441739][T12953] bridge_slave_0: left promiscuous mode [ 1875.745302][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.279663][T12953] bond0 (unregistering): Released all slaves [ 1881.611576][T12953] bond0 (unregistering): Released all slaves [ 1882.686846][T12953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1882.885625][T12953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.801317][T12953] bond0 (unregistering): Released all slaves [ 1886.483186][T12953] bond0 (unregistering): Released all slaves [ 1890.491668][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1890.510105][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1890.512002][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1890.513990][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1890.545012][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1892.734844][T21553] Bluetooth: hci5: command tx timeout [ 1894.771264][T21553] Bluetooth: hci5: command tx timeout [ 1896.021648][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1896.038485][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1896.053527][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1896.057402][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1896.072172][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1897.068357][T21553] Bluetooth: hci5: command tx timeout [ 1898.539049][T21553] Bluetooth: hci6: command tx timeout [ 1899.451866][T21553] Bluetooth: hci5: command tx timeout [ 1899.878319][T22633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1900.752362][T21553] Bluetooth: hci6: command tx timeout [ 1900.793212][T22646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1902.764575][T21553] Bluetooth: hci6: command tx timeout [ 1903.715068][T12953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1903.807752][T12953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1903.858781][T12953] bond0 (unregistering): Released all slaves [ 1905.070981][T21553] Bluetooth: hci6: command tx timeout [ 1905.310489][T22684] netlink: 'syz.6.4922': attribute type 1 has an invalid length. [ 1909.399220][T22745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1911.568503][T12953] dvmrp1 (unregistering): left allmulticast mode [ 1916.968315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1917.900424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.361039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.598973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.774025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.005876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.139056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.279684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.630500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.690379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.864157][T22861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1921.908278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.951329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1924.389101][T22885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1925.196126][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.196204][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.301639][T12953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1926.305515][T12953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1927.976040][T22914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1928.308747][T12953] bond0 (unregistering): Released all slaves [ 1933.453840][T12953] tipc: Disabling bearer [ 1933.453993][T12953] tipc: Left network mode [ 1937.031560][T23007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1938.043088][T23021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1939.072018][T22592] chnl_net:caif_netlink_parms(): no params data found [ 1939.898392][T23040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1940.948516][T22544] chnl_net:caif_netlink_parms(): no params data found [ 1941.548446][T23064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1943.074807][T23075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1945.738541][T12953] mac80211_hwsim hwsim39 wlan0 (unregistering): left allmulticast mode [ 1946.006379][T23102] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1946.006531][T23102] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1947.234269][T22592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.234412][T22592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.234709][T22592] bridge_slave_0: entered allmulticast mode [ 1947.296847][T22592] bridge_slave_0: entered promiscuous mode [ 1949.067692][T23132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1949.142306][T22592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.142457][T22592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.142698][T22592] bridge_slave_1: entered allmulticast mode [ 1949.145495][T22592] bridge_slave_1: entered promiscuous mode [ 1950.995516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1951.310607][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1951.327803][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1951.329696][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1951.340569][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1951.367528][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1951.563780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1951.839083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.084435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.389359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.546623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.709608][T23164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1952.939500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.108843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.260703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.385294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.667888][ T5821] Bluetooth: hci2: command tx timeout [ 1953.721233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.956634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1954.348941][ C1] vkms_vblank_simulate: vblank timer overrun [ 1954.722857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1954.780747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1955.160064][T23182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1955.778231][ T5821] Bluetooth: hci2: command tx timeout [ 1958.022921][T23202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1958.070333][ T5821] Bluetooth: hci2: command tx timeout [ 1958.736718][T23211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1959.882145][T12953] hsr_slave_0: left promiscuous mode [ 1960.718911][T21553] Bluetooth: hci2: command tx timeout [ 1960.758825][T21553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1960.786187][T21553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1960.787948][T21553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1960.828598][T12953] hsr_slave_1: left promiscuous mode [ 1960.829573][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1960.829597][T12953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.860415][T21553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1960.888411][T21553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1961.032678][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1961.032711][T12953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1961.799771][T23239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.096043][T21553] Bluetooth: hci4: command tx timeout [ 1963.533885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.150046][T12953] hsr_slave_0: left promiscuous mode [ 1964.316067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.555277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.600139][T12953] hsr_slave_1: left promiscuous mode [ 1964.602606][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1964.602636][T12953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1964.665913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1965.633348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1965.635057][T21553] Bluetooth: hci4: command tx timeout [ 1966.117128][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1966.117161][T12953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.414232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.496953][ C1] vkms_vblank_simulate: vblank timer overrun [ 1967.469092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1968.022244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1968.023853][T21553] Bluetooth: hci4: command tx timeout [ 1968.076458][T23281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1968.245720][T12953] veth1_macvtap: left promiscuous mode [ 1968.245836][T12953] veth0_macvtap: left promiscuous mode [ 1968.246111][T12953] veth1_vlan: left promiscuous mode [ 1968.246313][T12953] veth0_vlan: left promiscuous mode [ 1968.344212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1968.443387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1968.583326][T12953] veth1_macvtap: left promiscuous mode [ 1968.583442][T12953] veth0_macvtap: left promiscuous mode [ 1968.583714][T12953] veth1_vlan: left promiscuous mode [ 1968.583898][T12953] veth0_vlan: left promiscuous mode [ 1970.044205][T21553] Bluetooth: hci4: command tx timeout [ 1986.823445][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.827610][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1989.194172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1989.265794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1989.327815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1989.421599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1989.581442][ C0] vkms_vblank_simulate: vblank timer overrun [ 1989.860125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.192979][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.496259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.035473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.329641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.642709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.740716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.050931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.167326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.476925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.644180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.728283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.811483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.909984][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.063393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.333717][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.413451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1997.897813][ C1] vkms_vblank_simulate: vblank timer overrun [ 1997.928816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1998.209344][T23591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1998.226052][ C1] vkms_vblank_simulate: vblank timer overrun [ 1998.364385][ C1] vkms_vblank_simulate: vblank timer overrun [ 1998.457900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1998.527461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1998.943599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.052484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.205463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1999.289501][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.148653][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.281829][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.387076][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.568326][ C1] vkms_vblank_simulate: vblank timer overrun [ 2000.609961][ C1] vkms_vblank_simulate: vblank timer overrun [ 2001.536380][ C1] vkms_vblank_simulate: vblank timer overrun [ 2001.798419][ C1] vkms_vblank_simulate: vblank timer overrun [ 2001.929236][ C1] vkms_vblank_simulate: vblank timer overrun [ 2002.241444][ C1] vkms_vblank_simulate: vblank timer overrun [ 2002.565445][ C1] vkms_vblank_simulate: vblank timer overrun [ 2002.725928][ C1] vkms_vblank_simulate: vblank timer overrun [ 2003.509810][ C1] vkms_vblank_simulate: vblank timer overrun [ 2003.712402][ C1] vkms_vblank_simulate: vblank timer overrun [ 2003.872744][ C1] vkms_vblank_simulate: vblank timer overrun [ 2004.416169][ C1] vkms_vblank_simulate: vblank timer overrun [ 2004.674921][ C1] vkms_vblank_simulate: vblank timer overrun [ 2004.767932][T12953] team0 (unregistering): Port device team_slave_1 removed [ 2005.338877][ C1] vkms_vblank_simulate: vblank timer overrun [ 2006.398116][ C1] vkms_vblank_simulate: vblank timer overrun [ 2007.021781][ C1] vkms_vblank_simulate: vblank timer overrun [ 2008.759021][T12953] team0 (unregistering): Port device team_slave_0 removed [ 2012.348827][T23723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2012.947110][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2012.963385][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2012.999577][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2013.012090][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2013.015390][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2016.820105][ T5821] Bluetooth: hci5: command tx timeout [ 2018.398684][T21553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2018.652253][T21553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2018.667078][T21553] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2018.676446][T21553] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2018.687986][T21553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2019.331353][ T5821] Bluetooth: hci5: command tx timeout [ 2020.489395][T23790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2021.460753][ T5821] Bluetooth: hci5: command tx timeout [ 2021.602034][T21553] Bluetooth: hci6: command tx timeout [ 2022.616422][T23815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2023.476719][T21553] Bluetooth: hci5: command tx timeout [ 2023.636732][T21553] Bluetooth: hci6: command tx timeout [ 2025.152257][T23839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2025.780651][T21553] Bluetooth: hci6: command tx timeout [ 2027.843995][T21553] Bluetooth: hci6: command tx timeout [ 2031.751784][T23920] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2035.896533][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.579050][ C1] vkms_vblank_simulate: vblank timer overrun [ 2036.710034][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.242051][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.311350][T23978] overlayfs: failed to resolve './file0': -2 [ 2037.366771][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.827881][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.189513][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.854421][ C1] vkms_vblank_simulate: vblank timer overrun [ 2039.269381][ C1] vkms_vblank_simulate: vblank timer overrun [ 2040.404800][ C1] vkms_vblank_simulate: vblank timer overrun [ 2041.408122][T24034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2045.215715][T24067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2046.955115][T24080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2048.031559][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2048.035168][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2050.819750][T24102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2053.102013][T24110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2053.178026][ C1] ------------[ cut here ]------------ [ 2053.178044][ C1] refcount_t: addition on 0; use-after-free. [ 2053.178794][ C1] WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 2053.178854][ C1] Modules linked in: [ 2053.178889][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2053.178918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2053.178934][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 2053.178996][ C1] Code: 00 00 e8 d9 a5 47 fd 5b 41 5e c3 cc cc cc cc cc e8 cb a5 47 fd c6 05 81 e5 29 0a 01 90 48 c7 c7 e0 e8 1c 8b e8 c7 41 0c fd 90 <0f> 0b 90 90 eb d7 e8 ab a5 47 fd c6 05 62 e5 29 0a 01 90 48 c7 c7 [ 2053.179021][ C1] RSP: 0018:ffffc90000a3f850 EFLAGS: 00010246 [ 2053.179043][ C1] RAX: f27d6e082347ae00 RBX: 0000000000000002 RCX: ffff88801bae1e00 [ 2053.179061][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2053.179078][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2053.179093][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f1c [ 2053.179112][ C1] R13: ffff888056281358 R14: ffff888056280f80 R15: dffffc0000000000 [ 2053.179131][ C1] FS: 0000000000000000(0000) GS:ffff88812713b000(0000) knlGS:0000000000000000 [ 2053.179152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2053.179169][ C1] CR2: 0000001b2fa0dff8 CR3: 000000004dfa2000 CR4: 00000000003526f0 [ 2053.179191][ C1] Call Trace: [ 2053.179201][ C1] [ 2053.179215][ C1] mptcp_schedule_work+0x164/0x1a0 [ 2053.179252][ C1] mptcp_tout_timer+0x21/0xa0 [ 2053.179290][ C1] call_timer_fn+0x17e/0x5f0 [ 2053.179327][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2053.179361][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 2053.179392][ C1] ? call_timer_fn+0xbe/0x5f0 [ 2053.179429][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2053.179474][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2053.179508][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2053.179547][ C1] __run_timer_base+0x648/0x970 [ 2053.179600][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2053.179654][ C1] run_timer_softirq+0xb7/0x180 [ 2053.179690][ C1] handle_softirqs+0x22f/0x710 [ 2053.179735][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2053.179782][ C1] run_ktimerd+0xcf/0x190 [ 2053.179819][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 2053.179853][ C1] ? schedule+0x91/0x360 [ 2053.179900][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2053.179934][ C1] smpboot_thread_fn+0x542/0xa60 [ 2053.179971][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2053.180016][ C1] kthread+0x711/0x8a0 [ 2053.180045][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2053.180079][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.180101][ C1] ? rt_spin_unlock+0x150/0x200 [ 2053.180136][ C1] ? rt_spin_unlock+0x161/0x200 [ 2053.180162][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.180188][ C1] ret_from_fork+0x436/0x7d0 [ 2053.180224][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2053.180264][ C1] ? __switch_to_asm+0x39/0x70 [ 2053.180286][ C1] ? __switch_to_asm+0x33/0x70 [ 2053.180308][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.180334][ C1] ret_from_fork_asm+0x1a/0x30 [ 2053.180378][ C1] [ 2053.180396][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2053.180414][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2053.180441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2053.180456][ C1] Call Trace: [ 2053.180466][ C1] [ 2053.180476][ C1] dump_stack_lvl+0x99/0x250 [ 2053.180513][ C1] ? __asan_memcpy+0x40/0x70 [ 2053.180543][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2053.180580][ C1] ? __pfx__printk+0x10/0x10 [ 2053.180624][ C1] vpanic+0x237/0x6d0 [ 2053.180647][ C1] ? __pfx_vpanic+0x10/0x10 [ 2053.180682][ C1] panic+0xb9/0xc0 [ 2053.180703][ C1] ? __pfx_panic+0x10/0x10 [ 2053.180745][ C1] __warn+0x31b/0x4b0 [ 2053.180766][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 2053.180800][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 2053.180830][ C1] report_bug+0x2be/0x4f0 [ 2053.180865][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 2053.180902][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 2053.180933][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 2053.180963][ C1] handle_bug+0x84/0x160 [ 2053.180989][ C1] exc_invalid_op+0x1a/0x50 [ 2053.181013][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2053.181037][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 2053.181068][ C1] Code: 00 00 e8 d9 a5 47 fd 5b 41 5e c3 cc cc cc cc cc e8 cb a5 47 fd c6 05 81 e5 29 0a 01 90 48 c7 c7 e0 e8 1c 8b e8 c7 41 0c fd 90 <0f> 0b 90 90 eb d7 e8 ab a5 47 fd c6 05 62 e5 29 0a 01 90 48 c7 c7 [ 2053.181089][ C1] RSP: 0018:ffffc90000a3f850 EFLAGS: 00010246 [ 2053.181110][ C1] RAX: f27d6e082347ae00 RBX: 0000000000000002 RCX: ffff88801bae1e00 [ 2053.181128][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2053.181144][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2053.181160][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f1c [ 2053.181179][ C1] R13: ffff888056281358 R14: ffff888056280f80 R15: dffffc0000000000 [ 2053.181220][ C1] mptcp_schedule_work+0x164/0x1a0 [ 2053.181252][ C1] mptcp_tout_timer+0x21/0xa0 [ 2053.181290][ C1] call_timer_fn+0x17e/0x5f0 [ 2053.181326][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2053.181360][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 2053.181391][ C1] ? call_timer_fn+0xbe/0x5f0 [ 2053.181427][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2053.181472][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2053.181506][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2053.181544][ C1] __run_timer_base+0x648/0x970 [ 2053.181596][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2053.181650][ C1] run_timer_softirq+0xb7/0x180 [ 2053.181686][ C1] handle_softirqs+0x22f/0x710 [ 2053.181730][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2053.181777][ C1] run_ktimerd+0xcf/0x190 [ 2053.181837][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 2053.181878][ C1] ? schedule+0x91/0x360 [ 2053.181919][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2053.181952][ C1] smpboot_thread_fn+0x542/0xa60 [ 2053.181988][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2053.182033][ C1] kthread+0x711/0x8a0 [ 2053.182062][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2053.182096][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.182117][ C1] ? rt_spin_unlock+0x150/0x200 [ 2053.182151][ C1] ? rt_spin_unlock+0x161/0x200 [ 2053.182178][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.182204][ C1] ret_from_fork+0x436/0x7d0 [ 2053.182240][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2053.182279][ C1] ? __switch_to_asm+0x39/0x70 [ 2053.182301][ C1] ? __switch_to_asm+0x33/0x70 [ 2053.182323][ C1] ? __pfx_kthread+0x10/0x10 [ 2053.182349][ C1] ret_from_fork_asm+0x1a/0x30 [ 2053.182392][ C1] [ 2053.182893][ C1] Kernel Offset: disabled