last executing test programs: 22m23.988934678s ago: executing program 32 (id=56): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fremovexattr(0xffffffffffffffff, &(0x7f0000000400)=@random={'security.', ':\'\x00'}) 22m16.566296925s ago: executing program 0 (id=99): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000680)={0x4, @pix_mp={0x41, 0x4, 0x32435750, 0x9, 0x1, [{0xcb9, 0x1}, {0x0, 0x53}, {0x0, 0x36b5}, {0x4000000, 0x4}, {0x8, 0xa18}, {0x9, 0xdc5}, {0x7, 0x80000000}, {0x5, 0x7}], 0xf9, 0x80, 0x0, 0x1, 0x2}}) 22m15.17702127s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x19) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000200)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22m12.203681075s ago: executing program 0 (id=109): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) dup2(r1, r0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="4000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r3, 0x0, 0x0) 22m7.572802962s ago: executing program 0 (id=119): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x3c, 0x0, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac0a]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9", 0xb8}, {0x0}], 0x2) 22m6.204381782s ago: executing program 0 (id=121): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e23, 0x9, @mcast1, 0x10}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x1000, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) epoll_create1(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b01000000"], 0x38}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, 0x6, 0x9) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000180)) socket$inet6(0xa, 0x2, 0x0) 22m4.656012736s ago: executing program 0 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x18, 0x0, 0x3, 0x5, 0x0, 0x711, 0x0, [@sadb_address={0x3, 0x1a, 0x0, 0x20, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x28}, 0x1, 0x7}, 0x40) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 21m49.143877164s ago: executing program 33 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x18, 0x0, 0x3, 0x5, 0x0, 0x711, 0x0, [@sadb_address={0x3, 0x1a, 0x0, 0x20, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x28}, 0x1, 0x7}, 0x40) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 15m28.540850003s ago: executing program 1 (id=864): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000040)={0xe000003, 0xf, &(0x7f0000000180)=[0x3, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x27, 0x1010, 0xfffffe00, 0x80001, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1000001, 0x4000007}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 15m26.287625826s ago: executing program 1 (id=866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) 15m19.037974313s ago: executing program 1 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xd, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x56, 0x1003, 0x1101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 15m17.785171878s ago: executing program 1 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x36, 0xfffffffffffffffe) 15m16.09670549s ago: executing program 1 (id=878): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x40, 0x0, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac08, 0xfac0a]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f33", 0x99}, {0x0}], 0x2) 15m14.672081002s ago: executing program 1 (id=882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x9, @mcast1, 0x10}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x1000, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) epoll_create1(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b010000"], 0x38}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, 0x6, 0x9) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000180)) socket$inet6(0xa, 0x2, 0x0) 14m58.888292267s ago: executing program 34 (id=882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x9, @mcast1, 0x10}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x1000, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) epoll_create1(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b010000"], 0x38}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4, 0x6, 0x9) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000180)) socket$inet6(0xa, 0x2, 0x0) 14m4.061021739s ago: executing program 8 (id=1023): r0 = syz_clone(0x20042400, 0x0, 0xfd9b, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "257227bdcbd7ec00", "4617a9f6bcfc39230fb7fead776dd8dc", '\x00', '\x00\x00\x00\x00\x00\x00!\x00'}, 0x28) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(0x0, 0x1, 0x0, 0x0) r3 = getpgrp(r0) mq_notify(r2, &(0x7f00000006c0)={0x0, 0x23, 0x0, @tid=r3}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf519, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80010000) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r4, 0x16) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 14m1.93691085s ago: executing program 8 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) splice(r6, 0x0, r4, 0x0, 0x7ffff03c, 0x1200000000000008) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r7, 0x10, 0x0, @void}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x3, 0x200000, 0x4, 0xff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7) 14m0.257237309s ago: executing program 8 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000200)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13m57.592170203s ago: executing program 8 (id=1043): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open$dir(0x0, 0x8000, 0x100) unlink(&(0x7f0000000180)='./file1\x00') 13m56.297563729s ago: executing program 8 (id=1046): waitid(0x11, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x19) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13m51.836941451s ago: executing program 8 (id=1056): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) 13m35.641703935s ago: executing program 35 (id=1056): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) 10m17.193151159s ago: executing program 4 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 10m16.021351614s ago: executing program 4 (id=1485): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f16a"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f00000003c0), 0x200020, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) 10m6.22515264s ago: executing program 4 (id=1504): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10", 0x11a}], 0x1}}], 0x2, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10m4.369596639s ago: executing program 4 (id=1506): r0 = socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r5, r6, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 9m58.081212234s ago: executing program 4 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'}) 9m56.855180784s ago: executing program 4 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, r3, 0x0) 9m41.709483924s ago: executing program 36 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, r3, 0x0) 1m56.548410273s ago: executing program 7 (id=2760): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000580)={0xe, {0x8, 0x9, 0x2, 0xb9, "0258135cb57f9757a869260f6c4a7f21e01bbd5cba323770058aa2311bdf03b73772ddd7951fc51e423b8196e698c1dde37fa921a9c74902c995efec699478ad3dcc559d71b13807f7bd494c626fd8bbac0fe5903d5e5b9e803d0c2181e928a8ee100bca956564b22caee6e6ed838e3693c672ac398d13917d31254470a024e49063d01cf73474b12870492efb387bd098f8380864936682110ff6054f8bce6ad980d076fc09d93161803e3c1f6aeb51677c69960b7d9241ee"}}, 0xc5) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m53.658785455s ago: executing program 7 (id=2765): r0 = syz_clone(0x20042400, 0x0, 0xfd9b, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "257227bdcbd7ec00", "4617a9f6bcfc39230fb7fead776dd8dc", '\x00', '\x00\x00\x00\x00\x00\x00!\x00'}, 0x28) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(0x0, 0x1, 0x0, 0x0) r3 = getpgrp(r0) mq_notify(r2, &(0x7f00000006c0)={0x0, 0x23, 0x0, @tid=r3}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf519, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80010000) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r4, 0x16) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 1m52.824897624s ago: executing program 7 (id=2772): r0 = socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x8000600) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r6, r7, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1m49.529244471s ago: executing program 7 (id=2776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1m47.432471222s ago: executing program 7 (id=2784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 1m45.954201123s ago: executing program 7 (id=2788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) splice(r5, 0x0, r3, 0x0, 0x7ffff03c, 0x1200000000000008) 1m38.831209926s ago: executing program 5 (id=2806): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.51234414s ago: executing program 5 (id=2809): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lsm_list_modules(0x0, 0x0, 0x0) 1m37.943931992s ago: executing program 5 (id=2812): getitimer(0x2, &(0x7f0000000200)) 1m37.238704676s ago: executing program 5 (id=2815): r0 = socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x8000600) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r6, r7, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1m35.951207135s ago: executing program 5 (id=2817): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000200007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e50d66b1180000000000000010010000010000007000000000000000"], 0x18}, 0x0) 1m35.486877665s ago: executing program 5 (id=2819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) memfd_create(0x0, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1m30.267278874s ago: executing program 37 (id=2788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) splice(r5, 0x0, r3, 0x0, 0x7ffff03c, 0x1200000000000008) 10.764171265s ago: executing program 3 (id=3014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x41}}, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 9.562149234s ago: executing program 3 (id=3016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) syz_usb_connect(0x4, 0xff72, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a00000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) creat(0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x38}}, 0x0) 8.836839899s ago: executing program 2 (id=3018): syz_emit_ethernet(0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="1c0000001a", 0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x1, 0x11, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0xa, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x4000007, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x2000000, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x0, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x6, 0xfffffffe, 0x40], [0x10000007, 0xf0000001, 0x80000130, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x334e7816, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000009, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0xc476, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xfffffffe, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x4, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x40000004, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xef, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x4, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xfffbffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x7, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r3, r4, 0x3, 0x5, 0x4, 0x5, {0x2, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x5, 0x800b, 0xd25, 0x7, 0x60b, 0x2, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 7.255105362s ago: executing program 2 (id=3020): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_switch\x00', r4, 0x0, 0x101}, 0x18) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 6.878812448s ago: executing program 2 (id=3022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$loop(0x0, 0x81, 0x2a82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 6.679331856s ago: executing program 3 (id=3025): r0 = syz_clone(0x20042400, 0x0, 0xfd9b, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "257227bdcbd7ec00", "4617a9f6bcfc39230fb7fead776dd8dc", '\x00', '\x00\x00\x00\x00\x00\x00!\x00'}, 0x28) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(0x0, 0x1, 0x0, 0x0) getpgrp(r0) mq_notify(r2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf519, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80010000) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r3, 0x16) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 5.782565396s ago: executing program 2 (id=3028): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) socket$unix(0x1, 0x5, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.808738734s ago: executing program 9 (id=3030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00000000"], 0x0) 4.482037225s ago: executing program 3 (id=3031): syz_emit_ethernet(0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="1c0000001a", 0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x1, 0x11, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0xa, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x4000007, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x2000000, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x0, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x6, 0xfffffffe, 0x40], [0x10000007, 0xf0000001, 0x80000130, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x334e7816, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000009, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0xc476, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xfffffffe, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x4, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x40000004, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xef, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x4, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xfffbffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x7, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r3, r4, 0x3, 0x5, 0x4, 0x5, {0x2, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x5, 0x800b, 0xd25, 0x7, 0x60b, 0x2, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 4.32020406s ago: executing program 9 (id=3032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r0, r1) bind$l2tp6(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x45]}}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/144) openat$tun(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x9c000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000180)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="040600000000041b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.985328824s ago: executing program 9 (id=3033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002060102000000000000000001000000050004000000000009000200"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000240)={{@host, 0xfffffff8}, 0x1, 0x2, 0x7}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r3, &(0x7f0000002a40), 0x0, 0x20, 0x0) 3.984460701s ago: executing program 3 (id=3034): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1c"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f00000003c0), 0x200020, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) 3.724691921s ago: executing program 9 (id=3035): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r0) 3.013254111s ago: executing program 9 (id=3036): write$proc_mixer(0xffffffffffffffff, 0x0, 0xe4) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x222ac00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x800) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) 2.565119776s ago: executing program 9 (id=3037): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1}) 2.469739366s ago: executing program 3 (id=3038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x26, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400020a0000000000000000000000020001000000000000100500000000a0030006000000000002000000ac766fb03600000000000000030007000000000002"], 0x50}, 0x1, 0x7}, 0x0) 2.437566479s ago: executing program 6 (id=3039): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xb}, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000072000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020) 2.278915557s ago: executing program 2 (id=3040): socket(0x3, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='$\x00'], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.137286931s ago: executing program 6 (id=3041): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0xfffffffd, @rand_addr=' \x01\x00', 0x2000002}, 0x1c) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000014) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r6, &(0x7f00000145c0)={0x2020}, 0x2020) 1.854544193s ago: executing program 2 (id=3042): socket(0x1e, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 949.519246ms ago: executing program 6 (id=3043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r0, r1) bind$l2tp6(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x45]}}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/144) openat$tun(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x9c000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000180)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="040600000000041b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 553.13004ms ago: executing program 6 (id=3044): syz_emit_ethernet(0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="1c0000001a", 0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x1, 0x11, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0xa, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x4000007, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x2000000, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x0, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x6, 0xfffffffe, 0x40], [0x10000007, 0xf0000001, 0x80000130, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x334e7816, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000009, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0xc476, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xfffffffe, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x4, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x40000004, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xef, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x4, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xfffbffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x7, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r3, r4, 0x3, 0x5, 0x4, 0x5, {0x2, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x5, 0x800b, 0xd25, 0x7, 0x60b, 0x2, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 324.11539ms ago: executing program 6 (id=3045): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) getitimer(0x2, &(0x7f0000000200)) 0s ago: executing program 6 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) socket$xdp(0x2c, 0x3, 0x0) kernel console output (not intermixed with test programs): 50][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 1089.879850][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1899'. [ 1090.034031][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1090.034057][ T30] audit: type=1326 audit(1755213410.385:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.7.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a4f8ebe9 code=0x7ffc0000 [ 1090.108267][ T30] audit: type=1326 audit(1755213410.395:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.7.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fe9a4f8ebe9 code=0x7ffc0000 [ 1094.020590][T13497] autofs: Bad value for 'fd' [ 1094.609581][T13503] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1907'. [ 1094.753844][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1094.930804][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1098.229855][T13538] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1912'. [ 1098.384997][ T30] audit: type=1326 audit(1755213418.745:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1098.445689][ T30] audit: type=1326 audit(1755213418.745:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1098.541374][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1098.606315][ T30] audit: type=1326 audit(1755213418.755:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1098.641496][ T30] audit: type=1326 audit(1755213418.755:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1098.712439][ T30] audit: type=1326 audit(1755213418.755:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1098.808120][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.838235][ T30] audit: type=1326 audit(1755213418.755:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1098.909619][ T24] usb 6-1: config 0 has no interface number 0 [ 1098.961772][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1098.999030][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.046145][ T24] usb 6-1: Product: syz [ 1099.058549][ T30] audit: type=1326 audit(1755213418.755:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1099.100881][ T24] usb 6-1: Manufacturer: syz [ 1099.105627][ T24] usb 6-1: SerialNumber: syz [ 1099.231322][ T24] usb 6-1: config 0 descriptor?? [ 1099.248264][ T30] audit: type=1326 audit(1755213418.755:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1099.274886][ T30] audit: type=1326 audit(1755213418.755:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1099.359418][ T30] audit: type=1326 audit(1755213418.755:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13544 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1099.481341][ T24] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1099.530787][ T24] usb 6-1: USB disconnect, device number 33 [ 1099.665111][T13559] autofs: Bad value for 'fd' [ 1100.005240][T13565] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1919'. [ 1101.431658][T13025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1101.854996][T13025] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1102.911011][T13590] netlink: 'syz.6.1927': attribute type 20 has an invalid length. [ 1103.024174][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 1103.673389][T13602] autofs: Unknown parameter '0x0000000000000000' [ 1103.812464][T13608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1103.826109][T13608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1103.838325][T13608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1103.847144][T13608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1103.855011][T13608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1103.927878][T13613] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1932'. [ 1104.635488][T13126] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1104.697435][T13126] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1104.928830][T13628] 9pnet_virtio: no channels available for device syz [ 1105.928587][T13126] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1105.939602][T13608] Bluetooth: hci6: command tx timeout [ 1106.065976][T13631] ipvlan2: entered promiscuous mode [ 1106.352097][T13631] bridge0: port 3(ipvlan2) entered blocking state [ 1107.153738][T13631] bridge0: port 3(ipvlan2) entered disabled state [ 1107.187367][T13631] ipvlan2: entered allmulticast mode [ 1107.234891][T13631] bridge0: entered allmulticast mode [ 1107.263230][T13631] ipvlan2: left allmulticast mode [ 1107.278928][T13631] bridge0: left allmulticast mode [ 1107.471398][T13126] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1107.909991][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 1108.019543][T13608] Bluetooth: hci6: command tx timeout [ 1108.378083][ T1139] bridge_slave_1: left allmulticast mode [ 1108.410657][ T1139] bridge_slave_1: left promiscuous mode [ 1108.474820][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.668329][T13671] overlayfs: missing 'lowerdir' [ 1108.856214][T13673] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1944'. [ 1108.886986][ T1139] bridge_slave_0: left allmulticast mode [ 1108.893959][ T1139] bridge_slave_0: left promiscuous mode [ 1109.091228][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.710003][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.732836][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.752640][ T1139] bond0 (unregistering): Released all slaves [ 1109.810012][ T9430] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1109.919024][T13606] chnl_net:caif_netlink_parms(): no params data found [ 1110.005142][ T9430] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1110.013441][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.060456][ T9430] usb 6-1: config 0 has no interface number 0 [ 1110.079437][ T9430] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1110.091466][ T9430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.101588][T13608] Bluetooth: hci6: command tx timeout [ 1110.107830][ T9430] usb 6-1: Product: syz [ 1110.112456][ T9430] usb 6-1: Manufacturer: syz [ 1110.117126][ T9430] usb 6-1: SerialNumber: syz [ 1110.131533][ T9430] usb 6-1: config 0 descriptor?? [ 1110.271856][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.355895][ T1139] hsr_slave_0: left promiscuous mode [ 1110.358706][ T9430] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1110.374127][ T1139] hsr_slave_1: left promiscuous mode [ 1110.388726][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.426700][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.448644][ T9430] usb 6-1: USB disconnect, device number 34 [ 1110.799960][T13703] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1956'. [ 1113.286016][T13608] Bluetooth: hci6: command tx timeout [ 1115.055305][T13715] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1958'. [ 1115.171755][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 1115.315287][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 1115.823334][T13606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.936035][T13606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.004424][T13606] bridge_slave_0: entered allmulticast mode [ 1116.046915][T13606] bridge_slave_0: entered promiscuous mode [ 1116.093177][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.129387][T13606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.164389][T13606] bridge_slave_1: entered allmulticast mode [ 1116.305959][T13606] bridge_slave_1: entered promiscuous mode [ 1117.154269][T13737] overlayfs: missing 'lowerdir' [ 1117.403459][T13606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.550361][T13606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.632622][ T5962] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1117.813459][T13752] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1969'. [ 1117.861219][ T5962] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1117.879290][ T5962] usb 6-1: config 0 has no interface number 0 [ 1117.896864][ T5962] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1117.929451][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.948015][ T5962] usb 6-1: Product: syz [ 1117.970396][ T5962] usb 6-1: Manufacturer: syz [ 1117.985841][ T5962] usb 6-1: SerialNumber: syz [ 1118.151477][ T5962] usb 6-1: config 0 descriptor?? [ 1118.292099][T13755] usb usb8: usbfs: process 13755 (syz.7.1970) did not claim interface 0 before use [ 1118.311495][T13606] team0: Port device team_slave_0 added [ 1118.360448][T13606] team0: Port device team_slave_1 added [ 1118.416666][ T5962] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1118.489371][ T5962] usb 6-1: USB disconnect, device number 35 [ 1118.619797][T13606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.626953][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.653792][ T5887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1118.669332][T13606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.699893][T13606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.707733][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1118.717060][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.743572][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1118.751062][T13606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.764377][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1118.790082][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1120.899410][T13608] Bluetooth: hci2: command tx timeout [ 1122.227671][T13606] hsr_slave_0: entered promiscuous mode [ 1122.252809][T13606] hsr_slave_1: entered promiscuous mode [ 1122.979508][T13608] Bluetooth: hci2: command tx timeout [ 1125.099843][T13608] Bluetooth: hci2: command tx timeout [ 1125.478740][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.520071][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.792595][T13809] autofs: Unknown parameter './file0' [ 1127.220020][T13608] Bluetooth: hci2: command tx timeout [ 1129.649431][ T1139] bridge_slave_1: left allmulticast mode [ 1129.692262][ T1139] bridge_slave_1: left promiscuous mode [ 1129.699605][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.454254][ T1139] bridge_slave_0: left allmulticast mode [ 1130.509350][ T1139] bridge_slave_0: left promiscuous mode [ 1130.515208][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.720182][T13880] usb usb8: usbfs: process 13880 (syz.7.2000) did not claim interface 0 before use [ 1131.771228][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.878540][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.897834][ T1139] bond0 (unregistering): Released all slaves [ 1132.331839][T13760] chnl_net:caif_netlink_parms(): no params data found [ 1132.441152][ T1139] hsr_slave_0: left promiscuous mode [ 1132.458912][ T1139] hsr_slave_1: left promiscuous mode [ 1132.479746][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.512419][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.085654][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 1133.524869][T13904] netlink: 'syz.7.2006': attribute type 4 has an invalid length. [ 1134.013106][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 1134.160334][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 1136.604776][T13940] autofs: Unknown parameter './file0' [ 1137.334348][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.369528][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.390009][T13760] bridge_slave_0: entered allmulticast mode [ 1137.402968][T13760] bridge_slave_0: entered promiscuous mode [ 1137.448157][T13760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.680052][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.688044][T13760] bridge_slave_1: entered allmulticast mode [ 1137.696321][T13760] bridge_slave_1: entered promiscuous mode [ 1138.897144][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.910445][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.853001][T13760] team0: Port device team_slave_0 added [ 1139.894093][T13760] team0: Port device team_slave_1 added [ 1140.128970][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.146827][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.185046][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.203878][ T9377] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1140.226433][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.433517][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.239295][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.299717][ T9377] usb 6-1: config 0 has no interfaces? [ 1141.330329][ T9377] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1141.351770][T13980] overlayfs: missing 'lowerdir' [ 1141.370820][ T9377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.378843][ T9377] usb 6-1: Product: syz [ 1141.471562][ T9377] usb 6-1: Manufacturer: syz [ 1141.493173][ T9377] usb 6-1: SerialNumber: syz [ 1141.750343][ T9377] usb 6-1: config 0 descriptor?? [ 1142.160170][T13606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1142.256128][T13606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1142.333575][T13760] hsr_slave_0: entered promiscuous mode [ 1142.366656][T13760] hsr_slave_1: entered promiscuous mode [ 1142.520385][T13760] debugfs: 'hsr0' already exists in 'hsr' [ 1142.526168][T13760] Cannot create hsr debugfs directory [ 1142.696351][T13993] autofs: Unknown parameter './file0' [ 1142.768958][T13606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1143.073524][T13606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1144.519519][ T9377] usb 6-1: USB disconnect, device number 36 [ 1145.164484][T14022] netlink: 'syz.5.2030': attribute type 10 has an invalid length. [ 1145.796167][T14022] team0: Device hsr_slave_0 failed to register rx_handler [ 1150.264555][T13606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.363052][T13606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.436757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.443978][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.043489][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.050722][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.677589][T13760] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1151.751079][T14079] autofs: Unknown parameter './file0' [ 1152.378891][T13760] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1152.700381][T13760] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1153.109444][T13760] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1153.891145][T14104] netlink: 'syz.5.2052': attribute type 20 has an invalid length. [ 1154.420501][ T5939] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1155.389315][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 1155.413669][T13606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.586812][T13760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.719393][ T5939] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1155.729012][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.008079][T13760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.147841][ T5939] usb 6-1: Product: syz [ 1156.152169][ T5939] usb 6-1: Manufacturer: syz [ 1156.156789][ T5939] usb 6-1: SerialNumber: syz [ 1156.166396][ T5939] usb 6-1: config 0 descriptor?? [ 1156.360005][ T5939] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1156.403041][ T1214] usb 6-1: USB disconnect, device number 37 [ 1156.920058][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.927252][T10329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.030715][T13606] veth0_vlan: entered promiscuous mode [ 1157.039175][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.046409][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.220440][T13606] veth1_vlan: entered promiscuous mode [ 1157.949609][T14139] overlayfs: failed to clone upperpath [ 1158.122228][T13606] veth0_macvtap: entered promiscuous mode [ 1158.137943][T14144] autofs: Unknown parameter './file0' [ 1158.222534][T13606] veth1_macvtap: entered promiscuous mode [ 1159.405010][T13606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.535583][T13606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.678941][ T7064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.073168][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 1160.620113][ T7064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.629011][ T7064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.019325][ T7064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.468069][T10136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.503483][T10136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.452968][T14198] tipc: Enabling of bearer rejected, failed to enable media [ 1164.559989][T13760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.355623][T14214] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1167.942259][ T5887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.952244][ T5887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1168.857926][ T5887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1168.866390][ T5887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1168.875866][ T5887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1170.524309][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 1170.532764][T14248] ceph: No mds server is up or the cluster is laggy [ 1170.540625][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 1170.919398][T13608] Bluetooth: hci5: command tx timeout [ 1173.009931][ T5887] Bluetooth: hci5: command tx timeout [ 1173.698998][ T6612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.080968][ T6612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.248132][T13760] veth0_vlan: entered promiscuous mode [ 1174.355607][ T6612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.753962][ T6612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.926995][T13760] veth1_vlan: entered promiscuous mode [ 1175.063427][ T5887] Bluetooth: hci5: command tx timeout [ 1176.939599][ T6612] bridge_slave_1: left allmulticast mode [ 1176.945285][ T6612] bridge_slave_1: left promiscuous mode [ 1176.968061][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.044850][ T6612] bridge_slave_0: left allmulticast mode [ 1177.053610][ T6612] bridge_slave_0: left promiscuous mode [ 1177.069536][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.139500][ T5887] Bluetooth: hci5: command tx timeout [ 1180.097010][T13608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1180.108282][T13608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1180.117544][T13608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1180.127382][T13608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1180.139930][T13608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1180.419701][T14387] netlink: 'syz.6.2112': attribute type 20 has an invalid length. [ 1180.635265][T14395] autofs: Unknown parameter './file0' [ 1180.895604][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.959620][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.036285][ T6612] bond0 (unregistering): Released all slaves [ 1181.107348][T14235] chnl_net:caif_netlink_parms(): no params data found [ 1182.242652][T13608] Bluetooth: hci2: command tx timeout [ 1182.610814][T14414] netlink: 'syz.7.2119': attribute type 4 has an invalid length. [ 1182.618662][T14414] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2119'. [ 1184.341285][T13608] Bluetooth: hci2: command tx timeout [ 1186.029006][ T6612] hsr_slave_0: left promiscuous mode [ 1186.299603][ T6612] hsr_slave_1: left promiscuous mode [ 1186.305889][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.359376][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.398385][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.419530][T13608] Bluetooth: hci2: command tx timeout [ 1186.437667][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.641893][ T6612] veth1_macvtap: left promiscuous mode [ 1186.998184][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.999357][ T6612] veth0_macvtap: left promiscuous mode [ 1187.004630][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.114580][ T6612] veth1_vlan: left promiscuous mode [ 1187.303926][ T6612] veth0_vlan: left promiscuous mode [ 1188.494625][T14460] capability: warning: `syz.6.2128' uses 32-bit capabilities (legacy support in use) [ 1188.504293][T13608] Bluetooth: hci2: command tx timeout [ 1188.768650][T14464] No control pipe specified [ 1190.527948][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 1190.631932][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 1193.727685][T14456] kthread_run failed with err -4 [ 1193.806698][T14235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.827995][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.836119][T14235] bridge_slave_0: entered allmulticast mode [ 1193.876472][T14235] bridge_slave_0: entered promiscuous mode [ 1193.895578][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.903168][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.980492][T14235] bridge_slave_1: entered allmulticast mode [ 1193.988620][T14235] bridge_slave_1: entered promiscuous mode [ 1194.114316][T14503] fuse: Bad value for 'fd' [ 1194.307579][T14235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.365064][T14235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.910377][T14235] team0: Port device team_slave_0 added [ 1195.165505][T14235] team0: Port device team_slave_1 added [ 1196.906757][T14235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.949791][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.069330][T14235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.251785][T14235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.258794][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.399660][T14235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.063823][T14235] hsr_slave_0: entered promiscuous mode [ 1198.090619][T14235] hsr_slave_1: entered promiscuous mode [ 1198.744797][T14379] chnl_net:caif_netlink_parms(): no params data found [ 1200.530346][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 1200.935103][T14545] netlink: 'syz.6.2152': attribute type 12 has an invalid length. [ 1200.943195][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2152'. [ 1203.904754][T14379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.942222][T14379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.993132][T14379] bridge_slave_0: entered allmulticast mode [ 1204.030181][T14379] bridge_slave_0: entered promiscuous mode [ 1204.160088][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2168'. [ 1204.405779][T14379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.427098][T14379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.452491][T14379] bridge_slave_1: entered allmulticast mode [ 1204.494141][T14379] bridge_slave_1: entered promiscuous mode [ 1205.097605][T14379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.156933][ T6612] bridge_slave_1: left allmulticast mode [ 1205.201673][ T6612] bridge_slave_1: left promiscuous mode [ 1205.207507][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.597084][ T6612] bridge_slave_0: left allmulticast mode [ 1205.610994][T14645] netlink: 'syz.2.2177': attribute type 20 has an invalid length. [ 1205.638849][ T6612] bridge_slave_0: left promiscuous mode [ 1206.498591][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.308990][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.343066][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.367730][ T6612] bond0 (unregistering): Released all slaves [ 1210.413879][T14379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.453826][T14645] dvmrp17: entered allmulticast mode [ 1210.656855][ T6612] hsr_slave_0: left promiscuous mode [ 1210.751787][ T6612] hsr_slave_1: left promiscuous mode [ 1210.792673][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.878379][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.825924][ T6612] veth1_vlan: left promiscuous mode [ 1212.850350][ T6612] veth0_vlan: left promiscuous mode [ 1213.563017][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 1213.617999][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 1214.406451][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2193'. [ 1214.669883][T14703] tipc: Enabling of bearer rejected, failed to enable media [ 1214.719842][T14379] team0: Port device team_slave_0 added [ 1214.750987][T14379] team0: Port device team_slave_1 added [ 1216.911737][T14379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.918720][T14379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.949814][T14731] netlink: 'syz.7.2200': attribute type 20 has an invalid length. [ 1217.038346][T14379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.231612][T14379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.238647][T14379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.292202][T14379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.606575][T14235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1218.782761][T14379] hsr_slave_0: entered promiscuous mode [ 1218.822648][T14379] hsr_slave_1: entered promiscuous mode [ 1218.862785][T14379] debugfs: 'hsr0' already exists in 'hsr' [ 1218.868546][T14379] Cannot create hsr debugfs directory [ 1218.909562][T14235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1218.940327][T14235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1218.996907][T14235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1220.147356][T14765] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2208'. [ 1223.650724][T14235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.719637][T14235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.850995][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.858188][T10329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.931115][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.938284][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.987915][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2221'. [ 1224.645590][T14379] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1224.890184][T14379] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1225.308782][T14379] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1225.557272][T14379] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1226.076610][T14379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.232970][T14379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.306844][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.314072][ T7278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.369091][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.376349][ T7278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.901801][T14379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1228.554573][T14878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2235'. [ 1229.310361][ T5887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1229.340425][ T5887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1229.360296][ T5887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1229.386475][ T5887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1229.396472][ T5887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1230.412322][T14379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.461592][T13608] Bluetooth: hci5: command tx timeout [ 1233.830211][T13608] Bluetooth: hci5: command tx timeout [ 1234.150364][T14288] bridge_slave_1: left allmulticast mode [ 1234.156066][T14288] bridge_slave_1: left promiscuous mode [ 1234.204473][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.341340][T14288] bridge_slave_0: left allmulticast mode [ 1234.347037][T14288] bridge_slave_0: left promiscuous mode [ 1234.373846][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.835077][T14288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.846828][T14288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.857949][T14288] bond0 (unregistering): Released all slaves [ 1236.116983][T13608] Bluetooth: hci5: command tx timeout [ 1236.584100][T14288] hsr_slave_0: left promiscuous mode [ 1236.932913][T14288] hsr_slave_1: left promiscuous mode [ 1236.969558][T14288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.461072][T14288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.877406][T14288] team0 (unregistering): Port device team_slave_1 removed [ 1237.921033][T14288] team0 (unregistering): Port device team_slave_0 removed [ 1238.181644][T13608] Bluetooth: hci5: command tx timeout [ 1238.234691][T14889] chnl_net:caif_netlink_parms(): no params data found [ 1239.953965][T15028] overlayfs: failed to clone upperpath [ 1240.125496][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.181505][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.209428][T14889] bridge_slave_0: entered allmulticast mode [ 1240.241070][T14889] bridge_slave_0: entered promiscuous mode [ 1240.304466][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.332945][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.352096][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2270'. [ 1240.367951][T14889] bridge_slave_1: entered allmulticast mode [ 1240.374051][T15038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2271'. [ 1240.458501][T14889] bridge_slave_1: entered promiscuous mode [ 1241.302754][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.360159][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.395438][ T5887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1241.406005][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1241.414492][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1241.423528][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1241.437901][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.966228][T14889] team0: Port device team_slave_0 added [ 1242.722531][T14889] team0: Port device team_slave_1 added [ 1243.329607][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.366728][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.441926][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.465775][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.472807][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.503438][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.543464][ T5887] Bluetooth: hci2: command tx timeout [ 1244.708067][T14889] hsr_slave_0: entered promiscuous mode [ 1244.722597][T14889] hsr_slave_1: entered promiscuous mode [ 1245.692050][ T5887] Bluetooth: hci2: command tx timeout [ 1247.836453][ T5887] Bluetooth: hci2: command tx timeout [ 1248.359703][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.366050][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.860744][T13608] Bluetooth: hci2: command tx timeout [ 1250.063401][T15152] tipc: Enabling of bearer rejected, failed to enable media [ 1250.537772][T14288] bridge_slave_1: left allmulticast mode [ 1250.591838][T14288] bridge_slave_1: left promiscuous mode [ 1250.615479][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.641839][T14288] bridge_slave_0: left allmulticast mode [ 1250.654323][T14288] bridge_slave_0: left promiscuous mode [ 1250.666406][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.314479][T14288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.361730][T14288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.379858][T14288] bond0 (unregistering): Released all slaves [ 1256.404424][T15058] chnl_net:caif_netlink_parms(): no params data found [ 1256.965194][T14288] hsr_slave_0: left promiscuous mode [ 1257.039359][T14288] hsr_slave_1: left promiscuous mode [ 1257.045635][T14288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.340538][T14288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.275593][T14288] team0 (unregistering): Port device team_slave_1 removed [ 1260.433485][T14288] team0 (unregistering): Port device team_slave_0 removed [ 1261.649898][T15058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.680670][T15058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.732536][T15058] bridge_slave_0: entered allmulticast mode [ 1261.770290][T15058] bridge_slave_0: entered promiscuous mode [ 1261.816982][T15058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.860100][T15058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.916599][T15058] bridge_slave_1: entered allmulticast mode [ 1261.946729][T15058] bridge_slave_1: entered promiscuous mode [ 1262.028392][T15271] autofs: Unknown parameter './file0' [ 1263.349103][T15058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.398791][T15058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.215526][T15058] team0: Port device team_slave_0 added [ 1264.342183][T15058] team0: Port device team_slave_1 added [ 1264.355743][T14889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1264.405761][T14889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1264.656161][T14889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1264.696992][T14889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1264.743317][T15058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.772133][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.352822][T15058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.407924][T15058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.419271][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.520383][T15058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.959695][T15058] hsr_slave_0: entered promiscuous mode [ 1265.991354][T15058] hsr_slave_1: entered promiscuous mode [ 1265.997748][T15058] debugfs: 'hsr0' already exists in 'hsr' [ 1266.044320][T15058] Cannot create hsr debugfs directory [ 1267.603000][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.769686][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.936051][T14288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.943301][T14288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.053049][T14288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.060265][T14288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.802291][T15058] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1271.885723][T15058] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1271.942380][T15058] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1272.240490][T15058] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1272.674628][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.857049][T14889] veth0_vlan: entered promiscuous mode [ 1272.965618][T14889] veth1_vlan: entered promiscuous mode [ 1273.220386][T14889] veth0_macvtap: entered promiscuous mode [ 1273.331962][T14889] veth1_macvtap: entered promiscuous mode [ 1273.407017][T15058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.522097][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.578363][T15058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.643768][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.696324][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.703521][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.769448][T14288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.778189][T14288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.824417][ T6206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.883150][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.890342][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.953782][ T6206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.480145][T14288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.496888][T14288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.027807][ T6206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.069621][ T6206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.103021][T15438] overlayfs: missing 'workdir' [ 1275.825733][T15058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.461782][T15469] overlayfs: failed to clone upperpath [ 1278.075448][T15058] veth0_vlan: entered promiscuous mode [ 1278.177932][T15058] veth1_vlan: entered promiscuous mode [ 1278.455105][T15058] veth0_macvtap: entered promiscuous mode [ 1278.505225][T15058] veth1_macvtap: entered promiscuous mode [ 1278.677428][T15058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.939616][T15058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.981909][T14301] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.148267][T14301] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.851476][T14301] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.955038][T14301] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.151276][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.203352][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.388116][T14288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.430991][T14288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.473801][T15537] netlink: 'syz.7.2400': attribute type 20 has an invalid length. [ 1284.639864][T15554] overlayfs: failed to clone upperpath [ 1285.764948][T15574] binder: 15573:15574 ioctl c0306201 200000000240 returned -14 [ 1287.879324][ T1898] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1288.269448][ T1898] usb 10-1: Using ep0 maxpacket: 32 [ 1288.286825][ T1898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.349677][ T1898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.403566][ T1898] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1288.469371][ T1898] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1288.506504][ T1898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.537220][ T1898] usb 10-1: config 0 descriptor?? [ 1288.745245][T15615] overlayfs: failed to clone upperpath [ 1289.984769][ T1898] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0001/input/input64 [ 1290.176520][ T1898] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0001/input/input65 [ 1290.713170][ T1898] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0 [ 1291.922308][ T1898] usb 10-1: USB disconnect, device number 2 [ 1292.608858][T15645] fido_id[15645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1294.858355][T15673] overlayfs: failed to clone upperpath [ 1301.928791][T15758] autofs: Unknown parameter './file0' [ 1306.336996][T15821] netlink: 'syz.2.2461': attribute type 20 has an invalid length. [ 1307.740857][T15844] autofs: Unknown parameter './file0' [ 1308.009130][T15845] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1308.072089][ T5979] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1308.239416][ T5979] usb 10-1: Using ep0 maxpacket: 16 [ 1308.499808][ T5979] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.553100][ T5979] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1308.617610][ T5979] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1308.679373][ T5979] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.797033][ T5979] usb 10-1: config 0 descriptor?? [ 1309.713481][ T5979] microsoft 0003:045E:07DA.0002: item fetching failed at offset 29/34 [ 1309.724261][ T5979] microsoft 0003:045E:07DA.0002: parse failed [ 1309.731018][ T5979] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 1309.789124][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.795539][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.925016][ T5979] usb 10-1: USB disconnect, device number 3 [ 1311.919913][T13608] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1312.045056][T15891] autofs: Unknown parameter './file0' [ 1312.149825][T15897] netlink: 'syz.5.2480': attribute type 20 has an invalid length. [ 1322.767802][T16061] netlink: 'syz.2.2539': attribute type 20 has an invalid length. [ 1325.748383][T16091] program syz.9.2547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1332.768959][T16203] overlayfs: failed to clone upperpath [ 1332.832298][ T5990] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1332.993097][ T5990] usb 10-1: device descriptor read/64, error -71 [ 1333.749373][ T5990] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1334.144776][ T5990] usb 10-1: device descriptor read/64, error -71 [ 1334.582316][ T5990] usb usb10-port1: attempt power cycle [ 1339.728297][T16299] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1339.772273][T16305] netlink: 'syz.3.2603': attribute type 20 has an invalid length. [ 1339.803466][T16305] dvmrp17: entered allmulticast mode [ 1345.152393][T16389] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1347.754712][T16422] netlink: 'syz.7.2632': attribute type 4 has an invalid length. [ 1348.331035][T16451] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2633'. [ 1348.484857][T16451] hsr_slave_0: left promiscuous mode [ 1348.668606][T16451] hsr_slave_1: left promiscuous mode [ 1349.670081][T16461] tipc: Enabling of bearer rejected, failed to enable media [ 1350.606424][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1350.606449][ T30] audit: type=1326 audit(1755213670.965:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1350.692297][ T30] audit: type=1326 audit(1755213671.005:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1350.727149][ T30] audit: type=1326 audit(1755213671.005:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1350.758002][ T30] audit: type=1326 audit(1755213671.005:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1350.938358][ T30] audit: type=1326 audit(1755213671.005:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.2.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1352.801809][T16509] netlink: 'syz.3.2653': attribute type 11 has an invalid length. [ 1352.902076][T13608] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.229932][T16509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'. [ 1353.335175][ T30] audit: type=1326 audit(1755213673.645:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1353.429446][ T30] audit: type=1326 audit(1755213673.645:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1353.673328][ T30] audit: type=1326 audit(1755213673.645:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1353.696674][ T30] audit: type=1326 audit(1755213673.645:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1353.772921][ T30] audit: type=1326 audit(1755213673.645:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f58ebe9 code=0x7ffc0000 [ 1357.298935][T16548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1357.619368][ T5990] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1357.929370][ T5990] usb 10-1: Using ep0 maxpacket: 32 [ 1357.955777][ T5990] usb 10-1: no configurations [ 1357.982686][ T5990] usb 10-1: can't read configurations, error -22 [ 1358.179402][ T5990] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1358.419462][ T5990] usb 10-1: Using ep0 maxpacket: 32 [ 1358.468958][ T5990] usb 10-1: no configurations [ 1358.489428][ T5990] usb 10-1: can't read configurations, error -22 [ 1358.522071][ T5990] usb usb10-port1: attempt power cycle [ 1358.912049][T13608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1358.919688][ T5990] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1358.929543][T13608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1358.940269][T13608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1358.975145][ T5990] usb 10-1: Using ep0 maxpacket: 32 [ 1358.999462][ T5990] usb 10-1: no configurations [ 1359.004262][T13608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1359.011534][ T5990] usb 10-1: can't read configurations, error -22 [ 1359.018384][T13608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1359.099381][T16566] syz.5.2675 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1359.159703][ T5990] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1359.320688][ T5990] usb 10-1: device descriptor read/8, error -71 [ 1359.485690][ T5990] usb usb10-port1: unable to enumerate USB device [ 1359.822955][ T6206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.137429][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1360.137455][ T30] audit: type=1326 audit(1755213680.495:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.229195][ T6206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.256903][ T30] audit: type=1326 audit(1755213680.535:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.337204][ T30] audit: type=1326 audit(1755213680.535:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.397355][ T30] audit: type=1326 audit(1755213680.555:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.454574][ T30] audit: type=1326 audit(1755213680.555:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.520156][ T30] audit: type=1326 audit(1755213680.555:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.547339][ T6206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.855761][ T30] audit: type=1326 audit(1755213680.555:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.909391][ T30] audit: type=1326 audit(1755213680.555:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.940487][ T30] audit: type=1326 audit(1755213680.555:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1360.963132][ T30] audit: type=1326 audit(1755213680.555:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.3.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1361.063412][T13608] Bluetooth: hci6: command tx timeout [ 1361.203296][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1361.262008][ T6206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.129965][ T6206] bridge_slave_1: left allmulticast mode [ 1363.142458][T13608] Bluetooth: hci6: command tx timeout [ 1363.163656][ T6206] bridge_slave_1: left promiscuous mode [ 1363.206420][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.268261][ T6206] bridge_slave_0: left allmulticast mode [ 1363.310746][ T6206] bridge_slave_0: left promiscuous mode [ 1363.337701][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.219620][T13608] Bluetooth: hci6: command tx timeout [ 1366.315950][ T6206] dvmrp17 (unregistering): left allmulticast mode [ 1367.032373][ T6206] team0: Port device bridge1 removed [ 1367.175689][ T6206] team0: Port device bridge2 removed [ 1367.303354][ T5887] Bluetooth: hci6: command tx timeout [ 1367.448723][ T6206] team0: Port device bridge3 removed [ 1367.599731][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1367.599757][ T30] audit: type=1326 audit(1755213687.965:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1367.907797][ T30] audit: type=1326 audit(1755213688.045:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1367.931274][ T30] audit: type=1326 audit(1755213688.045:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1367.964292][ T30] audit: type=1326 audit(1755213688.045:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1368.016270][ T30] audit: type=1326 audit(1755213688.055:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1368.721370][ T5887] Bluetooth: hci2: command 0x0406 tx timeout [ 1368.752117][ T30] audit: type=1326 audit(1755213688.055:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1368.777731][ T30] audit: type=1326 audit(1755213688.055:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d3ff85ba7 code=0x7ffc0000 [ 1368.800601][ T30] audit: type=1326 audit(1755213688.055:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d3ff2add9 code=0x7ffc0000 [ 1368.823216][ T30] audit: type=1326 audit(1755213688.055:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1368.847444][ T30] audit: type=1326 audit(1755213688.055:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.6.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d3ff85ba7 code=0x7ffc0000 [ 1369.147036][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.895945][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.933509][ T6206] bond0 (unregistering): Released all slaves [ 1370.010751][T16564] chnl_net:caif_netlink_parms(): no params data found [ 1371.236794][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.243251][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.671361][T16564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.678595][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.699994][T16564] bridge_slave_0: entered allmulticast mode [ 1371.850478][T16564] bridge_slave_0: entered promiscuous mode [ 1371.988815][T16564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.026349][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.060146][T16564] bridge_slave_1: entered allmulticast mode [ 1372.091925][T16564] bridge_slave_1: entered promiscuous mode [ 1372.610985][T16564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.772677][T16564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.210587][ T6206] hsr_slave_0: left promiscuous mode [ 1374.249535][ T6206] hsr_slave_1: left promiscuous mode [ 1374.265855][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.291696][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.379434][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.423677][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.583406][ T6206] veth1_macvtap: left promiscuous mode [ 1374.588984][ T6206] veth0_macvtap: left promiscuous mode [ 1374.667123][ T6206] veth1_vlan: left promiscuous mode [ 1374.689554][ T6206] veth0_vlan: left promiscuous mode [ 1374.798855][T16732] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2726'. [ 1376.615758][T16755] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2731'. [ 1376.780276][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1376.780301][ T30] audit: type=1326 audit(1755213697.145:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16748 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1376.843006][ T30] audit: type=1326 audit(1755213697.145:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16748 comm="syz.5.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1377.324480][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1377.453257][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 1378.952279][T16750] tipc: Started in network mode [ 1378.957194][T16750] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1378.965934][T16750] tipc: Enabled bearer , priority 0 [ 1379.845355][T16564] team0: Port device team_slave_0 added [ 1379.903164][T16564] team0: Port device team_slave_1 added [ 1379.961124][ T5990] tipc: Node number set to 11578026 [ 1380.456057][T16564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.479801][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.533679][T16564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.787143][T16564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.805716][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2745'. [ 1380.819891][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.943942][T16796] openvswitch: netlink: Flow key attr not present in new flow. [ 1380.962703][T16564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.004062][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2745'. [ 1381.301584][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2745'. [ 1382.362615][T16564] hsr_slave_0: entered promiscuous mode [ 1382.400138][T16564] hsr_slave_1: entered promiscuous mode [ 1382.448850][T16805] bridge_slave_0: left allmulticast mode [ 1382.810928][T16805] bridge_slave_0: left promiscuous mode [ 1382.816779][T16805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.958683][T16805] bridge_slave_1: left allmulticast mode [ 1382.991115][T16805] bridge_slave_1: left promiscuous mode [ 1382.996944][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.076550][ T30] audit: type=1326 audit(1755213703.435:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.124394][T16805] bond0: (slave bond_slave_0): Releasing backup interface [ 1383.174219][ T30] audit: type=1326 audit(1755213703.435:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.242982][ T30] audit: type=1326 audit(1755213703.445:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.310267][T16805] bond0: (slave bond_slave_1): Releasing backup interface [ 1383.329584][ T30] audit: type=1326 audit(1755213703.445:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.406917][T16805] team0: Port device team_slave_0 removed [ 1383.421538][ T30] audit: type=1326 audit(1755213703.445:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.502736][T16805] team0: Port device team_slave_1 removed [ 1383.540561][T16805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.562093][T16805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.573756][ T30] audit: type=1326 audit(1755213703.455:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.636465][T16805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.681927][T16826] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2752'. [ 1383.697007][ T30] audit: type=1326 audit(1755213703.455:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.700000][T16805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.777216][ T30] audit: type=1326 audit(1755213703.455:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.808359][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2752'. [ 1383.853759][T16826] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2752'. [ 1383.882934][ T30] audit: type=1326 audit(1755213703.485:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1383.909476][T16826] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2752'. [ 1383.964220][ T30] audit: type=1326 audit(1755213703.485:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.5.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1384.051502][T16805] team0: Port device bridge1 removed [ 1389.679473][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1389.679499][ T30] audit: type=1326 audit(1755213710.015:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1389.851532][ T30] audit: type=1326 audit(1755213710.015:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1390.067615][ T30] audit: type=1326 audit(1755213710.015:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1390.235469][ T30] audit: type=1326 audit(1755213710.015:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1390.379368][ T30] audit: type=1326 audit(1755213710.015:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1390.529365][ T30] audit: type=1326 audit(1755213710.025:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1390.696499][ T30] audit: type=1326 audit(1755213710.025:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1390.984482][ T30] audit: type=1326 audit(1755213710.025:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d3ff85ba7 code=0x7ffc0000 [ 1391.008070][ T30] audit: type=1326 audit(1755213710.025:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d3ff2add9 code=0x7ffc0000 [ 1391.939378][ T30] audit: type=1326 audit(1755213710.025:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d3ff85ba7 code=0x7ffc0000 [ 1395.249293][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1395.249319][ T30] audit: type=1326 audit(1755213715.585:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1395.418558][ T30] audit: type=1326 audit(1755213715.585:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1395.521411][ T30] audit: type=1326 audit(1755213715.585:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1395.726277][ T30] audit: type=1326 audit(1755213715.585:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1395.900296][ T30] audit: type=1326 audit(1755213715.585:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1396.140325][T16564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1396.200044][ T30] audit: type=1326 audit(1755213715.585:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1396.312872][T16564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1396.320153][ T30] audit: type=1326 audit(1755213715.585:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1396.404428][T16564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1396.419747][ T30] audit: type=1326 audit(1755213715.585:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa96385ba7 code=0x7ffc0000 [ 1396.547838][ T30] audit: type=1326 audit(1755213715.585:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa9632add9 code=0x7ffc0000 [ 1397.468735][ T30] audit: type=1326 audit(1755213715.585:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.9.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1397.513725][T16564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1399.225327][T16564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.035627][T16564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.057776][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.064980][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.132846][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.139995][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.278789][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1400.278840][ T30] audit: type=1326 audit(1755213720.635:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.9.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1400.560291][ T30] audit: type=1326 audit(1755213720.635:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.9.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1401.188058][ T30] audit: type=1326 audit(1755213720.685:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.9.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1401.350012][ T30] audit: type=1326 audit(1755213720.685:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.9.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1401.372707][ T30] audit: type=1326 audit(1755213720.685:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.9.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1401.395381][ T30] audit: type=1326 audit(1755213720.695:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.9.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1401.869936][T16984] netlink: 'syz.3.2795': attribute type 20 has an invalid length. [ 1404.563502][T16564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.706282][T16564] veth0_vlan: entered promiscuous mode [ 1404.732143][T16564] veth1_vlan: entered promiscuous mode [ 1404.934288][T16564] veth0_macvtap: entered promiscuous mode [ 1404.992686][T16564] veth1_macvtap: entered promiscuous mode [ 1405.104005][T16564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.156524][T16564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.239480][ T30] audit: type=1326 audit(1755213725.565:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17013 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1405.414995][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.417585][ T30] audit: type=1326 audit(1755213725.565:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17013 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1405.446878][ T30] audit: type=1326 audit(1755213725.565:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17013 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1405.517323][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.597227][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.671259][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.899083][ T30] audit: type=1326 audit(1755213725.565:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17013 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1406.080436][ T30] audit: type=1326 audit(1755213725.575:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17013 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1406.103449][ T30] audit: type=1326 audit(1755213725.575:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17013 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1406.284196][T14294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.318645][T14294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.642931][T14288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.556205][T14288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.110387][T17047] bridge0: port 3(batadv1) entered blocking state [ 1408.143123][T17047] bridge0: port 3(batadv1) entered disabled state [ 1408.169570][T17047] batadv1: entered allmulticast mode [ 1408.205692][T17047] batadv1: entered promiscuous mode [ 1408.334842][ T30] audit: type=1326 audit(1755213728.635:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1408.605835][ T30] audit: type=1326 audit(1755213728.635:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1408.644992][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1408.654837][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1408.978042][ T30] audit: type=1326 audit(1755213728.645:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1409.141377][ T30] audit: type=1326 audit(1755213728.645:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1409.164020][ T30] audit: type=1326 audit(1755213728.645:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bdd8ebe9 code=0x7ffc0000 [ 1414.118560][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1414.139163][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1414.149958][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1414.164430][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1414.173774][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1414.605355][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1414.615115][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1414.635313][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1414.692050][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1414.729543][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1415.267936][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.264538][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.275360][ T5881] Bluetooth: hci0: command tx timeout [ 1416.614475][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1416.614499][ T30] audit: type=1326 audit(1755213736.975:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1416.661800][ T30] audit: type=1326 audit(1755213736.975:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1416.757814][ T30] audit: type=1326 audit(1755213737.055:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1416.802394][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.839621][ T5881] Bluetooth: hci3: command tx timeout [ 1417.030121][ T30] audit: type=1326 audit(1755213737.055:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1417.284355][ T30] audit: type=1326 audit(1755213737.055:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1417.499356][ T30] audit: type=1326 audit(1755213737.055:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9638ebe9 code=0x7ffc0000 [ 1418.434141][ T5881] Bluetooth: hci0: command tx timeout [ 1418.921554][ T5881] Bluetooth: hci3: command tx timeout [ 1419.793253][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.500578][ T5881] Bluetooth: hci0: command tx timeout [ 1420.948135][T17084] chnl_net:caif_netlink_parms(): no params data found [ 1420.979627][ T5881] Bluetooth: hci3: command tx timeout [ 1421.336874][ T49] bridge_slave_1: left allmulticast mode [ 1421.350623][ T49] bridge_slave_1: left promiscuous mode [ 1421.356410][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.419765][ T49] bridge_slave_0: left allmulticast mode [ 1421.425450][ T49] bridge_slave_0: left promiscuous mode [ 1421.447355][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.579642][ T5881] Bluetooth: hci0: command tx timeout [ 1423.059701][ T5881] Bluetooth: hci3: command tx timeout [ 1423.422093][ T49] dvmrp17 (unregistering): left allmulticast mode [ 1423.434115][T17185] program syz.2.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.877706][ T49] team0: Port device bridge1 removed [ 1425.073742][ T49] team0: Port device bridge2 removed [ 1425.689594][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.712910][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.729441][ T5979] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1425.750806][ T49] bond0 (unregistering): Released all slaves [ 1425.882429][T17181] tipc: Enabling of bearer rejected, failed to enable media [ 1425.892614][T17088] chnl_net:caif_netlink_parms(): no params data found [ 1426.039342][ T5979] usb 3-1: Using ep0 maxpacket: 32 [ 1426.065301][ T5979] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1426.095298][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.121449][T17203] overlayfs: failed to clone upperpath [ 1426.180271][ T5979] usb 3-1: config 0 descriptor?? [ 1426.387797][ T5979] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1426.413245][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1426.449961][ T5979] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1426.470284][ T5979] usb 3-1: media controller created [ 1426.534416][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1426.575767][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.697804][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.802914][T17084] bridge_slave_0: entered allmulticast mode [ 1426.847515][T17084] bridge_slave_0: entered promiscuous mode [ 1427.941332][ T5979] az6027: usb out operation failed. (-71) [ 1427.950754][ T5979] az6027: usb out operation failed. (-71) [ 1427.960473][ T5979] stb0899_attach: Driver disabled by Kconfig [ 1427.966468][ T5979] az6027: no front-end attached [ 1427.966468][ T5979] [ 1427.977462][ T5979] az6027: usb out operation failed. (-71) [ 1428.019570][ T5979] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1428.019715][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.045295][ T5979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input66 [ 1428.076785][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.098111][T17084] bridge_slave_1: entered allmulticast mode [ 1428.105420][ T5979] dvb-usb: schedule remote query interval to 400 msecs. [ 1428.128772][T17084] bridge_slave_1: entered promiscuous mode [ 1428.129351][ T5979] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1428.640455][ T5979] usb 3-1: USB disconnect, device number 27 [ 1428.952869][ T5979] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1429.152349][T17228] program syz.2.2863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1430.442023][T17242] overlayfs: upper fs does not support tmpfile. [ 1430.606861][T17244] overlayfs: failed to clone upperpath [ 1431.139438][ T49] hsr_slave_0: left promiscuous mode [ 1431.374963][ T49] hsr_slave_1: left promiscuous mode [ 1431.383592][T17253] netlink: 'syz.6.2870': attribute type 20 has an invalid length. [ 1431.433209][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.470568][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.490220][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.499285][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.564010][ T49] veth1_macvtap: left promiscuous mode [ 1431.575792][ T49] veth0_macvtap: left promiscuous mode [ 1431.596353][ T49] veth1_vlan: left promiscuous mode [ 1431.613052][ T49] veth0_vlan: left promiscuous mode [ 1432.672394][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.679065][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.101612][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1435.263120][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1436.549414][T17084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.611348][T17249] tipc: Enabling of bearer rejected, failed to enable media [ 1436.787956][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.814581][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.830397][T17088] bridge_slave_0: entered allmulticast mode [ 1436.848737][T17088] bridge_slave_0: entered promiscuous mode [ 1436.911388][T17084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.817709][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.845665][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.873684][T17088] bridge_slave_1: entered allmulticast mode [ 1437.989144][T17088] bridge_slave_1: entered promiscuous mode [ 1438.278566][T17084] team0: Port device team_slave_0 added [ 1438.316007][T17084] team0: Port device team_slave_1 added [ 1438.589572][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.005881][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.165984][T17084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.206943][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.312169][T17084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.848707][T17088] team0: Port device team_slave_0 added [ 1440.011818][T17084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.073291][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.151857][T17084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.228166][T17306] tipc: Enabling of bearer rejected, failed to enable media [ 1440.246772][T17088] team0: Port device team_slave_1 added [ 1440.955108][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.043183][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.343699][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.496582][T17084] hsr_slave_0: entered promiscuous mode [ 1441.520672][T17084] hsr_slave_1: entered promiscuous mode [ 1441.527033][T17084] debugfs: 'hsr0' already exists in 'hsr' [ 1441.569921][T17084] Cannot create hsr debugfs directory [ 1441.667057][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.699649][T17311] netlink: 'syz.2.2887': attribute type 20 has an invalid length. [ 1441.782958][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.853159][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.629037][ T5959] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1443.926800][T17311] dvmrp17: entered allmulticast mode [ 1443.956433][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 1444.252334][ T5959] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1444.293636][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.324765][ T5959] usb 3-1: Product: syz [ 1444.349926][ T5959] usb 3-1: Manufacturer: syz [ 1444.374941][ T5959] usb 3-1: SerialNumber: syz [ 1444.407853][ T5959] usb 3-1: config 0 descriptor?? [ 1444.457454][ T5959] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1444.517643][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.609440][ T5959] usb 3-1: USB disconnect, device number 28 [ 1444.658935][T17327] overlayfs: failed to clone upperpath [ 1445.071119][T17088] hsr_slave_0: entered promiscuous mode [ 1445.077909][T17088] hsr_slave_1: entered promiscuous mode [ 1445.108661][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 1445.123428][T17088] Cannot create hsr debugfs directory [ 1445.278860][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.591053][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.895342][T17341] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1445.971095][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.542890][T17346] autofs: Unknown parameter './file0' [ 1451.130908][ T49] bridge_slave_1: left allmulticast mode [ 1451.239973][ T49] bridge_slave_1: left promiscuous mode [ 1451.245806][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.448020][ T49] bridge_slave_0: left allmulticast mode [ 1451.493870][ T49] bridge_slave_0: left promiscuous mode [ 1451.522642][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.791072][ T49] dvmrp17 (unregistering): left allmulticast mode [ 1454.142463][ T49] team0: Port device bridge1 removed [ 1454.338153][ T49] team0: Port device bridge2 removed [ 1454.572199][ T49] team0: Port device bridge3 removed [ 1454.694440][T17388] autofs: Unknown parameter './file0' [ 1454.810221][ T49] team0: Port device bridge4 removed [ 1454.977293][ T49] team0: Port device bridge5 removed [ 1456.963379][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.996318][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.052730][ T49] bond0 (unregistering): Released all slaves [ 1460.434137][ T49] hsr_slave_0: left promiscuous mode [ 1460.456893][ T49] hsr_slave_1: left promiscuous mode [ 1460.509557][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.536034][T17457] autofs: Unknown parameter './file0' [ 1460.638865][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.750581][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.758344][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.975165][ T49] veth1_macvtap: left promiscuous mode [ 1461.031567][ T49] veth0_macvtap: left promiscuous mode [ 1461.037270][ T49] veth1_vlan: left promiscuous mode [ 1461.093137][ T49] veth0_vlan: left promiscuous mode [ 1466.100833][T17494] autofs: Unknown parameter './file0' [ 1466.410867][ T30] audit: type=1326 audit(1755213786.775:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.482052][ T30] audit: type=1326 audit(1755213786.775:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.518234][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1466.587312][ T30] audit: type=1326 audit(1755213786.845:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.678864][ T30] audit: type=1326 audit(1755213786.845:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.734675][ T30] audit: type=1326 audit(1755213786.845:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.829816][ T30] audit: type=1326 audit(1755213786.865:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.909375][ T30] audit: type=1326 audit(1755213786.895:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.941507][ T30] audit: type=1326 audit(1755213786.895:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1466.966178][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1467.107335][ T30] audit: type=1326 audit(1755213786.895:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1467.394963][ T30] audit: type=1326 audit(1755213786.895:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.3.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1467.533893][T17523] Bluetooth: MGMT ver 1.23 [ 1472.917912][T13608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1472.929849][T13608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1472.939838][T13608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1472.964256][T13608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1472.986053][T13608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1475.060228][ T5881] Bluetooth: hci4: command tx timeout [ 1475.959932][T13608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1475.981939][T13608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1475.992390][T13608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1476.001710][T13608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1476.009804][T13608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1476.116520][T17570] chnl_net:caif_netlink_parms(): no params data found [ 1476.239950][ T30] audit: type=1326 audit(1755213796.595:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.329705][ T30] audit: type=1326 audit(1755213796.595:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.354935][ T30] audit: type=1326 audit(1755213796.605:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.386953][ T30] audit: type=1326 audit(1755213796.605:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.559343][ T30] audit: type=1326 audit(1755213796.605:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.625119][ T30] audit: type=1326 audit(1755213796.605:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.674416][T17613] overlayfs: failed to clone upperpath [ 1476.720059][ T30] audit: type=1326 audit(1755213796.605:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.743196][ T30] audit: type=1326 audit(1755213796.605:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1476.765993][ T30] audit: type=1326 audit(1755213796.605:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812018ebe9 code=0x7ffc0000 [ 1477.117384][T10136] bridge_slave_1: left allmulticast mode [ 1477.124097][T10136] bridge_slave_1: left promiscuous mode [ 1477.134324][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.141601][T13608] Bluetooth: hci4: command tx timeout [ 1477.433031][T10136] bridge_slave_0: left allmulticast mode [ 1477.438728][T10136] bridge_slave_0: left promiscuous mode [ 1477.745399][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.149549][ T5881] Bluetooth: hci7: command tx timeout [ 1479.220048][T13608] Bluetooth: hci4: command tx timeout [ 1479.430047][T10136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.536707][T10136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.633493][T10136] bond0 (unregistering): Released all slaves [ 1479.683879][ T30] audit: type=1326 audit(1755213800.025:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21858ebe9 code=0x7ffc0000 [ 1479.755217][T17641] netlink: 'syz.9.2971': attribute type 20 has an invalid length. [ 1480.005999][T17641] dvmrp17: entered allmulticast mode [ 1480.016463][T17652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1480.138153][T10136] hsr_slave_0: left promiscuous mode [ 1480.164714][T10136] hsr_slave_1: left promiscuous mode [ 1480.180073][T10136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.185166][T13608] Bluetooth: hci7: command tx timeout [ 1480.219751][T10136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.308061][T13608] Bluetooth: hci4: command tx timeout [ 1481.536990][T17677] overlayfs: failed to clone upperpath [ 1481.866592][T10136] team0 (unregistering): Port device team_slave_1 removed [ 1481.955943][T17682] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2978'. [ 1481.965929][T10136] team0 (unregistering): Port device team_slave_0 removed [ 1482.338445][T13608] Bluetooth: hci7: command tx timeout [ 1484.006710][T17702] netlink: 'syz.9.2985': attribute type 20 has an invalid length. [ 1484.080289][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.093809][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.105817][T17570] bridge_slave_0: entered allmulticast mode [ 1484.126346][T17570] bridge_slave_0: entered promiscuous mode [ 1484.242416][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.255697][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.272116][T17570] bridge_slave_1: entered allmulticast mode [ 1484.291875][T17570] bridge_slave_1: entered promiscuous mode [ 1484.422527][ T5881] Bluetooth: hci7: command tx timeout [ 1484.512396][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.612107][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.051222][T17570] team0: Port device team_slave_0 added [ 1485.085846][T17605] chnl_net:caif_netlink_parms(): no params data found [ 1485.213969][T17570] team0: Port device team_slave_1 added [ 1485.448761][T17725] tipc: Enabling of bearer rejected, failed to enable media [ 1485.895980][T17733] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2991'. [ 1485.924845][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.942443][ T5881] Bluetooth: hci6: command 0x0406 tx timeout [ 1485.970619][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.547286][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.730226][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.738276][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.924987][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.368007][T17570] hsr_slave_0: entered promiscuous mode [ 1487.400641][T17570] hsr_slave_1: entered promiscuous mode [ 1487.537287][T17570] debugfs: 'hsr0' already exists in 'hsr' [ 1487.559350][T17767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2998'. [ 1487.586283][T17570] Cannot create hsr debugfs directory [ 1487.833884][T17605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.881878][T17605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.933183][T17605] bridge_slave_0: entered allmulticast mode [ 1488.163920][T17605] bridge_slave_0: entered promiscuous mode [ 1488.428661][T17605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.449498][T17605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.468649][T17605] bridge_slave_1: entered allmulticast mode [ 1488.648100][T17605] bridge_slave_1: entered promiscuous mode [ 1489.248773][T17777] netlink: 'syz.3.3000': attribute type 20 has an invalid length. [ 1489.686690][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.715647][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.032908][T17605] team0: Port device team_slave_0 added [ 1490.062254][T17787] overlayfs: failed to clone upperpath [ 1490.074445][T17605] team0: Port device team_slave_1 added [ 1490.199812][T17789] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3004'. [ 1490.359992][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.384368][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.489377][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.529895][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.536874][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.586227][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.068504][T10136] bridge_slave_1: left allmulticast mode [ 1491.087298][T10136] bridge_slave_1: left promiscuous mode [ 1491.099582][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.128611][T10136] bridge_slave_0: left allmulticast mode [ 1491.146589][T10136] bridge_slave_0: left promiscuous mode [ 1491.159524][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.166880][T10136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.297545][T10136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.349548][T10136] bond0 (unregistering): Released all slaves [ 1492.444983][T17605] hsr_slave_0: entered promiscuous mode [ 1492.519588][T17605] hsr_slave_1: entered promiscuous mode [ 1492.563172][T17605] debugfs: 'hsr0' already exists in 'hsr' [ 1492.570211][T17605] Cannot create hsr debugfs directory [ 1493.569529][T10136] hsr_slave_0: left promiscuous mode [ 1493.615470][T10136] hsr_slave_1: left promiscuous mode [ 1493.643484][T10136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.020266][T10136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.083933][T17823] overlayfs: upper fs does not support tmpfile. [ 1494.120246][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.126649][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.736909][T17827] netlink: 'syz.6.3017': attribute type 20 has an invalid length. [ 1494.957091][T10136] team0 (unregistering): Port device team_slave_1 removed [ 1495.695449][T10136] team0 (unregistering): Port device team_slave_0 removed [ 1496.125378][T17825] tipc: Enabling of bearer rejected, failed to enable media [ 1497.605309][T17570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1497.676180][T17570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1497.812247][T17570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1498.009687][T17570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1498.725951][T17605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1499.098004][T17605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1499.135454][T17605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1499.160743][T17605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1499.798936][T17888] netlink: 'syz.3.3034': attribute type 20 has an invalid length. [ 1500.292370][T17605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.332189][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.416067][T17605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.446560][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.530704][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.537932][T10136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.590802][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.598029][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.683700][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.690927][T10136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.819115][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.826319][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.207055][T17605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1503.131356][T17605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.168019][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.269044][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1503.269071][ T30] audit: type=1326 audit(1755213823.625:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.6.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1503.371604][ T30] audit: type=1326 audit(1755213823.665:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.6.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1503.446381][ T30] audit: type=1326 audit(1755213823.665:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.6.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1503.578406][ T30] audit: type=1326 audit(1755213823.665:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.6.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3ff8ebe9 code=0x7ffc0000 [ 1503.595773][T17605] veth0_vlan: entered promiscuous mode [ 1503.715659][T17605] veth1_vlan: entered promiscuous mode [ 1608.619254][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1608.626246][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17900/1:b..l [ 1608.635244][ C0] rcu: (detected by 0, t=10502 jiffies, g=99741, q=556 ncpus=2) [ 1608.642977][ C0] task:syz.3.3038 state:R running task stack:26184 pid:17900 tgid:17898 ppid:14889 task_flags:0x400140 flags:0x00004002 [ 1608.657552][ C0] Call Trace: [ 1608.660837][ C0] [ 1608.663779][ C0] __schedule+0x1190/0x5de0 [ 1608.668311][ C0] ? get_page_from_freelist+0x132b/0x38e0 [ 1608.674090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.679771][ C0] ? __pfx___schedule+0x10/0x10 [ 1608.684648][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.690331][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.695990][ C0] ? mark_held_locks+0x49/0x80 [ 1608.700812][ C0] preempt_schedule_irq+0x51/0x90 [ 1608.705871][ C0] irqentry_exit+0x36/0x90 [ 1608.710312][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1608.716321][ C0] RIP: 0010:rcu_read_lock_held+0x9/0x50 [ 1608.721911][ C0] Code: ff 4c 89 ef e8 d8 2a 81 00 eb 95 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 e7 b8 f1 09 01 00 00 00 85 c0 75 07 89 d0 e9 82 78 70 ff e8 a2 ea 00 00 84 [ 1608.741538][ C0] RSP: 0018:ffffc9000130f340 EFLAGS: 00000246 [ 1608.747622][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffc90016953000 [ 1608.755606][ C0] RDX: 0000000000080000 RSI: ffffffff84c84a87 RDI: 0000000000000005 [ 1608.763589][ C0] RBP: ffff88802de53c00 R08: 0000000000000005 R09: 0000000000000000 [ 1608.771574][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805103c800 [ 1608.779561][ C0] R13: 0000000000000000 R14: ffffea0001ae6958 R15: 00fff00000020001 [ 1608.787556][ C0] ? blkcg_css.part.0+0x137/0x1d0 [ 1608.792646][ C0] blkcg_css.part.0+0x13c/0x1d0 [ 1608.797542][ C0] blk_cgroup_congested+0xf8/0x270 [ 1608.802680][ C0] __folio_throttle_swaprate+0xa8/0x2f0 [ 1608.808254][ C0] shmem_add_to_page_cache+0x5ad/0xa70 [ 1608.813746][ C0] ? rcu_is_watching+0x12/0xc0 [ 1608.818541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.824195][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1608.830213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.835899][ C0] shmem_alloc_and_add_folio+0x668/0xc20 [ 1608.841583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.847241][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1608.853438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.859105][ C0] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1608.865058][ C0] shmem_get_folio_gfp+0x67f/0x1600 [ 1608.870305][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1608.875975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.881637][ C0] ? filemap_map_pages+0xf58/0x1670 [ 1608.886880][ C0] shmem_fault+0x1fe/0xa30 [ 1608.891337][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1608.896315][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1608.901824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.907506][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1608.913009][ C0] __do_fault+0x10d/0x490 [ 1608.917389][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1608.922893][ C0] do_pte_missing+0xf50/0x3ba0 [ 1608.927686][ C0] ? find_held_lock+0x2b/0x80 [ 1608.932560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.938225][ C0] __handle_mm_fault+0x152a/0x2a50 [ 1608.943377][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.949032][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1608.954525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.960179][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 1608.965652][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.971303][ C0] ? find_held_lock+0x2b/0x80 [ 1608.976016][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.981666][ C0] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1608.987769][ C0] handle_mm_fault+0x589/0xd10 [ 1608.992577][ C0] __get_user_pages+0x551/0x34a0 [ 1608.997556][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1609.002952][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.008618][ C0] populate_vma_page_range+0x267/0x3f0 [ 1609.014111][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1609.020112][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 1609.025938][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.031597][ C0] ? do_mmap+0x69c/0x1210 [ 1609.035948][ C0] __mm_populate+0x1d8/0x380 [ 1609.040566][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1609.045705][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.051361][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.057011][ C0] ? up_write+0x1b2/0x520 [ 1609.061358][ C0] vm_mmap_pgoff+0x37f/0x470 [ 1609.065972][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1609.071112][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.076772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.082421][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 1609.087409][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 1609.092101][ C0] ? xfd_validate_state+0x61/0x180 [ 1609.097254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.102921][ C0] __x64_sys_mmap+0x125/0x190 [ 1609.107712][ C0] do_syscall_64+0xcd/0x4c0 [ 1609.112248][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.118151][ C0] RIP: 0033:0x7f812018ebe9 [ 1609.122572][ C0] RSP: 002b:00007f8121066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1609.130999][ C0] RAX: ffffffffffffffda RBX: 00007f81203b5fa0 RCX: 00007f812018ebe9 [ 1609.138975][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1609.146952][ C0] RBP: 00007f8120211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1609.154932][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1609.162912][ C0] R13: 00007f81203b6038 R14: 00007f81203b5fa0 R15: 00007ffd6d39f528 [ 1609.170917][ C0] [ 1609.173937][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g99741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1609.186269][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=113068 [ 1609.194238][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g99741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1609.205783][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1609.215775][ C0] rcu: RCU grace-period kthread stack dump: [ 1609.221658][ C0] task:rcu_preempt state:I stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1609.233720][ C0] Call Trace: [ 1609.236999][ C0] [ 1609.239942][ C0] __schedule+0x1190/0x5de0 [ 1609.244484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.250188][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1609.255202][ C0] ? __pfx___schedule+0x10/0x10 [ 1609.260087][ C0] ? find_held_lock+0x2b/0x80 [ 1609.264787][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.270452][ C0] schedule+0xe7/0x3a0 [ 1609.274554][ C0] schedule_timeout+0x123/0x290 [ 1609.279418][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1609.284809][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1609.290126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.295782][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1609.301608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.307257][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1609.312763][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1609.317539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.323189][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1609.328489][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1609.333715][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1609.338659][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1609.343526][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1609.349361][ C0] rcu_gp_kthread+0x270/0x380 [ 1609.354052][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1609.359263][ C0] ? rcu_is_watching+0x12/0xc0 [ 1609.364060][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1609.369279][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.374932][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.380587][ C0] ? __kthread_parkme+0x19e/0x250 [ 1609.385655][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1609.390870][ C0] kthread+0x3c5/0x780 [ 1609.394957][ C0] ? __pfx_kthread+0x10/0x10 [ 1609.399561][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.405214][ C0] ? rcu_is_watching+0x12/0xc0 [ 1609.410004][ C0] ? __pfx_kthread+0x10/0x10 [ 1609.414612][ C0] ret_from_fork+0x5d7/0x6f0 [ 1609.419216][ C0] ? __pfx_kthread+0x10/0x10 [ 1609.423818][ C0] ret_from_fork_asm+0x1a/0x30 [ 1609.428635][ C0] [ 1609.431657][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1609.437974][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1609.443198][ C1] NMI backtrace for cpu 1 [ 1609.443224][ C1] CPU: 1 UID: 0 PID: 17929 Comm: syz.6.3046 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1609.443267][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1609.443287][ C1] RIP: 0010:match_held_lock+0x8/0xc0 [ 1609.443337][ C1] Code: f5 90 0f 0b 90 90 e9 58 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 89 fb 48 39 77 10 <74> 55 66 83 7f 22 1f 76 65 48 8b 46 08 48 89 f7 48 85 c0 74 4d 8b [ 1609.443371][ C1] RSP: 0018:ffffc90000a08d40 EFLAGS: 00000083 [ 1609.443397][ C1] RAX: 000000000000000a RBX: ffff88802b3d6540 RCX: 0000000000000001 [ 1609.443418][ C1] RDX: 0000000000000000 RSI: ffff88807efbd300 RDI: ffff88802b3d6540 [ 1609.443440][ C1] RBP: ffff88807efbd300 R08: 0000000000000005 R09: 0000000000000000 [ 1609.443460][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b3d5a00 [ 1609.443481][ C1] R13: ffff88802b3d64f0 R14: 00000000ffffffff R15: 0000000000000002 [ 1609.443506][ C1] FS: 0000000000000000(0000) GS:ffff8881247bf000(0000) knlGS:0000000000000000 [ 1609.443534][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1609.443557][ C1] CR2: 000000110c2425cb CR3: 000000000e380000 CR4: 0000000000350ef0 [ 1609.443579][ C1] Call Trace: [ 1609.443592][ C1] [ 1609.443603][ C1] lock_is_held_type+0xb0/0x150 [ 1609.443648][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1609.443681][ C1] advance_sched+0x83b/0xc80 [ 1609.443709][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.443755][ C1] ? find_held_lock+0x2b/0x80 [ 1609.443800][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.443838][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1609.443877][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1609.443906][ C1] __hrtimer_run_queues+0x202/0xad0 [ 1609.443953][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1609.443992][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.444039][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1609.444090][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1609.444129][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1609.444170][ C1] [ 1609.444180][ C1] [ 1609.444191][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1609.444227][ C1] RIP: 0010:srso_alias_safe_ret+0x5/0x7 [ 1609.444267][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc [ 1609.444300][ C1] RSP: 0018:ffffc90003fef600 EFLAGS: 00000293 [ 1609.444325][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff820647ed [ 1609.444345][ C1] RDX: ffff88802b3d5a00 RSI: ffffffff820647fd RDI: 0000000000000004 [ 1609.444366][ C1] RBP: ffff88807d8d8028 R08: 0000000000000004 R09: 0000000000000124 [ 1609.444387][ C1] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000005 [ 1609.444406][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1609.444433][ C1] ? unmap_page_range+0xbdd/0x42c0 [ 1609.444469][ C1] ? unmap_page_range+0xbed/0x42c0 [ 1609.444508][ C1] unmap_page_range+0xbed/0x42c0 [ 1609.444566][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1609.444600][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.444639][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1609.444692][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.444738][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1609.444776][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 1609.444819][ C1] unmap_vmas+0x218/0x470 [ 1609.444856][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1609.444891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.444946][ C1] exit_mmap+0x1b9/0xb90 [ 1609.444985][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.445026][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1609.445068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.445107][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1609.445179][ C1] __mmput+0x12a/0x410 [ 1609.445224][ C1] mmput+0x62/0x70 [ 1609.445264][ C1] do_exit+0x7c7/0x2bf0 [ 1609.445317][ C1] ? find_held_lock+0x2b/0x80 [ 1609.445359][ C1] ? __pfx_do_exit+0x10/0x10 [ 1609.445407][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.445446][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1609.445480][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.445518][ C1] ? find_held_lock+0x2b/0x80 [ 1609.445561][ C1] do_group_exit+0xd3/0x2a0 [ 1609.445614][ C1] get_signal+0x2673/0x26d0 [ 1609.445666][ C1] ? __pfx_get_signal+0x10/0x10 [ 1609.445707][ C1] ? do_futex+0x122/0x350 [ 1609.445767][ C1] ? __pfx_do_futex+0x10/0x10 [ 1609.445819][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1609.445866][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1609.445918][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.445963][ C1] exit_to_user_mode_loop+0x84/0x110 [ 1609.445999][ C1] do_syscall_64+0x3f6/0x4c0 [ 1609.446047][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.446081][ C1] RIP: 0033:0x7f7d3ff8ebe9 [ 1609.446107][ C1] Code: Unable to access opcode bytes at 0x7f7d3ff8ebbf. [ 1609.446122][ C1] RSP: 002b:00007f7d40e7e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1609.446151][ C1] RAX: 0000000000000001 RBX: 00007f7d401b5fa8 RCX: 00007f7d3ff8ebe9 [ 1609.446172][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d401b5fac [ 1609.446193][ C1] RBP: 00007f7d401b5fa0 R08: 00007f7d40e7f000 R09: 0000000000000000 [ 1609.446214][ C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1609.446234][ C1] R13: 00007f7d401b6038 R14: 00007ffd388b1760 R15: 00007ffd388b1848 [ 1609.446267][ C1] [ 1719.379306][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 215s! [ 1719.388950][ C0] Showing busy workqueues and worker pools: [ 1719.394894][ C0] workqueue events: flags=0x0 [ 1719.399695][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=17 refcnt=18 [ 1719.399774][ C0] pending: psi_avgs_work, 3*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, 5*ovs_dp_masks_rebalance, 2*psi_avgs_work, xfrm_state_gc_task, switchdev_deferred_process_work, 2*rht_deferred_worker [ 1719.400114][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.400180][ C0] in-flight: 5939:nsim_fib_event_work [ 1719.400245][ C0] workqueue events_highpri: flags=0x10 [ 1719.446801][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1719.446878][ C0] pending: fill_page_cache_func [ 1719.446939][ C0] workqueue events_long: flags=0x0 [ 1719.464747][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 1719.464823][ C0] pending: 3*defense_work_handler, 2*br_multicast_gc_work, br_fdb_cleanup [ 1719.464972][ C0] workqueue events_unbound: flags=0x2 [ 1719.486505][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=17 refcnt=18 [ 1719.486571][ C0] in-flight: 10136:toggle_allocation_gate [ 1719.486660][ C0] pending: 5*nsim_dev_trap_report_work, 3*cfg80211_wiphy_work, linkwatch_event, idle_cull_fn, 2*macvlan_process_broadcast, crng_reseed, macvlan_process_broadcast, 2*idle_cull_fn [ 1719.487023][ C0] workqueue events_power_efficient: flags=0x80 [ 1719.524227][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 1719.524309][ C0] pending: neigh_managed_work, do_cache_clean, neigh_periodic_work, 3*check_lifetime [ 1719.524507][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1719.547369][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1719.547440][ C0] pending: kfree_rcu_monitor [ 1719.547506][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1719.564559][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.564637][ C0] pending: vmstat_update [ 1719.564791][ C0] workqueue mld: flags=0x40008 [ 1719.581579][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=3 [ 1719.581664][ C0] pending: mld_ifc_work [ 1719.581738][ C0] inactive: mld_ifc_work [ 1719.581796][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1719.603880][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=9 [ 1719.603950][ C0] pending: addrconf_dad_work [ 1719.604001][ C0] inactive: 3*addrconf_dad_work, 2*addrconf_verify_work [ 1719.604077][ C0] workqueue krxrpcd: flags=0x2001a [ 1719.628335][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=7 [ 1719.628414][ C0] pending: rxrpc_peer_keepalive_worker [ 1719.628487][ C0] inactive: 3*rxrpc_peer_keepalive_worker [ 1719.628562][ C0] workqueue bat_events: flags=0x6000a [ 1719.653557][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=39 [ 1719.653626][ C0] in-flight: 3004:batadv_nc_worker [ 1719.653700][ C0] inactive: 2*batadv_nc_worker, 2*batadv_tt_purge, 3*batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, 4*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge [ 1719.654439][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1719.714951][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1719.715022][ C0] pending: wg_packet_handshake_send_worker [ 1719.715080][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1719.733395][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.733469][ C0] pending: wg_packet_encrypt_worker [ 1719.733522][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1719.751437][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1719.751513][ C0] pending: wg_packet_handshake_send_worker [ 1719.751571][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1719.769916][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.769998][ C0] pending: wg_packet_encrypt_worker [ 1719.770060][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1719.788167][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.788247][ C0] pending: wg_packet_encrypt_worker [ 1719.788300][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.788370][ C0] pending: wg_packet_encrypt_worker [ 1719.788416][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1719.819391][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.819472][ C0] pending: wg_packet_encrypt_worker [ 1719.819526][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.819594][ C0] pending: wg_packet_encrypt_worker [ 1719.819640][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1719.850605][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.850689][ C0] pending: wg_packet_encrypt_worker [ 1719.850744][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.850813][ C0] pending: wg_packet_encrypt_worker [ 1719.850862][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1719.881788][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.881866][ C0] pending: wg_packet_encrypt_worker [ 1719.881918][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.881986][ C0] pending: wg_packet_encrypt_worker [ 1719.882034][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1719.913062][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.913139][ C0] pending: wg_packet_encrypt_worker [ 1719.913192][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.913260][ C0] pending: wg_packet_encrypt_worker [ 1719.913315][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1719.944237][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.944315][ C0] pending: wg_packet_encrypt_worker [ 1719.944372][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1719.962502][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.962579][ C0] pending: wg_packet_encrypt_worker [ 1719.962634][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1719.980762][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1719.980840][ C0] pending: wg_packet_encrypt_worker [ 1719.980927][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=213s workers=10 idle: 5990 5979 1898 24 12400 9377 43 14605 14604 [ 1719.981164][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=216s workers=27 idle: 14288 14301 14294 10329 1139 14298 15711 49 14292 13 7278 14285 6206 15709 6367 10544 7064 36 12 6612 14290 1132 14303 9861 15707