last executing test programs: 17.850400194s ago: executing program 0 (id=215): socket$alg(0x26, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x4b, &(0x7f00000011c0)}, 0x9) 15.85832046s ago: executing program 0 (id=219): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)="2e7b7f0000de139823", 0x9}}, 0x0) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @start}) close(0x4) 14.597988626s ago: executing program 3 (id=220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x80, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x9, 0x952, 0x0, 0x9, 0x3, 0x326, 0x5, 0x10, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x3, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x89, &(0x7f0000000040)={0x0, 0x20c8a4, 0x1c881, 0x2, 0x309}) io_uring_enter(r2, 0x4255, 0x7721, 0x16, 0x0, 0x0) 14.307232121s ago: executing program 4 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000000000000002) 10.786505844s ago: executing program 2 (id=223): socket$igmp(0x2, 0x3, 0x2) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC], 0x74}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) 10.770838548s ago: executing program 4 (id=224): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/62, 0x3e) 10.619358226s ago: executing program 1 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x998d, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.556952842s ago: executing program 0 (id=226): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fchmod(r0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x20000400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a000000010902120001000000000904000000bee4f900cc412cd5"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0x54, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x100001, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x0, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0xaf, 0x2af, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x5, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x9, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x6, 0xfffffffe, 0x85, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x200, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0xfffffffe, 0xc5c, 0xffffffff]}}) setxattr$incfs_id(&(0x7f0000000180)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a05000000000000000000000000070900020073797a32000000000c000b408800000000000000080005400000001108000a40000000020900010073797a3000000000080003400000005408000f4000000003"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) preadv2(r1, &(0x7f0000000a00)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000900)=""/210, 0xd2}], 0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2842c0, 0x0) 9.540762746s ago: executing program 3 (id=227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="5fed34e2a8ec25b6d11001cca00fc097ae38c176e8d411dc4f8c20efad5f727df5821f427a42f1faf6a765fe31d8357fd26ec9adda43b3249ec3892250b0e9461d7f6dcec11c589cc02bc6aceb18b7e67f59461541e20245ee4d3914a45b8defe30993fae4f58aa9c27580136e950030e1b119582c92cbe4515ce3936628dcbec6ffd28e7cbdfac5234e3296b27c88d02ba76bad52449a6cfb9cbc2c19cd315e02c01c59836505c3a5ec76f07131e42382910185f0c838d7b228d84eda8c6c6e6a74d173f732064ae339f1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r0) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) 9.210396121s ago: executing program 1 (id=228): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_delete(0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4, @multicast1}, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xbcd}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x490) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000480)='lo\x00', 0x0, 0x4000000, 0x3}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0xae, &(0x7f0000000000)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000005280)=""/252, 0xfc}, {&(0x7f0000000500)=""/201, 0xc9}], 0x3, &(0x7f0000000600)=""/159, 0x9f}, 0x3}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/87, 0x57}, {&(0x7f00000007c0)=""/124, 0x7c}], 0x2, &(0x7f0000001900)=""/92, 0x5c}, 0x5}, {{&(0x7f0000001980)=@llc, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/168, 0xa8}], 0x2, &(0x7f0000002b00)=""/74, 0x4a}, 0x4}, {{&(0x7f0000002b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000005080)=[{&(0x7f0000002c00)=""/195, 0xc3}, {&(0x7f0000002d00)=""/75, 0x4b}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/4080, 0xff0}, {&(0x7f0000004d80)=""/83, 0x53}, {&(0x7f0000004e00)=""/227, 0xfffffffffffffdee}, {&(0x7f0000004f00)=""/139, 0x8b}, {&(0x7f0000004fc0)=""/140, 0x8c}], 0x8, &(0x7f0000005100)=""/87, 0x57}, 0x3}], 0x4, 0x10002, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) 8.767707585s ago: executing program 4 (id=229): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@mcast2, @in=@private=0xa010100, 0xfffd, 0xfffd, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.393095164s ago: executing program 1 (id=230): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)="2e7b7f0000de139823", 0x9}}, 0x0) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @start}) close(0x4) 7.760322146s ago: executing program 2 (id=231): socket$igmp(0x2, 0x3, 0x2) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC], 0x74}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x1, 0x6, 0x4, 0x4, 0xfffffbfd, 0x12, 0x4, 0xd, 0x6, 0x2, 0x1, 0x6, 0x4, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x2, 0x5, 0x7, 0x2000e77, 0x7a, 0x8, 0xaf7, 0x0, 0x3862]}) 7.478173517s ago: executing program 3 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @loopback, 0x23}, {0xa, 0x4e24, 0xce, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0xffffffffffffffff, 0x7ffffff7}}, 0x48) 7.448571515s ago: executing program 4 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000200000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffefff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.139368895s ago: executing program 3 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000000000000002) 5.591149974s ago: executing program 4 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 5.589307831s ago: executing program 0 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x5c}}, 0x20044000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000400)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 5.498364256s ago: executing program 2 (id=237): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000400)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 3.179733472s ago: executing program 0 (id=238): socket$netlink(0x10, 0x3, 0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006d40)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xcdc5, 0x100, 0x8, 0xc, 0x7ff}, 0xc, 0x5e}, [{0x7fff, 0x6, 0x9, 0x59, 0x8, 0x1000}, {0x0, 0x9, 0x9, 0x6, 0x7, 0x6}, {0x400, 0x0, 0xa, 0x2, 0x1000, 0xf}, {0x5, 0x2, 0x9f, 0x9, 0xfffff001, 0x8}, {0x4, 0x1, 0xffff, 0x6, 0x80000000, 0xa}, {0x3, 0x2, 0x7, 0x6, 0x8, 0x2}, {0x4d5f, 0x17, 0x6, 0x8, 0x6, 0x2}, {0x9, 0x4, 0x5, 0x9, 0x8, 0x8}, {0x3, 0x80000000, 0x3, 0x9, 0x9ce, 0x100}, {0x3, 0x1, 0x401, 0x8, 0x7f, 0xed}, {0x40, 0xfffffff2, 0x7fffffff, 0x1, 0x7, 0x9}, {0xffffffff, 0x4, 0x8, 0xe, 0x5, 0xf}, {0x6, 0x6, 0x2, 0x9, 0x4, 0xe2571b5}, {0xffff, 0x3, 0x7, 0x87, 0x3, 0x7fffffff}, {0x8e7, 0x4, 0xe4bd, 0x3, 0x7, 0x3d4}, {0x8, 0x6, 0x8, 0x0, 0xffffff61}, {0x1ff, 0x81, 0xaf2, 0x401, 0x3, 0x1}, {0x80000000, 0x2, 0x1, 0x4, 0xd56, 0xc}, {0x81, 0xffffff7f, 0x2, 0x0, 0x101, 0x1000}, {0x6, 0x1, 0x8, 0xffffffff, 0x5, 0x8}, {0x605, 0x3, 0xffffff7c, 0x8, 0xc3c, 0x3}, {0xfffffff7, 0xfffffff3, 0xb8, 0xc, 0x0, 0x100}, {0x7, 0x4, 0x6, 0x40, 0x3, 0x1000100}, {0x6fe, 0xcf, 0x3, 0x3, 0xba, 0x3}, {0x200, 0xffffff09, 0xcba, 0x4, 0x1, 0xdc}, {0x7f, 0x10000, 0x7, 0x7, 0x8000, 0x6}, {0x7, 0x1, 0x8, 0x10, 0x6, 0xffff}, {0x101, 0x7, 0x683b, 0x2, 0x3d8, 0x10}, {0x6, 0x6, 0xb, 0x2, 0xc442, 0x9}, {0xa, 0xb5, 0x6, 0x8, 0x7f, 0x1}, {0x69e, 0x101, 0x8, 0x3d, 0x6e2d1bf4, 0xffff}, {0x4, 0x9, 0x7, 0xfff, 0x9}, {0x6, 0x3, 0x101, 0x9, 0x6, 0x1}, {0x6, 0x40, 0x3, 0x0, 0x6, 0x7}, {0x44f6, 0x8, 0x8, 0xa8, 0x5, 0x4}, {0x7, 0xd0a1, 0x1, 0x6, 0x8, 0x8}, {0x6, 0x4, 0x5a, 0x2, 0x4, 0x9}, {0xfffffc00, 0x0, 0x8, 0x2, 0x0, 0x6}, {0xd68a, 0x4, 0x8001, 0x3, 0x8, 0x1}, {0x5, 0x7, 0x8, 0x5, 0xffffc2a8, 0x2}, {0x7ff, 0x8000, 0xfffffffa, 0x8, 0x80000000, 0x9}, {0x63, 0x100, 0x8, 0x8, 0x7fffffff}, {0x7, 0x0, 0xb, 0x4, 0xd778, 0x8655}, {0xfffffff9, 0x401, 0x3, 0x1, 0x1f, 0x4}, {0x4, 0x0, 0x6, 0x9, 0xa061, 0x2f33}, {0x7, 0x3, 0x5, 0x1, 0x2, 0x600000}, {0x81, 0x2, 0x7, 0x401, 0x4, 0x1}, {0x3, 0xc3e3, 0x3e5, 0x9, 0x9313, 0x4}, {0x9, 0x1, 0x1, 0x80, 0x5, 0x9}, {0x8, 0x4, 0x2, 0x40, 0x1, 0x4}, {0x6, 0x10001, 0x4, 0x100, 0x5, 0x4}, {0x7ff, 0x81, 0x3, 0x7, 0xa, 0x7}, {0x1, 0x2, 0x5, 0x399, 0x3, 0xffffffff}, {0x10, 0x2, 0x9, 0x8001, 0x1ff, 0x5}, {0x8000, 0x7, 0xfffffffb, 0x5, 0x7, 0x5fc}, {0xc917, 0x10, 0x1, 0x2, 0x4, 0xfffff1da}, {0xfffff837, 0xb, 0xba7c, 0xfffffff2, 0x6, 0x2}, {0x5, 0x40, 0x4, 0x0, 0xf07, 0xf}, {0x2, 0x8, 0x4, 0x810, 0x8, 0xffffffff}, {0x0, 0xcb, 0xc, 0x3, 0x0, 0x80}, {0x6, 0x7, 0x3, 0x4, 0x7, 0x2}, {0xfff, 0x10001, 0x7f, 0x5, 0xe841, 0x7}, {0x2, 0x1, 0x1ff, 0x3, 0x0, 0x1}, {0x6, 0x7, 0x1400000, 0x8, 0x80000000, 0x5}, {0xb7e, 0x3, 0x24, 0x0, 0x5, 0x400}, {0xc, 0x81, 0x2, 0x5, 0x400}, {0x4, 0x3, 0x6, 0x7, 0x3, 0x3}, {0x5, 0xffff, 0x0, 0x0, 0x2e2, 0x2}, {0x6, 0x4, 0xff, 0x9, 0x61222e, 0x3}, {0x0, 0xc4b, 0x8, 0x80000000, 0x200, 0x1}, {0x1, 0x2, 0x3, 0x5, 0x5192c3ef, 0x2}, {0x100, 0xfffffffa, 0x2fb, 0x0, 0x4, 0x3}, {0x8, 0x3, 0x80000001, 0x101, 0x431, 0x2}, {0x6, 0x0, 0xf5, 0x3ff, 0x3, 0xe4e6}, {0xab, 0xffff, 0x200, 0x4, 0x3, 0x9}, {0x2, 0x7, 0x3, 0x4, 0x0, 0x4}, {0x80000000, 0x9, 0x37, 0x80000001, 0x1, 0x9}, {0x331, 0x800, 0x9, 0x4, 0xf, 0x6}, {0xe9, 0x0, 0xa7, 0x7, 0x4, 0x9}, {0x9, 0x200000, 0x3, 0xfffffff7, 0x7fff, 0x3}, {0x1, 0x9, 0x4, 0xfffffffb, 0xd, 0x9}, {0x2, 0x1, 0x7, 0x8001, 0x1, 0xffff8001}, {0x2, 0x19a8, 0x800, 0x101, 0x3, 0x5}, {0x4800, 0xcb, 0x80000001, 0x2, 0x7, 0x7}, {0xb, 0x3, 0x8, 0x4df0, 0x7, 0x40}, {0x3, 0x0, 0xda2, 0x42d4, 0x3, 0x4}, {0x0, 0xbf, 0x5, 0xffff, 0x6}, {0x1ff, 0x10001, 0x0, 0x9, 0x7, 0x579}, {0x45b, 0x9, 0x4, 0x4, 0x6, 0xbc2}, {0x4, 0x2, 0xa9, 0x2, 0x2, 0x9}, {0x0, 0x200, 0xbf, 0x6, 0x266, 0x8}, {0x80000001, 0x0, 0x0, 0x1, 0x6, 0x5}, {0x19c00000, 0x9, 0x5, 0x9, 0x4, 0x1}, {0x0, 0x0, 0x7, 0x2, 0x4, 0xfffffffd}, {0xfffffffc, 0x1, 0xe, 0x8, 0x79, 0xd}, {0x400, 0x7, 0xc, 0x8, 0xf, 0x3}, {0x5, 0x5, 0x9, 0xa0d, 0x40, 0x6456}, {0xbb4e, 0x0, 0x3a, 0x8, 0xfffffffb, 0x8}, {0x10, 0x7ff, 0x7, 0xfff, 0x0, 0x9}, {0x8, 0x40, 0xfff, 0x1, 0x1, 0x1}, {0x0, 0x0, 0xe72, 0x8, 0x0, 0x3}, {0x401, 0x6, 0x8, 0x2, 0x2dbf19f1, 0x81}, {0x7, 0x6, 0xa5, 0x0, 0x401, 0xc}, {0x2, 0x100009, 0x9864, 0x9b, 0x5}, {0x6, 0x7ff, 0x5fc5, 0xb, 0x7, 0x237}, {0x0, 0x80000001, 0xa4, 0x0, 0x7, 0x40}, {0x9, 0x6, 0x1000, 0x7, 0xd2e, 0x1}, {0x7, 0x3, 0xc, 0x8, 0x40, 0xb}, {0x7, 0x2, 0x3, 0x8, 0x200, 0x8}, {0x9, 0xffff, 0x101, 0x7a, 0x8, 0xfffffff8}, {0x9, 0x4, 0x0, 0x4, 0x8001, 0x800}, {0x2, 0x83a, 0x5, 0x2, 0x9, 0xffffffff}, {0xffffff4c, 0x2, 0x10001, 0x2, 0x7, 0x2}, {0x5, 0x0, 0x3, 0x0, 0xb, 0x6}, {0x3, 0x9, 0x7, 0x0, 0x7f, 0x800}, {0x2, 0x80000001, 0xe, 0x2, 0x6, 0xd5f}, {0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x6}, {0x400, 0xfffffffc, 0x4, 0xa6, 0x0, 0xfffffffc}, {0x5, 0x5, 0xfc, 0xfffffffd, 0x5, 0x2}, {0x3, 0x4, 0x6, 0xc6b60000, 0x3ff, 0x10}, {0x2, 0xf27, 0x8, 0x6, 0xfffffffb, 0x5}, {0xe, 0x53, 0x400, 0x8, 0x6, 0x9}, {0x42, 0x1, 0xfff, 0x15f2, 0x3, 0x401}, {0xc7e8, 0x1, 0xfffffffe, 0x9, 0x3, 0x6}, {0x7f, 0x1000, 0xd19, 0x5, 0xfff, 0xb7}, {0x3, 0xed0, 0x8, 0x2, 0x1, 0x2}, {0x1, 0xdba, 0x4, 0xe3, 0x5, 0x5}, {0x8001, 0x831b0aa, 0x6, 0x200, 0x0, 0x4}], [{0x1}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0xd482b2beb95f1396}, {0x1, 0x1}, {0x2, 0x1}, {0xdf6e2fd7682863b7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x5dc99bf9bb419254}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x6d7d4d20e070fc88, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0xe371b5ac9b19a6e7}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x434f78b2e54d0b0e}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x63017a1fdf0e3bbe}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'ip6gre0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x2) 3.123162173s ago: executing program 2 (id=239): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/62, 0x3e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x101000, 0x110) renameat2(r1, 0x0, r1, &(0x7f0000000300)='.\x02\x00', 0x2) 3.029163954s ago: executing program 4 (id=240): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x1}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x41, {0x41, 0xd, "ba348fce042b4e130a7a66cd0076590ce820dcd1573c5847b7d85cf56a22668aacd3524c525454241ea36c724ad9f1690b2d62b7d7e29d001b54e26c2e837d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x16}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x40, 0x5, 0x1, "d9"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x40, 0x8, 0xb8, {0xb8, 0x2a, "6a0e7b31742307faf7530710a7d0909bd37587ecec561066be1f66e8551a78341e2ba892b8a64ec4dd87b42b819f44cbca760db5fea10180f6911b8cc2ecfaf2d0ef49d2340f7c2b517d83db9533ece57155a1d1b62a813c121f8a116df306f35b5717e28b24f8e6508ea6f1fffa7876c0e399865e36fd343a89b55666bac9ac3d3b356f127981e0bf085288573c99de03a1d7a26a5e0ad1a9c99c467eaec519cfa083fb2c941cc3fdfe490eddea5c82b21e5ab3c425"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x0, 0x6, 0x86, "6f69fb825d2ad9831d2850630b4169b4d414c47146f33f1609cca6ae799c2bc40cc3f0fefa624c6d2fde3261894c58af8961ce34de1a85b3dc840db71edac11f07dbc508a0b6fc6a136cdef1d3ec1edd4c7cac0764af4f96e4fe4c2743375dc38277281f1227c4882a83ce97ba65ef2b053cf166825bc4ef6aaff5920f5208b7aeb1b658fd20"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.750276404s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x998d, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6(0xa, 0x1, 0x8010000000000084) 2.641673767s ago: executing program 2 (id=242): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x7fffffffffffffff, 0xfffffffffffffffe) r1 = timerfd_create(0x0, 0x0) r2 = syz_io_uring_setup(0x18b0, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x10, 0x1401, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 2.289566634s ago: executing program 3 (id=243): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x80, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x9, 0x952, 0x0, 0x9, 0x3, 0x326, 0x5, 0x10, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x3, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x78f89e622a3be17b}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x89, &(0x7f0000000040)={0x0, 0x20c8a4, 0x1c881, 0x2, 0x309}) io_uring_enter(r5, 0x4255, 0x7721, 0x16, 0x0, 0x0) 1.036038191s ago: executing program 1 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @loopback, 0x23}, {0xa, 0x4e24, 0xce, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0xffffffffffffffff, 0x7ffffff7}}, 0x48) 286.992641ms ago: executing program 1 (id=245): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f00000006c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@mcast2, @in=@private=0xa010100, 0xfffd, 0xfffd, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 176.369247ms ago: executing program 2 (id=246): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fchmod(r0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x20000400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a000000010902120001000000000904000000bee4f900cc412cd5"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0x54, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x100001, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x0, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0xaf, 0x2af, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x5, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x9, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x6, 0xfffffffe, 0x85, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x200, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0xfffffffe, 0xc5c, 0xffffffff]}}) preadv2(r1, &(0x7f0000000a00)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000900)=""/210, 0xd2}], 0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 171.836701ms ago: executing program 3 (id=247): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x1, 0x6, 0x4, 0x4, 0xfffffbfd, 0x12, 0x4, 0xd, 0x6, 0x2, 0x1, 0x6, 0x4, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x2, 0x5, 0x7, 0x2000e77, 0x7a, 0x8, 0xaf7, 0x0, 0x3862]}) 0s ago: executing program 0 (id=248): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="001408000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000030500000000000007e74a914700", @ANYRES32=0x0, @ANYBLOB="115a01000000000010001280080001006873720004000280"], 0x30}}, 0x44) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r9, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f0000000080)=""/177, 0xb1, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r9, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r9, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r9, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000140)=""/2, 0x2, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r9, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="a99c383d33c9c607b1b9d496", 0xc, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 98.182490][ T49] cfg80211: failed to load regulatory.db [ 100.426460][ T5788] cgroup: Unknown subsys name 'net' [ 100.657405][ T5788] cgroup: Unknown subsys name 'cpuset' [ 100.721475][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.874522][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.132393][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.144316][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.145450][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.153825][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.154823][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.156242][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.156748][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.157865][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.162331][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.165378][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.179160][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.204389][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.206170][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.207690][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.208556][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.210459][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.224256][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.230902][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.259665][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.271206][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.351923][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.370182][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.378638][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.384089][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.386957][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.495368][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 107.583329][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 107.596579][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 107.786510][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 107.951988][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 108.252671][ T61] Bluetooth: hci0: command tx timeout [ 108.252677][ T5808] Bluetooth: hci3: command tx timeout [ 108.340919][ T61] Bluetooth: hci1: command tx timeout [ 108.340927][ T5808] Bluetooth: hci2: command tx timeout [ 108.343094][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.344288][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.344766][ T5811] bridge_slave_0: entered allmulticast mode [ 108.346905][ T5811] bridge_slave_0: entered promiscuous mode [ 108.490903][ T5808] Bluetooth: hci4: command tx timeout [ 108.561200][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.561351][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.561510][ T5811] bridge_slave_1: entered allmulticast mode [ 108.563429][ T5811] bridge_slave_1: entered promiscuous mode [ 108.876559][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.876862][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.877097][ T5815] bridge_slave_0: entered allmulticast mode [ 108.878974][ T5815] bridge_slave_0: entered promiscuous mode [ 108.908338][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.908478][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.908687][ T5799] bridge_slave_0: entered allmulticast mode [ 108.912618][ T5799] bridge_slave_0: entered promiscuous mode [ 109.092474][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.092591][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.092731][ T5815] bridge_slave_1: entered allmulticast mode [ 109.094678][ T5815] bridge_slave_1: entered promiscuous mode [ 109.098224][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.098336][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.098477][ T5799] bridge_slave_1: entered allmulticast mode [ 109.100338][ T5799] bridge_slave_1: entered promiscuous mode [ 109.186827][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.445334][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.445620][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.445758][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.446154][ T5800] bridge_slave_0: entered allmulticast mode [ 109.448275][ T5800] bridge_slave_0: entered promiscuous mode [ 109.692841][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.692975][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.693167][ T5806] bridge_slave_0: entered allmulticast mode [ 109.695606][ T5806] bridge_slave_0: entered promiscuous mode [ 109.772149][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.772269][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.772437][ T5800] bridge_slave_1: entered allmulticast mode [ 109.774362][ T5800] bridge_slave_1: entered promiscuous mode [ 109.778444][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.783904][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.784345][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.784532][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.785100][ T5806] bridge_slave_1: entered allmulticast mode [ 109.789699][ T5806] bridge_slave_1: entered promiscuous mode [ 109.945990][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.950028][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.034673][ T5811] team0: Port device team_slave_0 added [ 110.331067][ T5808] Bluetooth: hci0: command tx timeout [ 110.331096][ T61] Bluetooth: hci3: command tx timeout [ 110.334819][ T5811] team0: Port device team_slave_1 added [ 110.338273][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.411016][ T61] Bluetooth: hci2: command tx timeout [ 110.411032][ T5808] Bluetooth: hci1: command tx timeout [ 110.515645][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.581645][ T61] Bluetooth: hci4: command tx timeout [ 110.584829][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.586871][ T5815] team0: Port device team_slave_0 added [ 110.589295][ T5799] team0: Port device team_slave_0 added [ 110.602890][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.001878][ T5815] team0: Port device team_slave_1 added [ 111.004692][ T5799] team0: Port device team_slave_1 added [ 111.112771][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.112785][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.112804][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.413041][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.413060][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.413086][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.416594][ T5800] team0: Port device team_slave_0 added [ 111.554535][ T5806] team0: Port device team_slave_0 added [ 111.576221][ T5800] team0: Port device team_slave_1 added [ 111.578077][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.578093][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.578122][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.583310][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.583351][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.583383][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.588343][ T5806] team0: Port device team_slave_1 added [ 111.723294][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.723313][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.723342][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.724718][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.724735][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.724754][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.202517][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.202535][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.202554][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.206862][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.206880][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.206898][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.309485][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.309507][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.309541][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.319089][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.319114][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.319150][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.337573][ T5811] hsr_slave_0: entered promiscuous mode [ 112.339980][ T5811] hsr_slave_1: entered promiscuous mode [ 112.411500][ T5808] Bluetooth: hci0: command tx timeout [ 112.411725][ T61] Bluetooth: hci3: command tx timeout [ 112.492226][ T61] Bluetooth: hci1: command tx timeout [ 112.501083][ T61] Bluetooth: hci2: command tx timeout [ 112.650953][ T61] Bluetooth: hci4: command tx timeout [ 112.692230][ T5815] hsr_slave_0: entered promiscuous mode [ 112.693373][ T5815] hsr_slave_1: entered promiscuous mode [ 112.694185][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 112.694279][ T5815] Cannot create hsr debugfs directory [ 112.703213][ T5799] hsr_slave_0: entered promiscuous mode [ 112.704929][ T5799] hsr_slave_1: entered promiscuous mode [ 112.706064][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 112.706094][ T5799] Cannot create hsr debugfs directory [ 113.418998][ T5800] hsr_slave_0: entered promiscuous mode [ 113.425655][ T5800] hsr_slave_1: entered promiscuous mode [ 113.428910][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 113.428944][ T5800] Cannot create hsr debugfs directory [ 113.527782][ T5806] hsr_slave_0: entered promiscuous mode [ 113.528765][ T5806] hsr_slave_1: entered promiscuous mode [ 113.529485][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 113.529503][ T5806] Cannot create hsr debugfs directory [ 114.500811][ T5808] Bluetooth: hci0: command tx timeout [ 114.500862][ T61] Bluetooth: hci3: command tx timeout [ 114.575265][ T5808] Bluetooth: hci1: command tx timeout [ 114.575318][ T61] Bluetooth: hci2: command tx timeout [ 114.732362][ T61] Bluetooth: hci4: command tx timeout [ 114.893132][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.960514][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.988157][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.021055][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.182591][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.218978][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.278091][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.317812][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.427049][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.467747][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.489291][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.553600][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.697666][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.743725][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.787863][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.838776][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.994243][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.994570][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.044387][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.093435][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.132597][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.249922][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.298802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.299394][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.321193][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.355573][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.356534][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.430511][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.460602][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.483696][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.483879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.532076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.532190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.597812][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.615872][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.640459][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.640983][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.695685][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.696272][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.755892][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.806653][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.809982][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.810190][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.889242][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.889417][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.977295][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.043206][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.044069][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.108707][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.108857][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.139184][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.383826][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.531544][ T5811] veth0_vlan: entered promiscuous mode [ 117.625050][ T5811] veth1_vlan: entered promiscuous mode [ 117.729682][ T5815] veth0_vlan: entered promiscuous mode [ 117.804855][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.816557][ T5815] veth1_vlan: entered promiscuous mode [ 117.846633][ T5811] veth0_macvtap: entered promiscuous mode [ 117.883296][ T5811] veth1_macvtap: entered promiscuous mode [ 117.924718][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.953934][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.002755][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.076093][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.080079][ T5815] veth0_macvtap: entered promiscuous mode [ 118.155213][ T5815] veth1_macvtap: entered promiscuous mode [ 118.160423][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.188752][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.205516][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.223686][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.355340][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.359855][ T5806] veth0_vlan: entered promiscuous mode [ 118.450159][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.475842][ T5800] veth0_vlan: entered promiscuous mode [ 118.494562][ T5806] veth1_vlan: entered promiscuous mode [ 118.541233][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.549028][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.599204][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.621285][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.624100][ T5800] veth1_vlan: entered promiscuous mode [ 118.654906][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.654936][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.724101][ T5799] veth0_vlan: entered promiscuous mode [ 118.844880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.844905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.903788][ T5799] veth1_vlan: entered promiscuous mode [ 118.938705][ T5806] veth0_macvtap: entered promiscuous mode [ 119.002524][ T5806] veth1_macvtap: entered promiscuous mode [ 119.014833][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.014859][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.034795][ T5800] veth0_macvtap: entered promiscuous mode [ 119.079233][ T5800] veth1_macvtap: entered promiscuous mode [ 119.137787][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.139739][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.139762][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.202329][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.232354][ T5799] veth0_macvtap: entered promiscuous mode [ 119.255497][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.276271][ T5799] veth1_macvtap: entered promiscuous mode [ 119.279184][ T200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.285223][ T200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.294746][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.294868][ T200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.317514][ T200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.405000][ T200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.441021][ T1174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.453263][ T1284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.558770][ T1284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.626033][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.946426][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.115266][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.178841][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.221821][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.344909][ T200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.639360][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.639387][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.791434][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.791459][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.953330][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.953354][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.167754][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.167776][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.408996][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.409020][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.601236][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.601259][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.541067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.030714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.032629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.034138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.035511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.037561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.037802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.038968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.039205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.040379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 140.072787][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.072897][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.652719][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.839128][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 144.868186][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 144.868219][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.868241][ T5889] usb 4-1: Product: syz [ 144.868256][ T5889] usb 4-1: Manufacturer: syz [ 144.868271][ T5889] usb 4-1: SerialNumber: syz [ 145.947424][ T5889] usb 4-1: config 0 descriptor?? [ 148.816034][ T5889] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 148.816081][ T5889] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 150.113770][ T5889] usb 4-1: USB disconnect, device number 2 [ 154.392832][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 155.561113][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.708932][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 156.720587][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 156.720664][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.720689][ T31] usb 1-1: Product: syz [ 156.720706][ T31] usb 1-1: Manufacturer: syz [ 156.720721][ T31] usb 1-1: SerialNumber: syz [ 156.728116][ T31] usb 1-1: config 0 descriptor?? [ 157.198237][ T31] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 157.198257][ T31] eb 00 00 00 00 00 00 00 [ 157.198338][ T31] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 157.745953][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 157.748985][ T6157] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.799973][ T9] usb 1-1: USB disconnect, device number 2 [ 157.981356][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.130915][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 158.136935][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 158.136966][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.136986][ T5889] usb 4-1: Product: syz [ 158.137000][ T5889] usb 4-1: Manufacturer: syz [ 158.137015][ T5889] usb 4-1: SerialNumber: syz [ 158.196076][ T5889] usb 4-1: config 0 descriptor?? [ 159.619776][ T5889] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 159.619797][ T5889] eb 00 00 00 00 00 00 00 [ 159.619870][ T5889] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 161.243028][ T5889] usb 4-1: USB disconnect, device number 3 [ 161.276963][ T49] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 161.635432][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.635495][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 161.635524][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 161.635551][ T49] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 161.654568][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.654600][ T49] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.654622][ T49] usb 2-1: Manufacturer: syz [ 162.842193][ T49] usb 2-1: config 0 descriptor?? [ 163.283053][ T976] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.197912][ T976] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 164.197945][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.237269][ T976] usb 4-1: config 0 descriptor?? [ 164.351452][ T49] rc_core: IR keymap rc-hauppauge not found [ 164.351474][ T49] Registered IR keymap rc-empty [ 164.353545][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.372850][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.399503][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 164.473286][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 164.555732][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.571142][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.591221][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.611208][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 164.649201][ T976] ath6kl: Unsupported hardware version: 0x0 [ 164.670742][ T976] ath6kl: Failed to init ath6kl core: -22 [ 164.671532][ T976] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 164.930819][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.523359][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.542006][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.569315][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.581085][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.601163][ T49] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.624318][ T49] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 166.624344][ T49] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.731365][ T49] usb 2-1: USB disconnect, device number 2 [ 166.752938][ T5888] usb 4-1: USB disconnect, device number 4 [ 168.830892][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.044327][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.044373][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 169.044399][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.111148][ T9] usb 4-1: config 0 descriptor?? [ 169.731795][ T9] (null): keene_cmd_main failed (-110) [ 169.800909][ T9] video4linux radio48: keene_cmd_main failed (-32) [ 169.800941][ T9] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 171.790238][ T5873] usb 4-1: USB disconnect, device number 5 [ 172.381970][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.990897][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 173.013204][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 173.013236][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.013257][ T9] usb 5-1: Product: syz [ 173.013272][ T9] usb 5-1: Manufacturer: syz [ 173.013288][ T9] usb 5-1: SerialNumber: syz [ 173.055393][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 173.078050][ T9] usb 5-1: config 0 descriptor?? [ 173.218051][ T5889] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 173.218151][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.313936][ T5889] usb 3-1: config 0 descriptor?? [ 173.353830][ T9] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 173.353851][ T9] eb 00 00 00 00 00 00 00 [ 173.353943][ T9] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 173.903426][ T5889] ath6kl: Unsupported hardware version: 0x0 [ 173.933523][ T5889] ath6kl: Failed to init ath6kl core: -22 [ 173.934114][ T5889] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 174.874860][ T976] usb 5-1: USB disconnect, device number 2 [ 177.194393][ T976] usb 3-1: USB disconnect, device number 2 [ 182.952488][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 183.000830][ T6007] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 183.344967][ T6007] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 183.344999][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.357706][ T6007] usb 2-1: config 0 descriptor?? [ 184.471658][ T6007] ath6kl: Failed to submit usb control message: -71 [ 184.471705][ T6007] ath6kl: unable to send the bmi data to the device: -71 [ 184.471719][ T6007] ath6kl: Unable to send get target info: -71 [ 184.488809][ T6007] ath6kl: Failed to init ath6kl core: -71 [ 184.489412][ T6007] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 184.540407][ T6007] usb 2-1: USB disconnect, device number 3 [ 192.597239][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 193.332323][ T5889] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 193.430460][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 193.430483][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.479420][ T31] usb 4-1: config 0 descriptor?? [ 193.613057][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 193.625206][ T5889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 193.625243][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.625266][ T5889] usb 3-1: Product: syz [ 193.625283][ T5889] usb 3-1: Manufacturer: syz [ 193.625300][ T5889] usb 3-1: SerialNumber: syz [ 193.637081][ T5889] usb 3-1: config 0 descriptor?? [ 193.720855][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 193.895233][ T5889] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 193.895254][ T5889] eb 00 00 00 00 00 00 00 [ 193.895354][ T5889] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 194.028791][ T31] ath6kl: Unsupported hardware version: 0x0 [ 194.029478][ T31] ath6kl: Failed to init ath6kl core: -22 [ 194.030031][ T31] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 194.085379][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 194.749509][ T31] usb 3-1: USB disconnect, device number 3 [ 196.231496][ T6007] usb 4-1: USB disconnect, device number 6 [ 199.650631][ C1] hrtimer: interrupt took 45906 ns [ 200.601542][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.601611][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.568252][ T976] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 218.656717][ T49] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.713760][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.713980][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.714019][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 219.714048][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.717375][ T976] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.717404][ T976] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.717424][ T976] usb 2-1: Manufacturer: syz [ 219.720836][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 219.726617][ T976] usb 2-1: config 0 descriptor?? [ 219.804800][ T49] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 219.804832][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.804853][ T49] usb 4-1: Product: syz [ 219.804877][ T49] usb 4-1: Manufacturer: syz [ 219.804892][ T49] usb 4-1: SerialNumber: syz [ 219.861183][ T49] usb 4-1: config 0 descriptor?? [ 220.097788][ T49] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 220.097809][ T49] eb 00 00 00 00 00 00 00 [ 220.097892][ T49] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 220.280777][ T976] rc_core: IR keymap rc-hauppauge not found [ 220.280798][ T976] Registered IR keymap rc-empty [ 220.282613][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.312599][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.571009][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 220.592592][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 220.602269][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.626604][ T49] usb 4-1: USB disconnect, device number 7 [ 220.632410][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.651422][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.672326][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.715523][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.732676][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.752750][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.781866][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.801025][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 220.902694][ T976] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 221.356751][ T976] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 221.356778][ T976] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.471801][ T976] usb 2-1: USB disconnect, device number 4 [ 221.515786][ T6575] warning: `syz.2.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 233.709876][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 233.710083][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 233.710182][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 233.721567][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 233.722648][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 233.747212][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.843556][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 235.417945][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 235.417986][ T9] usb 4-1: can't read configurations, error -71 [ 236.460915][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 236.903194][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.903239][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 236.903263][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.124712][ T5873] usb 1-1: config 0 descriptor?? [ 238.532395][ T6677] 9pnet_fd: Insufficient options for proto=fd [ 238.549420][ T6675] 9pnet_fd: Insufficient options for proto=fd [ 239.092422][ T5873] video4linux radio48: keene_cmd_set failed (-71) [ 239.092450][ T5873] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 239.130066][ T5873] usb 1-1: USB disconnect, device number 3 [ 242.118595][ T49] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 242.536204][ T49] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 242.536236][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.623497][ T49] usb 5-1: config 0 descriptor?? [ 245.198777][ T49] ath6kl: Failed to read usb control message: -110 [ 245.198834][ T49] ath6kl: Unable to read the bmi data from the device: -110 [ 245.198848][ T49] ath6kl: Unable to recv target info: -110 [ 245.200418][ T49] ath6kl: Failed to init ath6kl core: -110 [ 245.214427][ T49] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 245.269416][ T49] usb 5-1: USB disconnect, device number 3 [ 245.288313][ T6007] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 245.495806][ T6007] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.495876][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 245.495905][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 245.495932][ T6007] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.497978][ T6007] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.498005][ T6007] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.498025][ T6007] usb 3-1: Manufacturer: syz [ 246.536109][ T6007] usb 3-1: config 0 descriptor?? [ 247.870236][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 249.306440][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 249.310759][ T6007] rc_core: IR keymap rc-hauppauge not found [ 249.310779][ T6007] Registered IR keymap rc-empty [ 249.311222][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 249.334748][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.130659][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 252.341622][ T6007] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 252.369771][ T6007] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 252.479784][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.494328][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.513360][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.531967][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.554759][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.571240][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.591520][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.617499][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.631239][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.653196][ T6007] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 252.655614][ T9] usb 2-1: string descriptor 0 read error: -71 [ 252.655748][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 252.655775][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.699406][ T6007] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 252.699432][ T6007] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.744973][ T9] usb 2-1: config 0 descriptor?? [ 252.750908][ T9] usb 2-1: can't set config #0, error -71 [ 252.778126][ T6007] usb 3-1: USB disconnect, device number 4 [ 252.792440][ T9] usb 2-1: USB disconnect, device number 5 [ 254.151943][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 254.621515][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 254.621548][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.731469][ T31] usb 1-1: config 0 descriptor?? [ 255.583436][ T31] ath6kl: Unsupported hardware version: 0x0 [ 255.620639][ T31] ath6kl: Failed to init ath6kl core: -22 [ 255.621221][ T31] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 256.473733][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 257.690076][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.690137][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 257.690166][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 257.690194][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 257.751061][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.751097][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.751119][ T31] usb 2-1: Manufacturer: syz [ 257.811003][ T5130] usb 1-1: USB disconnect, device number 5 [ 257.850967][ T31] usb 2-1: config 0 descriptor?? [ 258.539648][ T6821] Zero length message leads to an empty skb Stopping sshd: [ 259.481872][ T31] rc_core: IR keymap rc-hauppauge not found [ 259.481892][ T31] Registered IR keymap rc-empty [ 259.483098][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.115010][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.134006][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 260.155945][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 260.177671][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.216769][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.254256][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.274598][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.371109][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.392578][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.411038][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.431046][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.470992][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.491110][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 260.515432][ T31] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 260.515458][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 260.548272][ T31] usb 2-1: USB disconnect, device number 6 stopped /usr/sbin/sshd (pid 5557) OK [ 260.811551][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.969570][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 260.969616][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 260.969640][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.142910][ T5889] usb 5-1: config 0 descriptor?? [ 262.353283][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.353360][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.160284][ T5889] radio-keene 5-1:0.0: V4L2 device registered as radio48 Stopping crond: [ 263.413908][ T5889] usb 5-1: USB disconnect, device number 4 [ 263.486638][ T5806] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 263.486659][ T5806] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5806, name: syz-executor [ 263.486678][ T5806] preempt_count: 0, expected: 0 [ 263.486688][ T5806] RCU nest depth: 1, expected: 0 [ 263.486712][ T5806] 3 locks held by syz-executor/5806: [ 263.486725][ T5806] #0: ffff88805f6ba0d0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 263.488192][ T5806] #1: ffff88805f6bab98 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbe0 [ 263.488256][ T5806] #2: ffffffff8d7aa500 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 263.488341][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.488365][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.488385][ T5806] Call Trace: [ 263.488398][ T5806] [ 263.488407][ T5806] dump_stack_lvl+0x189/0x250 [ 263.488439][ T5806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.488476][ T5806] ? print_lock_name+0xde/0x100 [ 263.488508][ T5806] __might_resched+0x44b/0x5d0 [ 263.488540][ T5806] ? __pfx___might_resched+0x10/0x10 [ 263.488569][ T5806] ? rt_mutex_slowunlock+0x493/0x8a0 [ 263.488600][ T5806] ? rt_spin_lock+0x1c1/0x3e0 [ 263.488644][ T5806] iput+0x2b/0xc50 [ 263.488678][ T5806] ? hook_sb_delete+0x1a8/0xbe0 [ 263.488709][ T5806] hook_sb_delete+0x6b8/0xbe0 [ 263.488736][ T5806] ? hook_sb_delete+0x1a8/0xbe0 [ 263.488767][ T5806] ? __pfx_hook_sb_delete+0x10/0x10 [ 263.488794][ T5806] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 263.488822][ T5806] ? evict_inodes+0x684/0x6d0 [ 263.488855][ T5806] ? __pfx_evict_inodes+0x10/0x10 [ 263.488895][ T5806] security_sb_delete+0x80/0x150 [ 263.488920][ T5806] generic_shutdown_super+0xaa/0x2c0 [ 263.488948][ T5806] kill_litter_super+0x76/0xb0 [ 263.488982][ T5806] deactivate_locked_super+0xb9/0x130 [ 263.489008][ T5806] cleanup_mnt+0x425/0x4c0 [ 263.489045][ T5806] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.489072][ T5806] task_work_run+0x1d4/0x260 [ 263.489096][ T5806] ? __pfx_task_work_run+0x10/0x10 [ 263.489114][ T5806] ? __x64_sys_umount+0x122/0x160 [ 263.489145][ T5806] ? exit_to_user_mode_loop+0x40/0x130 [ 263.489180][ T5806] exit_to_user_mode_loop+0xe9/0x130 [ 263.489212][ T5806] do_syscall_64+0x2bd/0xfa0 [ 263.489239][ T5806] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.489261][ T5806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.489283][ T5806] ? clear_bhb_loop+0x60/0xb0 [ 263.489311][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.489333][ T5806] RIP: 0033:0x7f86079101f7 [ 263.489357][ T5806] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 263.489376][ T5806] RSP: 002b:00007ffec791df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 263.489396][ T5806] RAX: 0000000000000000 RBX: 00007f8607991d7d RCX: 00007f86079101f7 [ 263.489411][ T5806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec791e010 [ 263.489423][ T5806] RBP: 00007ffec791e010 R08: 0000000000000000 R09: 0000000000000000 [ 263.489436][ T5806] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec791f100 [ 263.489450][ T5806] R13: 00007f8607991d7d R14: 000000000003ff1a R15: 00007ffec79201d0 [ 263.489486][ T5806] [ 263.722191][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.873400][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 263.893209][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 263.893240][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 stopped /usr/sbin/crond (pid 5543) [ 263.961686][ T9] usb 3-1: config 0 descriptor?? OK [ 264.050799][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 264.078816][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 264.079231][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.079254][ T5889] usb 1-1: Product: syz [ 264.079269][ T5889] usb 1-1: Manufacturer: syz [ 264.079284][ T5889] usb 1-1: SerialNumber: syz [ 264.114318][ T5889] usb 1-1: config 0 descriptor?? [ 264.347182][ T5889] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 264.347203][ T5889] eb 00 00 00 00 00 00 00 [ 264.347343][ T5889] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 Stopping dhcpcd... [ 264.394951][ T9] ath6kl: Unsupported hardware version: 0x0 [ 264.412411][ T9] ath6kl: Failed to init ath6kl core: -22 [ 264.413059][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 stopped /sbin/dhcpcd (pid 5463) Stopping network: [ 265.180860][ T9] usb 3-1: USB disconnect, device number 5 [ 265.365277][ T5889] usb 1-1: USB disconnect, device number 6 OK Stopping iptables: modprobe: can't change directory to 'syzkaller': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5151) OK umount: can't remount debugfs read-only serialport: VM disconnected.