last executing test programs: 22m25.080074238s ago: executing program 32 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 21m13.739986915s ago: executing program 33 (id=1080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES64], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r7, 0x0, 0xfffe}, 0x38) 19m4.299473154s ago: executing program 6 (id=1817): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 19m3.855731683s ago: executing program 6 (id=1822): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x34, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0xfffffffffffffe96, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="581f0000", @ANYRES16, @ANYBLOB="000126bd7000fddbdf2524000000080002", @ANYRES32=r5, @ANYBLOB="0a0001007770616e310000000a0001007770616e", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4000) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r10, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x420}}, 0x8004) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @remote, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 19m3.038047247s ago: executing program 6 (id=1830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19m0.734747447s ago: executing program 6 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 18m59.192296829s ago: executing program 6 (id=1854): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000400)=0x6, 0x4) 18m58.915764807s ago: executing program 6 (id=1857): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x6d748dce, 0xb16a}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x6, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r3, 0xb80) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0xfff) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002200)={0x2, 0x1, 0xc, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 18m44.514445406s ago: executing program 34 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f00000003c0)=""/125, 0x7d}], 0x5}, 0x3}], 0x1, 0x0, 0x0) 18m43.512242614s ago: executing program 35 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18m43.418515764s ago: executing program 36 (id=1857): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x6d748dce, 0xb16a}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x6, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r3, 0xb80) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0xfff) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002200)={0x2, 0x1, 0xc, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 18m1.983075385s ago: executing program 5 (id=1999): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 18m1.266849756s ago: executing program 5 (id=2000): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) write(r0, &(0x7f0000000240)="2cd889f03e14f3", 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 17m59.139856554s ago: executing program 5 (id=2001): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) 17m58.936694788s ago: executing program 5 (id=2002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 17m58.655058261s ago: executing program 5 (id=2003): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) 17m58.573361888s ago: executing program 5 (id=2004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f8ff0000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 17m43.441360917s ago: executing program 37 (id=2004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f8ff0000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 15m12.009470831s ago: executing program 9 (id=2357): capset(0x0, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x700, 0x7, 0xffffffff, 0x8, {{0x5, 0x4, 0x2, 0x2f, 0xfffffffffffffea6, 0x67, 0x0, 0x12, 0x4, 0x0, @empty, @empty}}}}) 15m11.471378262s ago: executing program 9 (id=2360): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 15m11.271247897s ago: executing program 9 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) statfs(0x0, 0x0) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0088a80180c2000002ffffffffffff86dd640e371500083aff0000000000000000000000000000000000000000000000000000000000000001"], 0x42) 15m10.389072148s ago: executing program 9 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) close(r1) 15m10.139073638s ago: executing program 9 (id=2370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x1ffffffffffffecf, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x188a910387ab60ed, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xae8}, 0x18) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 15m9.837934161s ago: executing program 9 (id=2374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 15m1.134748976s ago: executing program 7 (id=2409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x1ffffffffffffecf, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x188a910387ab60ed, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xae8}, 0x18) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000f00)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 15m0.561999372s ago: executing program 7 (id=2412): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x13}, 0x5}], 0x1, 0x45833af92e4bbbfe, 0x0) 14m57.222392591s ago: executing program 7 (id=2415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) close(r0) 14m56.311432637s ago: executing program 7 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 14m56.244729276s ago: executing program 7 (id=2420): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x1, 0x12) 14m54.918726347s ago: executing program 7 (id=2426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x167, 0x7, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="1c2e4b48d07b7af46bfba4ce82342bc3c9de15b891b9ecfdf17b11445f135b4292557122688a55d842bf21ec0d29807b4747bcacace33b623cc359ce2efbf9223ca4561c73fdd7d6d9c541afd754064df9341998b48b2458482299ae4648ec314279", @ANYRES32=r6, @ANYRESOCT], 0x90}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRES16=r1, @ANYRES32=r7, @ANYBLOB="e2a34611cd04f60c486edefae346930ccb4d73b730d54f5aa9aa24e32efd3988ecc9eadc3f77411c72"], &(0x7f0000000880)='GPL\x00', 0x0, 0x51, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 14m54.64499538s ago: executing program 38 (id=2374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 14m39.671535553s ago: executing program 39 (id=2426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x167, 0x7, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="1c2e4b48d07b7af46bfba4ce82342bc3c9de15b891b9ecfdf17b11445f135b4292557122688a55d842bf21ec0d29807b4747bcacace33b623cc359ce2efbf9223ca4561c73fdd7d6d9c541afd754064df9341998b48b2458482299ae4648ec314279", @ANYRES32=r6, @ANYRESOCT], 0x90}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRES16=r1, @ANYRES32=r7, @ANYBLOB="e2a34611cd04f60c486edefae346930ccb4d73b730d54f5aa9aa24e32efd3988ecc9eadc3f77411c72"], &(0x7f0000000880)='GPL\x00', 0x0, 0x51, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 10m1.93531376s ago: executing program 8 (id=3321): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="8893234d2d30ec065fa4972940dd2151bb2889e1519c77267b721bb9421eda90f8185827096f2dc855fc0b8c84bfe2d36fba7b74a5f7f6243d4fc1b4596230cd8c01b4cb8cfa1d7c9a10d6670af8b38451b98bfd5f5ee4d3cf3a4c220306a81e5cd2d005e0f8a2ecbcde7415198751367222dbfeef6c1a2bcfa21439372423a82c2acfb32af4ea24ed9c5d0c8a55c78f312979feec3b876921eb800df382573bfec918d416316511670c7182f776363ee52088d10070918b5df39a501c5ef3e9fb752dac006f5a52"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000001c00)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$unix(0xffffffffffffffff, &(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x10) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4010) sendfile(r2, r1, 0x0, 0x578410eb) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000002200)=""/4110, 0x1000}], 0x2, 0x0, 0x64}, 0x60}], 0x1, 0x42, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r5, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x200, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) 9m59.162182375s ago: executing program 8 (id=3330): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x1d) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 9m58.970546025s ago: executing program 8 (id=3333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500"/16], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 9m55.522312176s ago: executing program 8 (id=3339): mkdirat(0xffffffffffffff9c, 0x0, 0x87) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 9m45.374985971s ago: executing program 8 (id=3367): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m45.269540721s ago: executing program 8 (id=3369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 9m30.172200312s ago: executing program 40 (id=3369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 6m34.41084107s ago: executing program 2 (id=3773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 6m33.439050535s ago: executing program 2 (id=3776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(r1, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000800)=""/243, 0xf3}], 0x4, &(0x7f0000000940)=""/116, 0x74}, 0x21}, {{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/33, 0x21}], 0x1}, 0x9}, {{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/205, 0xcd}, {&(0x7f0000000c40)=""/190, 0xbe}, {0x0}, {0x0}, {&(0x7f0000000e40)=""/93, 0x5d}], 0x5}, 0x7}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/247, 0xf7}, {0x0}, {&(0x7f0000001100)=""/219, 0xdb}, {&(0x7f0000001200)=""/81, 0x51}, {&(0x7f0000001280)=""/26, 0x1a}], 0x5, &(0x7f0000001340)=""/46, 0x2e}, 0x9}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2}, 0x9}], 0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6m31.877267352s ago: executing program 2 (id=3781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="1d", 0x1, 0x200400c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000440)="ea4323", 0x3, 0x4805, 0x0, 0x0) 6m31.646824341s ago: executing program 2 (id=3783): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000600)='./file0\x00', 0x0) 6m31.505356998s ago: executing program 2 (id=3784): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 6m29.031103989s ago: executing program 2 (id=3791): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) fsopen(&(0x7f0000001680)='nilfs2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$isdn(0x22, 0x2, 0x26) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYBLOB="fa108210664bc6d46c6e8b2e0167100703fd69fb", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="d115ab48a40c7ea89eab7a70f280b74aee3584d33ef8cde9d7dab3df2982f121a5111387fd311622dc9d4b35319084ae03f8576fb28104eb34d0c4fa5f05724a2e293d27a28585ca09b21cfe7b3d634507a07227c6f680acff31658a15691d38aad12a22262a4a488b66122205297d7798e1326ad5e29aa7c3b999e2f343e51f4891ebbeb1f3d79e8ca64a3fc40aa7680b4bda3abbdd736583a2bfddd25f0c581dc9093f1ea09a8365ade87a82e156b9bf900a07acdab59bd05ce13038273c6b69baadddaee2"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 6m11.471538238s ago: executing program 41 (id=3791): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) fsopen(&(0x7f0000001680)='nilfs2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$isdn(0x22, 0x2, 0x26) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYBLOB="fa108210664bc6d46c6e8b2e0167100703fd69fb", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="d115ab48a40c7ea89eab7a70f280b74aee3584d33ef8cde9d7dab3df2982f121a5111387fd311622dc9d4b35319084ae03f8576fb28104eb34d0c4fa5f05724a2e293d27a28585ca09b21cfe7b3d634507a07227c6f680acff31658a15691d38aad12a22262a4a488b66122205297d7798e1326ad5e29aa7c3b999e2f343e51f4891ebbeb1f3d79e8ca64a3fc40aa7680b4bda3abbdd736583a2bfddd25f0c581dc9093f1ea09a8365ade87a82e156b9bf900a07acdab59bd05ce13038273c6b69baadddaee2"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 5m8.540693258s ago: executing program 4 (id=3946): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xb4, 0x60, &(0x7f0000000500)="3cb5987db002e22c878e4a7b053d8d6c4eb03449f2af666c2aaaf49a92747a0092fa02a3422203901676eab60e78d843fa165c7b24b06da75c321c48261daf61103c1ff7ce1f67c1e5f4d970253649c607e73383dd411ec8d927e6303d375b65ee460dd9dbc51f11b5fb48a45499f58500f2cccf4ec53d9ea4723078b57bbb016c12a30420f299d937f968361815834e005a8f1cbb079ff88dc066243741be17b86e6bca3c992696ea743277f844a106e3040f68", &(0x7f0000000440)=""/96, 0x3, 0x0, 0xde, 0x63, &(0x7f00000005c0)="d5ff58bfb10b43f5194cf8518b8c056c14fb0999a7fc9dd53f84925b1d7667ebf35ebea55f81dd011f685e52ec1c024fb21c2963f7f39bc212de59a2b6b021bc8e154a0848621b4948c921485bad7e0eccafbb0b59bd27518ed0990ea10a66263f2ec2b131cb992ffbcd56c64ad105a3e3d3d5d825dfb097e9af996fd2f8e4a7a100adecbe99e8987bde7b3a533ac8684ac1c5cd12e03ef3838c8f80062cfe51f46047ccf95e209e7c6fb311d01c89523b8c3891daa9c581bdf8666bbc9de005312e7d8607f8fb938cbb21f189e1038afe92f8b6aae20793bde27983b5ed", &(0x7f0000000bc0)="34268a79681e4120234f5c9b3df937c0842e443d79ee085cc348dd70ea2b98e456b8c3def57176b8ab38786e2474b11db37879759e2485a6a90e0e9fbdd55f4fe4c43dbb65e984f4108a1d23a35ed374e3522b2546985bb4bc1dc1870e650fa27bf298", 0x1, 0x0, 0x2}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0, 0x5}, 0x4c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) fcntl$notify(r2, 0x402, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 5m8.148417159s ago: executing program 4 (id=3948): ioperm(0x6, 0x88, 0x8) r0 = syz_io_uring_setup(0x35ff, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0x86) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000007c0)=0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x41) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x6, 0x0, 0x8100, 0x0, {0x2, 0xfff3}, {0xfff1, 0xffff}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x20000000, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048810}, 0x40) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4000, 0x6, 0x4d, 0xffffffff, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ['\x00', "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x6, 0x6, 0x1e, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x20, 0x6, 0xffff}}) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) 5m2.615109842s ago: executing program 4 (id=3968): syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39a8b7102609f852ca6192e57466b36d248e5d7034551876f8823ee4395368bca72621f33d99aa1379e8e98e555c4db5eabe"], 0x54}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) open(&(0x7f0000000100)='./cgroup\x00', 0x400200, 0x80) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x6, '\x00', {0x0, 0x6, "317413", 0x10, 0x0, 0x0, @empty, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 4m58.387358975s ago: executing program 4 (id=3976): move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) 4m58.177386537s ago: executing program 4 (id=3977): read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0x128) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x8008}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$evdev(0x0, 0x0, 0x60000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffce, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4004020) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r7, 0x0, 0x0) 4m55.380222986s ago: executing program 4 (id=3980): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xc, 0x4, 0x8, 0x202, 0x1, 0xba7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffff54}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000400518d90303f70b1a095ef50b0de6b", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r5}, 0x38) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000059c0)='./file0\x00') 4m39.67567215s ago: executing program 42 (id=3980): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xc, 0x4, 0x8, 0x202, 0x1, 0xba7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffff54}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000400518d90303f70b1a095ef50b0de6b", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r5}, 0x38) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000059c0)='./file0\x00') 2m22.528037608s ago: executing program 3 (id=4176): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710feffffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m22.347316241s ago: executing program 3 (id=4177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="1c005e8008000700d20000000800060001000080080005ac1d000000"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r5, &(0x7f0000000080), 0x7) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000008000000000000000000000000000000002467223d2241fed79863e0679fdd493710f68ae6601cff23db700a1be5db169a3e839c532baafe401bc67a3d334c2c6161cb4fe80724d308fbfb3ff845d23356e18b07011324f265a06723d4a20c234592dc9a7a491d6b1f246bdcbf6da0439dd4c914b3296ffe25b6e6e95a2b219df334bc50949b34bd78f8188aa2bb5b2ecd855c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 2m20.677755801s ago: executing program 3 (id=4180): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setparam(r0, &(0x7f0000000180)=0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x4) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r4, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1000000000, {0x7, 0x21, 0x0, 0x772d62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="1f12", 0x2, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd37503131f237397e5fe3ce372297ec48108dcaba5ae65e31f00e641832d29ed658b91fed83e6fd480be0e3100965f081190bbb39a5965ceaa76975b88885041ff4e66e618d6c37c787f014eadb6c9f659ae43f57608e09d620830a3a9189603da1d8f0b721343051ada4dcfdf8af5d0ae8f263d2b21061978317", 0x161, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 2m14.130306051s ago: executing program 3 (id=4189): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000500fbffffff1f00000000000000"], 0x24, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m12.985728705s ago: executing program 3 (id=4190): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0xf, 0x4, 0x0, 0x2, 0xc04}}, 0x11c) 2m12.734489911s ago: executing program 3 (id=4192): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r2, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r2, 0x0, 0x20, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mknod$loop(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 1m57.437482379s ago: executing program 43 (id=4192): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r2, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r2, 0x0, 0x20, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mknod$loop(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 7.871471376s ago: executing program 0 (id=4343): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) 7.411047065s ago: executing program 1 (id=4344): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005"], 0x78) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.188664205s ago: executing program 1 (id=4345): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r0, 0x409, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file5/file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file5\x00', 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1a86f, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x7ff}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 6.009665244s ago: executing program 0 (id=4346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24044084}, 0x2000c080) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.726871077s ago: executing program 0 (id=4347): syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0xfffffe01, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) unshare(0x400) r6 = socket$inet(0x2, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x4000, r6}, 0x0) readv(r4, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 4.631677505s ago: executing program 0 (id=4348): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, 0x0, 0x50) fdatasync(r0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r4, 0x66a8, 0x4000, 0xf, 0x0, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') read$eventfd(r6, &(0x7f0000000340), 0x8) syz_io_uring_setup(0x48a, &(0x7f0000000100)={0x0, 0xd3df, 0x10000, 0x2, 0x3bf, 0x0, r1}, 0x0, &(0x7f0000000300)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) 3.925256865s ago: executing program 0 (id=4349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3.923168018s ago: executing program 1 (id=4350): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="04000008000000000000000000000000000000f7ae4cde137170de4ef8999df900bec6d2089310fbe4463ec2152fbda6406495ce7da3336dcaa00d0165edbf4e99014b94d7c7cd408d2c42fb28a8f342e5b795cd6561d0c95b2f318f7e933e87429db1f0e6d513bee9f169cd4df2aefa2e8901cfcb063a179549c8d71a33f31de6138ffeb0a9ba49e2efa3f4cc1a3b1957cd45ff847a88ed1fd3f5696b1366cc19bf9d1c47daebb16684b37b48ee978afe211a36a34619f2f0ef64cab1f87dc30ef2e016c82de8a4bc83d88e56e2fe9038e95047d2bca09a3f97917fbc3500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff01000000020000000000"], 0x50) socket$netlink(0x10, 0x3, 0x0) 2.84894761s ago: executing program 0 (id=4351): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00009f7000/0x2000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x28000600) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 2.694883928s ago: executing program 1 (id=4352): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.318960371s ago: executing program 1 (id=4353): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) 0s ago: executing program 1 (id=4354): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(r2, 0x2, r1) r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x2, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1b, 0x0, @fd_index=0x7, 0x0, 0x0, 0xff, 0x9, 0x1, {0x0, 0x0, r4}}) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) io_uring_enter(r4, 0xb516, 0xc2de, 0x8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000001200000140012800c0001006d6163766c616e00040002800a0001000000000000000000"], 0x40}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000dc0)=0x9, 0x4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x6, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCDELDLCI(r10, 0x8981, &(0x7f0000000000)={'erspan0\x00', 0x7f}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r11, 0x6419aa27cadae9f1, 0x78bd2b, 0x25dfdbf9, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c880}, 0x404c050) kernel console output (not intermixed with test programs): adv: batadv0: Adding interface: batadv_slave_0 [ 1202.684263][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.684292][T17381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.712640][T17381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.712662][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.712696][T17381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.713383][T17522] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1202.848400][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.963381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1203.302247][T17381] hsr_slave_0: entered promiscuous mode [ 1203.310838][T17381] hsr_slave_1: entered promiscuous mode [ 1203.327498][T17381] debugfs: 'hsr0' already exists in 'hsr' [ 1203.327766][T17381] Cannot create hsr debugfs directory [ 1203.595008][ T1024] hsr_slave_0: left promiscuous mode [ 1203.611321][ T5949] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1203.664631][ T1024] hsr_slave_1: left promiscuous mode [ 1203.665642][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.722610][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.801363][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 1203.803754][ T5949] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1203.803780][ T5949] usb 2-1: config 0 has no interface number 0 [ 1203.806819][ T5949] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1203.806847][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.806865][ T5949] usb 2-1: Product: syz [ 1203.806878][ T5949] usb 2-1: Manufacturer: syz [ 1203.806891][ T5949] usb 2-1: SerialNumber: syz [ 1203.883790][ T5949] usb 2-1: config 0 descriptor?? [ 1203.900502][ T5949] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1203.900544][ T5949] usb 2-1: selecting invalid altsetting 1 [ 1203.900568][ T5949] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1203.952858][ T5949] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1203.953867][ T5949] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1203.953970][ T5949] usb 2-1: media controller created [ 1204.029671][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1204.141086][ T5949] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1204.141160][ T5949] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1204.171382][ T5949] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1204.302140][ T5949] usb 2-1: USB disconnect, device number 5 [ 1204.669205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1204.747778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.491295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.510071][T17564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3706'. [ 1205.512491][T17564] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 1205.681092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.753847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.832795][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 1205.912985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.964072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.057126][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 1206.348896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.441426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.588941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.752942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.311911][T17564] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1207.339961][T17578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1208.081071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1208.748877][ C0] vkms_vblank_simulate: vblank timer overrun [ 1208.907792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.261080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.410908][T17608] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1210.624970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.726651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.750221][T17619] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1210.752328][T17619] netlink: 'syz.3.3720': attribute type 1 has an invalid length. [ 1211.101475][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 1213.677146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.688599][T17613] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1213.715631][T17619] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1214.291253][T16826] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1214.363531][T17644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1214.366862][T17644] netlink: 'syz.1.3728': attribute type 1 has an invalid length. [ 1214.366879][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1214.446536][T16826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1214.446561][T16826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1214.446578][T16826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1214.446596][T16826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1214.449921][T16826] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1214.449943][T16826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.449957][T16826] usb 3-1: Product: syz [ 1214.449968][T16826] usb 3-1: Manufacturer: syz [ 1214.449978][T16826] usb 3-1: SerialNumber: syz [ 1214.459303][T16826] usb 3-1: config 0 descriptor?? [ 1214.697996][T16826] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1214.898330][T16826] usb 3-1: USB disconnect, device number 4 [ 1215.185076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.614559][T17381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1215.727275][T17381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1215.851321][T16826] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1215.869618][T17381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1216.053030][T17381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1217.145255][T16826] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.145290][T16826] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1217.145388][T16826] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1217.145421][T16826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.199205][T16826] usb 3-1: config 0 descriptor?? [ 1217.656800][T16826] hid_parser_main: 29 callbacks suppressed [ 1217.656828][T16826] aquacomputer_d5next 0003:0C70:F014.000A: unknown main item tag 0x0 [ 1217.656864][T16826] aquacomputer_d5next 0003:0C70:F014.000A: unknown main item tag 0x0 [ 1217.656892][T16826] aquacomputer_d5next 0003:0C70:F014.000A: unknown main item tag 0x0 [ 1217.687913][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.721557][T16826] aquacomputer_d5next 0003:0C70:F014.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 1217.792681][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.816915][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.817613][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.893761][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.893913][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.057754][T17668] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 1218.057780][T17668] netlink: 'syz.4.3733': attribute type 4 has an invalid length. [ 1218.927977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.153374][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.228383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.765032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.440294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.770293][T16826] usb 3-1: USB disconnect, device number 5 [ 1221.887327][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.483244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.943625][T17381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.923589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.994799][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.341453][T17381] veth0_vlan: entered promiscuous mode [ 1225.376296][T17381] veth1_vlan: entered promiscuous mode [ 1225.601928][T17381] veth0_macvtap: entered promiscuous mode [ 1225.618732][T17381] veth1_macvtap: entered promiscuous mode [ 1225.792423][T17381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.890041][T17381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.152581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.329074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.443010][ T8098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.443563][ T8098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.519278][ T8098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.552940][ T8098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.411723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.572578][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.572604][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.976212][ T8098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.976236][ T8098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.186918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1230.645819][T17763] random: crng reseeded on system resumption [ 1231.094157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.489740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.750274][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 1236.153283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.351305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.536269][T17802] input: syz1 as /devices/virtual/input/input7 [ 1236.990583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.051376][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.252032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.401890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.861469][T17815] random: crng reseeded on system resumption [ 1239.016449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.270357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.397943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.483836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.529265][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.556689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.866476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.857026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.912116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.042428][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1242.339068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.621982][T17865] random: crng reseeded on system resumption [ 1242.950082][T17856] delete_channel: no stack [ 1243.476205][T17869] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1243.498546][T17869] netlink: 'syz.1.3793': attribute type 1 has an invalid length. [ 1243.692556][T17869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1244.160057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.237473][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.003068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.074466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.131179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.181745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.252869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.304081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.444771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.512169][T17890] fuse: Bad value for 'fd' [ 1245.817421][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1246.087924][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3804'. [ 1246.396952][T17904] random: crng reseeded on system resumption [ 1248.025297][T17921] netlink: 'syz.1.3808': attribute type 1 has an invalid length. [ 1248.025321][T17921] netlink: 'syz.1.3808': attribute type 4 has an invalid length. [ 1248.506195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.222696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.256927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.526165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.637234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.091472][T17945] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1253.091500][T17945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1253.091599][T17945] vhci_hcd vhci_hcd.0: Device attached [ 1253.094022][T17945] Device name cannot be null; rc = [-22] [ 1253.217267][T17946] vhci_hcd: connection closed [ 1253.223471][ T3623] vhci_hcd: stop threads [ 1253.223486][ T3623] vhci_hcd: release socket [ 1253.223511][ T3623] vhci_hcd: disconnect device [ 1253.817003][T17957] random: crng reseeded on system resumption [ 1261.263288][T11771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1261.271752][T11771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1261.275377][T11771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1261.305302][T11771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1261.307431][T11771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1261.309847][T17979] syzkaller0: entered promiscuous mode [ 1261.309876][T17979] syzkaller0: entered allmulticast mode [ 1261.889055][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1262.574392][ C0] vkms_vblank_simulate: vblank timer overrun [ 1263.020306][T17980] lo speed is unknown, defaulting to 1000 [ 1263.029820][T17980] lo speed is unknown, defaulting to 1000 [ 1263.404338][ T5846] Bluetooth: hci5: command tx timeout [ 1265.481148][ T5846] Bluetooth: hci5: command tx timeout [ 1267.561179][ T5846] Bluetooth: hci5: command tx timeout [ 1268.955477][T17980] chnl_net:caif_netlink_parms(): no params data found [ 1270.196044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.924153][ T5846] Bluetooth: hci5: command tx timeout [ 1271.785130][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.194113][T17980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.194270][T17980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.194569][T17980] bridge_slave_0: entered allmulticast mode [ 1272.248493][T17980] bridge_slave_0: entered promiscuous mode [ 1272.271988][T17980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.272135][T17980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.272412][T17980] bridge_slave_1: entered allmulticast mode [ 1272.316784][T17980] bridge_slave_1: entered promiscuous mode [ 1273.200814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1277.033450][T17980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.039266][T17980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.770371][T18056] NILFS (nbd4): device size too small [ 1277.912705][T17980] team0: Port device team_slave_0 added [ 1277.916888][T17980] team0: Port device team_slave_1 added [ 1286.454249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1286.708605][T18064] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1286.724354][T17980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.724373][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.724410][T17980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.731701][T17980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.731721][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.731756][T17980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.004838][T17980] hsr_slave_0: entered promiscuous mode [ 1289.006331][T17980] hsr_slave_1: entered promiscuous mode [ 1289.007268][T17980] debugfs: 'hsr0' already exists in 'hsr' [ 1289.007294][T17980] Cannot create hsr debugfs directory [ 1289.263831][T18091] ufs: You didn't specify the type of your ufs filesystem [ 1289.263831][T18091] [ 1289.263831][T18091] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1289.263831][T18091] [ 1289.263831][T18091] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1289.263867][T18091] ufs: ufstype=old is supported read-only [ 1289.557925][T18102] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3865'. [ 1289.558676][T18101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3864'. [ 1289.909466][T18108] block nbd1: NBD_DISCONNECT [ 1290.113751][T18100] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3865'. [ 1290.456449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.892620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.995533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.614210][T18119] fuse: Bad value for 'fd' [ 1293.457875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.081849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.357649][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.592854][T18146] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1295.601513][T18143] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1296.918678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.082240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.261347][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.923842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.070481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.812529][T18186] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1299.857773][T18185] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1300.198935][T18193] netlink: 'syz.1.3896': attribute type 1 has an invalid length. [ 1300.771204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.457025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.659276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.943708][T18193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1302.497517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.456262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.215502][T18223] fuse: Bad value for 'fd' [ 1304.664018][T18226] netlink: 'syz.1.3905': attribute type 16 has an invalid length. [ 1304.664042][T18226] netlink: 'syz.1.3905': attribute type 17 has an invalid length. [ 1304.733123][T18226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.766222][T17980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1304.847526][T17980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1304.898238][T17980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1305.237879][T17980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1305.568602][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.911367][T17980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.955266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.988118][T17980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.059021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1306.546461][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.546728][T11730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.902323][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.902493][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.028660][T18252] netlink: 'syz.3.3910': attribute type 1 has an invalid length. [ 1307.135418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.208930][T11730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.348574][T18252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1308.574730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1308.620833][ C0] vkms_vblank_simulate: vblank timer overrun [ 1308.680883][T11730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.747101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.828034][T18289] netlink: 'syz.3.3921': attribute type 1 has an invalid length. [ 1309.920446][T11730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.170278][T18289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1310.332824][T18298] fuse: Bad value for 'fd' [ 1310.707333][T11730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.004567][T18306] fuse: Bad value for 'fd' [ 1311.283049][T17980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.088987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1313.089924][T11771] Bluetooth: hci3: command 0x0406 tx timeout [ 1313.581861][T18316] siw: device registration error -23 [ 1314.989168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.322988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.455939][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.606241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.705770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.783422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.855688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.221668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.456007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.036530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.271315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.634380][T18373] input: syz1 as /devices/virtual/input/input8 [ 1320.317878][T18380] fuse: Bad value for 'fd' [ 1320.524101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.617745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.682039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.750804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.808244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.890062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.947346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.196310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.347188][T11771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1321.370417][T11771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1321.381832][T11771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1321.383113][T11771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1321.389298][T11771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1321.466575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.335615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.357012][T11730] bond0 (unregistering): Released all slaves [ 1322.538286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.668880][T18384] lo speed is unknown, defaulting to 1000 [ 1322.673647][T18384] lo speed is unknown, defaulting to 1000 [ 1322.756150][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.940515][T11730] tipc: Left network mode [ 1323.090593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.228257][T18399] netlink: 'syz.4.3948': attribute type 16 has an invalid length. [ 1323.228282][T18399] netlink: 'syz.4.3948': attribute type 17 has an invalid length. [ 1323.334408][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.675484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.768590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.881285][ T5846] Bluetooth: hci0: command tx timeout [ 1325.961429][ T5846] Bluetooth: hci0: command tx timeout [ 1327.570785][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.173196][ T5846] Bluetooth: hci0: command tx timeout [ 1328.434261][T18399] bridge1: left promiscuous mode [ 1328.434297][T18399] bridge1: left allmulticast mode [ 1328.493923][ T5925] lo speed is unknown, defaulting to 1000 [ 1328.493954][ T5925] syz: Port: 1 Link DOWN [ 1328.529031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.901652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.103099][T18463] befs: (nbd4): No write support. Marking filesystem read-only [ 1329.137417][T18463] befs: (nbd4): unable to read superblock [ 1330.298850][ T5846] Bluetooth: hci0: command tx timeout [ 1330.455517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.538226][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.770292][ T3623] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.772122][ T37] audit: type=1800 audit(1759102497.458:3662): pid=18426 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3957" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1330.772603][T18426] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1330.772761][T18426] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1330.772784][T18426] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1332.583625][ T3623] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.626780][ T3623] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.722784][ T3623] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.015354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.629765][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.968461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1337.366617][T11730] hsr_slave_0: left promiscuous mode [ 1337.953257][T11730] hsr_slave_1: left promiscuous mode [ 1337.983351][T11730] veth1_macvtap: left promiscuous mode [ 1337.983481][T11730] veth0_macvtap: left promiscuous mode [ 1337.986675][T11730] veth1_vlan: left promiscuous mode [ 1337.986848][T11730] veth0_vlan: left promiscuous mode [ 1339.275348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.333497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.392087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.434760][T18525] input: syz1 as /devices/virtual/input/input9 [ 1340.121337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.163578][T18532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1340.537716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.654214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.869035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.867018][T18544] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1341.867047][T18544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1341.867151][T18544] vhci_hcd vhci_hcd.0: Device attached [ 1342.371909][ T2167] usb 40-1: SetAddress Request (2) to port 0 [ 1342.372002][ T2167] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1342.419339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.392264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.445990][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.490634][T18545] vhci_hcd: connection reset by peer [ 1343.505686][ T3592] vhci_hcd: stop threads [ 1343.505706][ T3592] vhci_hcd: release socket [ 1343.505788][ T3592] vhci_hcd: disconnect device [ 1344.371111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.442521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.500285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.586045][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.633809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.988630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.223561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.401258][ T2167] usb 40-1: device descriptor read/8, error -110 [ 1347.546170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.285950][ T2167] usb usb40-port1: attempt power cycle [ 1349.843191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.925831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.009648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.085543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.108585][ T2167] usb usb40-port1: unable to enumerate USB device [ 1350.297391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.458168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.502244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.820817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.933738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.148245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.311413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.382126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.467423][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.369737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.500706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.539540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.575010][T11771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1353.587726][T11771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1353.593712][T11771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1353.595178][T11771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1353.596170][T11771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1353.748924][T18384] chnl_net:caif_netlink_parms(): no params data found [ 1353.787818][T18601] team0: No ports can be present during mode change [ 1354.367168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.453251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.599979][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.713721][T11771] Bluetooth: hci2: command tx timeout [ 1356.917881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.188919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.282297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.455358][T18598] lo speed is unknown, defaulting to 1000 [ 1357.465621][T18384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.522120][T18384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.523273][T18384] bridge_slave_0: entered allmulticast mode [ 1357.575102][T18384] bridge_slave_0: entered promiscuous mode [ 1357.612870][T18598] lo speed is unknown, defaulting to 1000 [ 1357.614145][T18384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.614295][T18384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.614571][T18384] bridge_slave_1: entered allmulticast mode [ 1357.625145][T18384] bridge_slave_1: entered promiscuous mode [ 1357.721510][T11771] Bluetooth: hci2: command tx timeout [ 1357.857667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1358.064866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1358.084916][T18384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.156394][T18384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.330519][T18639] team0: No ports can be present during mode change [ 1358.551402][T18384] team0: Port device team_slave_0 added [ 1358.569600][T18643] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1358.569627][T18643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1358.569873][T18643] vhci_hcd vhci_hcd.0: Device attached [ 1359.841857][T11771] Bluetooth: hci2: command tx timeout [ 1360.009342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1360.029411][T18384] team0: Port device team_slave_1 added [ 1360.104494][T16826] usb 36-1: SetAddress Request (2) to port 0 [ 1360.104583][T16826] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1360.148231][T18644] vhci_hcd: connection closed [ 1360.148895][T18571] vhci_hcd: stop threads [ 1360.148914][T18571] vhci_hcd: release socket [ 1360.149006][T18571] vhci_hcd: disconnect device [ 1360.169864][T16826] usb 36-1: enqueue for inactive port 0 [ 1360.651592][T16826] usb usb36-port1: attempt power cycle [ 1363.221310][T11771] Bluetooth: hci2: command tx timeout [ 1363.641866][T16826] usb usb36-port1: unable to enumerate USB device [ 1363.745352][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4019'. [ 1363.812425][T18384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.812442][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.812473][T18384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.946141][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4019'. [ 1364.159584][T18384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.159607][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.159639][T18384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.160741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.873801][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.265518][T18679] team0: Mode changed to "activebackup" [ 1366.266339][T18685] syz_tun: entered allmulticast mode [ 1367.017299][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.340687][T18682] syz_tun: left allmulticast mode [ 1367.378857][T18384] hsr_slave_0: entered promiscuous mode [ 1367.410040][T18384] hsr_slave_1: entered promiscuous mode [ 1367.418322][T18384] debugfs: 'hsr0' already exists in 'hsr' [ 1367.418352][T18384] Cannot create hsr debugfs directory [ 1367.617637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1372.828159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1374.275483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1374.676714][T18701] pim6reg: entered allmulticast mode [ 1375.029444][T18714] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1375.410079][T18720] siw: device registration error -23 [ 1376.131788][T18598] chnl_net:caif_netlink_parms(): no params data found [ 1376.352166][T18722] team0: No ports can be present during mode change [ 1376.561232][T16826] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1376.595406][T18724] lo speed is unknown, defaulting to 1000 [ 1376.713233][T16826] usb 2-1: config 0 has no interfaces? [ 1376.715409][T16826] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1376.715432][T16826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.715446][T16826] usb 2-1: Product: syz [ 1376.715457][T16826] usb 2-1: Manufacturer: syz [ 1376.715467][T16826] usb 2-1: SerialNumber: syz [ 1376.770715][T16826] usb 2-1: config 0 descriptor?? [ 1376.770917][T18724] lo speed is unknown, defaulting to 1000 [ 1379.962175][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.962577][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.963489][T18598] bridge_slave_0: entered allmulticast mode [ 1380.025219][T18598] bridge_slave_0: entered promiscuous mode [ 1380.382609][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.387440][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.416925][T18598] bridge_slave_1: entered allmulticast mode [ 1380.537434][T18598] bridge_slave_1: entered promiscuous mode [ 1381.785285][T11771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1381.801487][T11771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1381.803392][T11771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1381.812778][T11771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1381.813845][T11771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1382.310484][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.314055][T18765] team0: Unable to change to the same mode the team is in [ 1382.446389][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.265626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.881601][ T5846] Bluetooth: hci5: command tx timeout [ 1385.106134][T18598] team0: Port device team_slave_0 added [ 1385.118314][T18758] lo speed is unknown, defaulting to 1000 [ 1385.210614][T18598] team0: Port device team_slave_1 added [ 1385.219352][T18758] lo speed is unknown, defaulting to 1000 [ 1386.063547][ T5846] Bluetooth: hci5: command tx timeout [ 1386.742613][T18796] team0: Unable to change to the same mode the team is in [ 1387.466433][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.606140][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.606159][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.606191][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.672508][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.672527][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.672560][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.933383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1387.951372][ T5925] usb 2-1: USB disconnect, device number 6 [ 1388.121892][ T5846] Bluetooth: hci5: command tx timeout [ 1390.201380][ T5846] Bluetooth: hci5: command tx timeout [ 1395.449639][T18598] hsr_slave_0: entered promiscuous mode [ 1395.452717][T18598] hsr_slave_1: entered promiscuous mode [ 1395.453800][T18598] debugfs: 'hsr0' already exists in 'hsr' [ 1395.453833][T18598] Cannot create hsr debugfs directory [ 1395.648117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1395.749484][ T44] bridge_slave_1: left allmulticast mode [ 1395.749514][ T44] bridge_slave_1: left promiscuous mode [ 1395.749734][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.883436][ T44] bridge_slave_0: left allmulticast mode [ 1395.883474][ T44] bridge_slave_0: left promiscuous mode [ 1395.883753][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.983479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.171609][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.234119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.341393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.408358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.670414][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.968004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.030663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.099396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.173223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.460059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.571923][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.643697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.721147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.954869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.023644][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.070904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.212655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.262666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.476406][ T44] bond0 (unregistering): Released all slaves [ 1399.524386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.728783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.943159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.021886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.103126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.526704][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.636228][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.682304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.907781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.061371][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.183215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.440541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.484489][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.543105][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.586898][ T44] bond0 (unregistering): Released all slaves [ 1401.653076][T18831] team0: Unable to change to the same mode the team is in [ 1401.774029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1401.888332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1402.132875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1402.249088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1402.629289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.758220][ T44] tipc: Left network mode [ 1409.914036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.266402][T18871] team0: Unable to change to the same mode the team is in [ 1411.902945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.900004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.998970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.103776][T18758] chnl_net:caif_netlink_parms(): no params data found [ 1414.517780][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.862295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1414.864964][T11771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1414.902331][T11771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1414.918631][T11771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1415.507251][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1415.533903][T18901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1415.534063][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1416.015372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.021762][T11771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1416.037287][T11771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1416.221319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.316775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.513131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.164836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.837610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.144639][ T5846] Bluetooth: hci0: command tx timeout [ 1418.805235][T18909] team0: No ports can be present during mode change [ 1419.136003][ T5846] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 1420.202139][ T5846] Bluetooth: hci0: command tx timeout [ 1420.646138][T18945] netlink: 'syz.0.4101': attribute type 1 has an invalid length. [ 1420.646286][T18945] netlink: 'syz.0.4101': attribute type 4 has an invalid length. [ 1421.171228][ T44] hsr_slave_0: left promiscuous mode [ 1421.225328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1421.430049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1421.681480][ T44] hsr_slave_1: left promiscuous mode [ 1422.082328][ T44] hsr_slave_0: left promiscuous mode [ 1422.192521][ T44] hsr_slave_1: left promiscuous mode [ 1422.243803][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.281365][ T5846] Bluetooth: hci0: command tx timeout [ 1422.290491][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.514264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1422.795469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.049513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.118916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.172045][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.295036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.359121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.669910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.790851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.910693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.971375][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.334978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.391611][ T5846] Bluetooth: hci0: command tx timeout [ 1424.448447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.501908][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.634844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.835793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.999493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.102838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.201722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.422065][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.629447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.749185][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.045378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.165207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.231368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.303290][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.416911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.684599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.907602][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.965450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.084286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.264471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.384412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.446798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.503888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.612740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.045847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.111606][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.245060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.374060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.452722][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.510466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.707021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.752227][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1428.858799][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.966076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.022671][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1429.118522][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.249186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.355229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.417331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.527832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.651938][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.788769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.854758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.955481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.084161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.180524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.235953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.353925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.483721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.776958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.882789][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.007359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.127197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.256868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.316208][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.376059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.512750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.722000][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.772144][T18948] team0: Unable to change to the same mode the team is in [ 1431.818940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.834777][T18758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.834927][T18758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.835210][T18758] bridge_slave_0: entered allmulticast mode [ 1431.838112][T18758] bridge_slave_0: entered promiscuous mode [ 1431.869639][T18758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.869885][T18758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.870164][T18758] bridge_slave_1: entered allmulticast mode [ 1431.899778][T18758] bridge_slave_1: entered promiscuous mode [ 1431.908975][T18893] lo speed is unknown, defaulting to 1000 [ 1432.534643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.586950][T18758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.652213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.745509][T18758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.545145][T18758] team0: Port device team_slave_0 added [ 1434.893198][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.092429][T18982] netlink: 'syz.3.4111': attribute type 1 has an invalid length. [ 1435.092447][T18982] netlink: 'syz.3.4111': attribute type 4 has an invalid length. [ 1435.423106][T18758] team0: Port device team_slave_1 added [ 1435.610250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.763399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.782189][T18990] 9pnet_fd: Insufficient options for proto=fd [ 1436.040193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.214191][T18994] team0: Unable to change to the same mode the team is in [ 1436.238041][T18758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.238060][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.238089][T18758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.243034][T18758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.244007][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.244043][T18758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.827652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.015162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.098719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.243786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.621782][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.666155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1438.506341][ C0] vkms_vblank_simulate: vblank timer overrun [ 1438.610411][T19016] 9pnet_fd: Insufficient options for proto=fd [ 1438.669955][T18758] hsr_slave_0: entered promiscuous mode [ 1438.677539][T18758] hsr_slave_1: entered promiscuous mode [ 1438.678498][T18758] debugfs: 'hsr0' already exists in 'hsr' [ 1438.678528][T18758] Cannot create hsr debugfs directory [ 1438.777778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.565687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.683531][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.729748][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4123'. [ 1439.961719][T18893] chnl_net:caif_netlink_parms(): no params data found [ 1441.385096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.747822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.010060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.064093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.272738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.158919][T19059] siw: device registration error -23 [ 1443.984679][T18303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1444.031122][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1444.036313][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1444.073145][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1444.080244][ T44] IPVS: stop unused estimator thread 0... [ 1444.101400][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1444.186533][T19066] fuse: Bad value for 'fd' [ 1444.949853][T18893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.950009][T18893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.950291][T18893] bridge_slave_0: entered allmulticast mode [ 1444.955905][T18893] bridge_slave_0: entered promiscuous mode [ 1445.281539][T18893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.281708][T18893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.282010][T18893] bridge_slave_1: entered allmulticast mode [ 1445.285301][T18893] bridge_slave_1: entered promiscuous mode [ 1445.439035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.214645][T11771] Bluetooth: hci2: command tx timeout [ 1447.117648][T18893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.314284][T18893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.314571][ T44] bridge_slave_1: left allmulticast mode [ 1447.314602][ T44] bridge_slave_1: left promiscuous mode [ 1447.314921][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.393363][ T44] bridge_slave_0: left allmulticast mode [ 1447.393399][ T44] bridge_slave_0: left promiscuous mode [ 1447.409901][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.495941][ T44] bridge_slave_1: left allmulticast mode [ 1447.495978][ T44] bridge_slave_1: left promiscuous mode [ 1447.496240][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.281360][T11771] Bluetooth: hci2: command tx timeout [ 1450.193183][ T44] bridge_slave_0: left allmulticast mode [ 1450.193220][ T44] bridge_slave_0: left promiscuous mode [ 1450.193497][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.361352][T11771] Bluetooth: hci2: command tx timeout [ 1452.441455][T11771] Bluetooth: hci2: command tx timeout [ 1456.161412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.351152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.411840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.470977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.545177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.695334][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.803826][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.821261][T17739] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1456.875642][ T44] bond0 (unregistering): Released all slaves [ 1456.989341][T17739] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1456.989374][T17739] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1456.989395][T17739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1456.989457][T17739] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1457.038025][T17739] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1457.038059][T17739] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1457.038080][T17739] usb 2-1: Product: syz [ 1457.038095][T17739] usb 2-1: Manufacturer: syz [ 1457.269599][T17739] cdc_wdm 2-1:1.0: skipping garbage [ 1457.269651][T17739] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1457.313805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.838442][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.941927][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.973887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.209895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.796287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.256389][ T44] bond0 (unregistering): Released all slaves [ 1460.339958][ T5933] usb 2-1: USB disconnect, device number 7 [ 1460.619710][T19060] lo speed is unknown, defaulting to 1000 [ 1462.088320][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.113657][T18893] team0: Port device team_slave_0 added [ 1462.182092][T18893] team0: Port device team_slave_1 added [ 1466.981899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.210898][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.641086][ T44] hsr_slave_0: left promiscuous mode [ 1467.687741][ T44] hsr_slave_1: left promiscuous mode [ 1467.688848][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.733315][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.805423][T19145] misc userio: The device must be registered before sending interrupts [ 1467.946700][T19151] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4158'. [ 1468.475726][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1468.476454][ T44] hsr_slave_0: left promiscuous mode [ 1468.516035][ T44] hsr_slave_1: left promiscuous mode [ 1468.517129][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.603370][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.535336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.034606][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.097850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.249429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.341417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.422307][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1470.472443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.533234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.547178][T18303] Bluetooth: hci3: command 0x0406 tx timeout [ 1470.601193][T18303] Bluetooth: hci5: command 0x1003 tx timeout [ 1470.624297][T11771] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1470.649224][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1470.694170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.831282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.908833][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.726360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.873426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.933824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.057543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.192075][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1472.292061][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.370822][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1472.436021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.505998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.854471][T11771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1472.858856][T11771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1472.860470][T11771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1472.885914][T11771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1472.887515][T11771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1472.953613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.036299][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.091517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.303777][T18893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.303796][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.303826][T18893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.636097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.710209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.723747][T19166] lo speed is unknown, defaulting to 1000 [ 1474.921155][ T5846] Bluetooth: hci5: command tx timeout [ 1474.958261][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.990009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.054409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.295458][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.323636][T19060] chnl_net:caif_netlink_parms(): no params data found [ 1476.653068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.702587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.002922][ T5846] Bluetooth: hci5: command tx timeout [ 1478.358407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.531722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1479.091480][ T5846] Bluetooth: hci5: command tx timeout [ 1480.597470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1480.791500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1480.951449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.075766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.161124][ T5846] Bluetooth: hci5: command tx timeout [ 1481.327022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.594369][ T37] audit: type=1326 audit(1759102648.288:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.595204][ T37] audit: type=1326 audit(1759102648.288:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.599768][ T37] audit: type=1326 audit(1759102648.288:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.634230][ T37] audit: type=1326 audit(1759102648.328:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.688331][ T37] audit: type=1326 audit(1759102648.378:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.782211][ T37] audit: type=1326 audit(1759102648.478:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.782268][ T37] audit: type=1326 audit(1759102648.478:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.858202][ T37] audit: type=1326 audit(1759102648.508:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.1.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f64d3b5eec9 code=0x7ffc0000 [ 1481.877098][T19060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.877263][T19060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.877529][T19060] bridge_slave_0: entered allmulticast mode [ 1481.892264][T19060] bridge_slave_0: entered promiscuous mode [ 1481.953804][T19166] chnl_net:caif_netlink_parms(): no params data found [ 1481.983572][T19060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.983781][T19060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.985337][T19060] bridge_slave_1: entered allmulticast mode [ 1481.987320][T19060] bridge_slave_1: entered promiscuous mode [ 1483.793148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.918314][T19232] syz.0.4173 (19232) used greatest stack depth: 17048 bytes left [ 1483.945938][T19231] lo speed is unknown, defaulting to 1000 [ 1484.316426][T19060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.409622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.188413][T19060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.559300][T19060] team0: Port device team_slave_0 added [ 1489.208007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.301122][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.525808][T19060] team0: Port device team_slave_1 added [ 1489.541980][T19248] vxfs: unable to read disk superblock at 1 [ 1489.542182][T19248] vxfs: unable to read disk superblock at 8 [ 1489.542193][T19248] vxfs: can't find superblock. [ 1489.887381][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.337643][T19166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.337812][T19166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.338100][T19166] bridge_slave_0: entered allmulticast mode [ 1490.387735][T19166] bridge_slave_0: entered promiscuous mode [ 1490.845125][ T44] bridge_slave_1: left allmulticast mode [ 1490.845161][ T44] bridge_slave_1: left promiscuous mode [ 1490.848516][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.958139][ T44] bridge_slave_0: left allmulticast mode [ 1490.958176][ T44] bridge_slave_0: left promiscuous mode [ 1490.958530][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.199861][ T44] bridge_slave_1: left allmulticast mode [ 1491.200097][ T44] bridge_slave_1: left promiscuous mode [ 1491.200895][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.577165][ T44] bridge_slave_0: left allmulticast mode [ 1491.577259][ T44] bridge_slave_0: left promiscuous mode [ 1491.581912][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.404769][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.555000][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.665364][ T44] bond0 (unregistering): Released all slaves [ 1494.921798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.212858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.455635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1496.621422][T19282] overlay: filesystem on ./file1 not supported [ 1496.784955][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.901902][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.005560][ T44] bond0 (unregistering): Released all slaves [ 1497.142272][T19166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.142600][T19166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.143695][T19166] bridge_slave_1: entered allmulticast mode [ 1497.183976][T19166] bridge_slave_1: entered promiscuous mode [ 1497.948100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.032310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.304117][T19060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.304135][T19060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.304164][T19060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.523192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.584026][T19060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.584044][T19060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.584070][T19060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.598047][T19166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.613316][ C0] vkms_vblank_simulate: vblank timer overrun [ 1500.041295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1500.099113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1500.127306][T19166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.214889][ C0] vkms_vblank_simulate: vblank timer overrun [ 1500.355870][T19307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1504.425496][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.561470][ T44] hsr_slave_0: left promiscuous mode [ 1505.688829][ T44] hsr_slave_1: left promiscuous mode [ 1505.689583][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.783450][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.116296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.312569][T11771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1507.349503][T11771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1507.363795][T11771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1507.365169][T11771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1507.366017][T11771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1508.103225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.148813][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1508.202420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.363822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.522446][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.602004][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1508.642192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.751751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.831357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.901541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.252069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.503841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.573586][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.655506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1510.130271][ T5846] Bluetooth: hci0: command tx timeout [ 1510.251730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1510.402370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.082743][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1512.123126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.239784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.337148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.455715][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1512.498373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.601136][ T5846] Bluetooth: hci0: command tx timeout [ 1512.624561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.374539][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.692949][ T5846] Bluetooth: hci0: command tx timeout [ 1514.899958][T19166] team0: Port device team_slave_0 added [ 1514.925090][T19166] team0: Port device team_slave_1 added [ 1515.116520][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.291734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.413557][T11771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1515.446352][T11771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1515.448026][T11771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1515.449337][T11771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1515.471116][T11771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1515.639973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.774942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.861897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.087495][ T5846] Bluetooth: hci0: command tx timeout [ 1517.141050][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.225036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.293628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.418821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.498937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.562094][ T5846] Bluetooth: hci2: command tx timeout [ 1517.592577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.814526][T19166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.814545][T19166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.814574][T19166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.816179][T19321] lo speed is unknown, defaulting to 1000 [ 1517.819270][T19166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.819282][T19166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.819302][T19166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.048179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.149485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.501072][T19349] lo speed is unknown, defaulting to 1000 [ 1518.560181][T19166] hsr_slave_0: entered promiscuous mode [ 1518.574981][T19166] hsr_slave_1: entered promiscuous mode [ 1518.575929][T19166] debugfs: 'hsr0' already exists in 'hsr' [ 1518.575955][T19166] Cannot create hsr debugfs directory [ 1518.714604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.835465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.933699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1519.812052][ T5846] Bluetooth: hci2: command tx timeout [ 1519.846316][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.836582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.876178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.030289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.195865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.955037][T11771] Bluetooth: hci2: command tx timeout [ 1525.735505][T11771] Bluetooth: hci2: command tx timeout [ 1528.383432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1529.073077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1529.636151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1530.100761][T19321] chnl_net:caif_netlink_parms(): no params data found [ 1532.895653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.322409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.511597][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.649349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.279657][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1534.303851][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1534.341647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.355423][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1534.374242][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1534.375176][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1534.425802][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.619014][T19349] chnl_net:caif_netlink_parms(): no params data found [ 1535.071458][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.079048][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.845941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.914186][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.124574][T19321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.124677][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.124898][T19321] bridge_slave_0: entered allmulticast mode [ 1536.127211][T19321] bridge_slave_0: entered promiscuous mode [ 1536.199078][T19321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.199186][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.199349][T19321] bridge_slave_1: entered allmulticast mode [ 1536.231751][T19321] bridge_slave_1: entered promiscuous mode [ 1536.277541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.451303][T11771] Bluetooth: hci4: command tx timeout [ 1536.692002][T19399] lo speed is unknown, defaulting to 1000 [ 1537.065936][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.411466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.583002][T19321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.286627][T19321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.465073][T19349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.465300][T19349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.465565][T19349] bridge_slave_0: entered allmulticast mode [ 1538.503846][T19349] bridge_slave_0: entered promiscuous mode [ 1538.521276][T11771] Bluetooth: hci4: command tx timeout [ 1538.612888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.731369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.789014][T19349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.789163][T19349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.789428][T19349] bridge_slave_1: entered allmulticast mode [ 1538.812958][T19349] bridge_slave_1: entered promiscuous mode [ 1538.913806][ T9107] IPVS: starting estimator thread 0... [ 1539.018805][T19423] IPVS: using max 7 ests per chain, 16800 per kthread [ 1540.784983][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.786038][ T5846] Bluetooth: hci4: command tx timeout [ 1540.811157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.897100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.227045][ T37] audit: type=1800 audit(1759102707.918:3671): pid=19431 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.4224" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1541.227415][T19431] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1541.227459][T19431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1541.227487][T19431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1541.228799][T19321] team0: Port device team_slave_0 added [ 1541.406704][T18568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.431647][T19321] team0: Port device team_slave_1 added [ 1541.461763][T19349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.463224][T18568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.620169][T19349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.620245][T18568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.190385][T18568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.504211][T19321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.504231][T19321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.504261][T19321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.731724][ T44] bridge_slave_1: left allmulticast mode [ 1542.731763][ T44] bridge_slave_1: left promiscuous mode [ 1542.732046][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.846785][ T44] bridge_slave_0: left allmulticast mode [ 1542.846824][ T44] bridge_slave_0: left promiscuous mode [ 1542.847119][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.851668][T11771] Bluetooth: hci4: command tx timeout [ 1551.341265][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.422672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1551.514811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1551.613732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1551.856225][T19461] siw: device registration error -23 [ 1552.364516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.487998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.580684][T19463] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1552.722220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.033980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.118415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.644330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.755550][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755591][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755621][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755650][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755678][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755707][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755733][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755761][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755790][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.755818][ T5947] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 1553.769799][ T5947] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1553.938190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.994537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.074661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.161429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.319029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.468456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.685769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.879137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.969512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.047506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.136692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.411970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.528651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.594716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.658153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.711695][ T44] bond0 (unregistering): Released all slaves [ 1555.774221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.844721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.940779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.110815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.144537][T19488] netlink: 'syz.0.4242': attribute type 10 has an invalid length. [ 1556.239457][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.290156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.297642][T19490] netlink: 'syz.0.4242': attribute type 10 has an invalid length. [ 1556.297716][T19490] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4242'. [ 1556.373354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.428446][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.525909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.642345][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.905201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.946701][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.044967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.166682][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.281386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.372566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.454406][ T44] bond1 (unregistering): Released all slaves [ 1557.527879][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.592844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.704441][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.783020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.859197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.921901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.969894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.086065][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.227476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.307761][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.483354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.595579][ T44] bond2 (unregistering): Released all slaves [ 1558.650452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.724043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.797040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.939099][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.002856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.058215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.326359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.374275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.423437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.488629][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.536002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.601907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.626620][ T44] bond3 (unregistering): Released all slaves [ 1559.681821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.936688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.007631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.231719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.308651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.694964][ T44] bond4 (unregistering): Released all slaves [ 1560.932137][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.032357][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.095311][ T44] bond0 (unregistering): Released all slaves [ 1561.133055][T19321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.133076][T19321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.133107][T19321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.163426][T19349] team0: Port device team_slave_0 added [ 1561.220837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.276123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.361117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.424538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.485700][T19488] batman_adv: batadv0: Adding interface: team0 [ 1561.485714][T19488] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.485736][T19488] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1561.528313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.539199][T19490] team0: entered promiscuous mode [ 1561.539218][T19490] team_slave_0: entered promiscuous mode [ 1561.539399][T19490] team_slave_1: entered promiscuous mode [ 1561.569063][T19490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.569364][T19490] batman_adv: batadv0: Interface activated: team0 [ 1561.569402][T19490] batman_adv: batadv0: Interface deactivated: team0 [ 1561.569416][T19490] batman_adv: batadv0: Removing interface: team0 [ 1561.673212][T19490] bridge0: port 3(team0) entered blocking state [ 1561.687493][T19490] bridge0: port 3(team0) entered disabled state [ 1561.687702][T19490] team0: entered allmulticast mode [ 1561.687715][T19490] team_slave_0: entered allmulticast mode [ 1561.687733][T19490] team_slave_1: entered allmulticast mode [ 1561.718770][T19490] bridge0: port 3(team0) entered blocking state [ 1561.718899][T19490] bridge0: port 3(team0) entered forwarding state [ 1561.791755][T19349] team0: Port device team_slave_1 added [ 1561.792163][ T44] tipc: Left network mode [ 1561.848436][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.919895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.006284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.117967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.199168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.980937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.114787][T19349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.114806][T19349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.114837][T19349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.213584][T19321] hsr_slave_0: entered promiscuous mode [ 1563.215307][T19321] hsr_slave_1: entered promiscuous mode [ 1563.218129][T19321] debugfs: 'hsr0' already exists in 'hsr' [ 1563.218161][T19321] Cannot create hsr debugfs directory [ 1563.219570][T19349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.219587][T19349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.219619][T19349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.383439][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.785155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.831043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.871340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.015948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.052990][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.102767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.381434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.203925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.317259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.705403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.192120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.200828][T19349] hsr_slave_0: entered promiscuous mode [ 1566.203901][T19349] hsr_slave_1: entered promiscuous mode [ 1566.205026][T19349] debugfs: 'hsr0' already exists in 'hsr' [ 1566.205058][T19349] Cannot create hsr debugfs directory [ 1566.628875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.550157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.593666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.903100][T19529] input: syz1 as /devices/virtual/input/input11 [ 1568.097133][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1568.134287][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1568.192099][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1568.195287][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1568.196761][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1568.541949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.204325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.284637][T11771] Bluetooth: hci0: command tx timeout [ 1570.671144][ T44] hsr_slave_0: left promiscuous mode [ 1570.711251][ T44] hsr_slave_1: left promiscuous mode [ 1570.712271][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.782547][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.964691][ T44] veth1_macvtap: left promiscuous mode [ 1570.964778][ T44] veth0_macvtap: left promiscuous mode [ 1570.965003][ T44] veth1_vlan: left promiscuous mode [ 1570.965142][ T44] veth0_vlan: left promiscuous mode [ 1571.858668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.952031][ T44] pim6reg (unregistering): left allmulticast mode [ 1571.990528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.154368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.292207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.367708][T11771] Bluetooth: hci0: command tx timeout [ 1572.440488][T19547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1572.440519][T19547] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1572.440624][T19547] vhci_hcd vhci_hcd.0: Device attached [ 1572.551340][ T37] audit: type=1800 audit(1759102739.208:3672): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.4258" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1572.678076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.781123][ T2167] usb 36-1: SetAddress Request (6) to port 0 [ 1572.781215][ T2167] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1572.859566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.868488][T19548] vhci_hcd: connection reset by peer [ 1572.869231][T11730] vhci_hcd: stop threads [ 1572.869249][T11730] vhci_hcd: release socket [ 1572.869341][T11730] vhci_hcd: disconnect device [ 1573.095860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.472516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.826438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.019686][T19556] 9pnet_fd: Insufficient options for proto=fd [ 1574.481038][T11771] Bluetooth: hci0: command tx timeout [ 1574.626750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.458209][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1575.473083][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1575.474548][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1575.475578][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1575.476978][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1575.638411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.708981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.804810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.100133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.201832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.787394][ T5846] Bluetooth: hci0: command tx timeout [ 1576.852461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.140901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.275822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.595779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.595923][ T5846] Bluetooth: hci5: command tx timeout [ 1577.618663][T19579] 9pnet_fd: Insufficient options for proto=fd [ 1577.754132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.875579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.881437][ T2167] usb 36-1: device descriptor read/8, error -110 [ 1578.018677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.302411][ T2167] usb usb36-port1: attempt power cycle [ 1578.527574][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.754695][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.761247][T16826] IPVS: starting estimator thread 0... [ 1578.878334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.881433][T19589] IPVS: using max 7 ests per chain, 16800 per kthread [ 1579.834142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.861117][ T5846] Bluetooth: hci5: command tx timeout [ 1579.862957][ T2167] usb usb36-port1: unable to enumerate USB device [ 1580.045598][T19598] 9pnet_fd: Insufficient options for proto=fd [ 1580.533146][T19603] loop8: detected capacity change from 0 to 7 [ 1580.703637][T19603] Dev loop8: unable to read RDB block 7 [ 1580.703670][T19603] loop8: AHDI p1 p2 p3 [ 1580.703696][T19603] loop8: partition table partially beyond EOD, truncated [ 1580.703777][T19603] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1580.703791][T19603] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1580.707213][T19606] Dev loop8: unable to read RDB block 7 [ 1580.707238][T19606] loop8: AHDI p1 p2 p3 [ 1580.707259][T19606] loop8: partition table partially beyond EOD, truncated [ 1580.707351][T19606] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1580.707366][T19606] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1580.987713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.485822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.613272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.769386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.892914][ T5846] Bluetooth: hci5: command tx timeout [ 1581.973565][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.899749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.483382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.589783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.633196][T19627] 9pnet_fd: Insufficient options for proto=fd [ 1583.672673][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.786368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.801906][T19630] fuse: Bad value for 'rootmode' [ 1583.879318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.940599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.961482][ T5846] Bluetooth: hci5: command tx timeout [ 1584.025124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.347168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.441756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.894109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.202574][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.269044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.074470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.144328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.209572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.937011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.069787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.165129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.583951][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1588.753241][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1588.803691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.862183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.936604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.987968][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.061583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.127340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.212573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.767033][T19399] chnl_net:caif_netlink_parms(): no params data found [ 1590.985489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.986282][T19655] loop8: detected capacity change from 0 to 7 [ 1591.014343][T19655] Dev loop8: unable to read RDB block 7 [ 1591.014370][T19655] loop8: AHDI p1 p2 p3 [ 1591.014391][T19655] loop8: partition table partially beyond EOD, truncated [ 1591.014404][T19655] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1591.014418][T19655] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1591.155986][T19657] Dev loop8: unable to read RDB block 7 [ 1591.156020][T19657] loop8: AHDI p1 p2 p3 [ 1591.156052][T19657] loop8: partition table partially beyond EOD, truncated [ 1591.156151][T19657] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1591.156169][T19657] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1591.246821][T19661] 9pnet_fd: Insufficient options for proto=fd [ 1591.324093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1591.776295][T19399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.776512][T19399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.776772][T19399] bridge_slave_0: entered allmulticast mode [ 1591.780312][T19399] bridge_slave_0: entered promiscuous mode [ 1591.891491][T19399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.892651][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.892915][T19399] bridge_slave_1: entered allmulticast mode [ 1591.925366][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.064511][T19399] bridge_slave_1: entered promiscuous mode [ 1592.796560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.412057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.413419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.550323][T19691] 9pnet_fd: Insufficient options for proto=fd [ 1595.628884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.276257][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.167724][T11771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1597.186742][T11771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1597.188343][T11771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1597.218364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.222016][T11771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1597.234445][T11771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1597.327806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.427948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.074017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.241135][T11771] Bluetooth: hci2: command tx timeout [ 1599.279727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.583019][T19531] chnl_net:caif_netlink_parms(): no params data found [ 1599.895855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1600.342228][T19563] chnl_net:caif_netlink_parms(): no params data found [ 1600.701033][ T5932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1600.866918][ T5932] usb 2-1: no configurations [ 1600.866943][ T5932] usb 2-1: can't read configurations, error -22 [ 1600.913496][T19531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.913639][T19531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.913865][T19531] bridge_slave_0: entered allmulticast mode [ 1600.917013][T19531] bridge_slave_0: entered promiscuous mode [ 1600.981246][T19531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.981398][T19531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.981648][T19531] bridge_slave_1: entered allmulticast mode [ 1600.985174][T19531] bridge_slave_1: entered promiscuous mode [ 1601.001225][ T5932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1601.202043][ T5932] usb 2-1: no configurations [ 1601.202064][ T5932] usb 2-1: can't read configurations, error -22 [ 1601.222179][ T5932] usb usb2-port1: attempt power cycle [ 1601.498573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1601.500364][T11771] Bluetooth: hci2: command tx timeout [ 1601.559591][T19531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.581116][ T5932] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1601.608319][ T5932] usb 2-1: no configurations [ 1601.608341][ T5932] usb 2-1: can't read configurations, error -22 [ 1601.755292][T19531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.832311][ T5932] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1601.853546][ T5932] usb 2-1: no configurations [ 1601.853567][ T5932] usb 2-1: can't read configurations, error -22 [ 1601.879603][ T5932] usb usb2-port1: unable to enumerate USB device [ 1602.101873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.128788][T19563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.149089][T19563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.149389][T19563] bridge_slave_0: entered allmulticast mode [ 1602.161282][T19563] bridge_slave_0: entered promiscuous mode [ 1602.473429][T19563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.473577][T19563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.473797][T19563] bridge_slave_1: entered allmulticast mode [ 1602.477786][T19563] bridge_slave_1: entered promiscuous mode [ 1602.545823][T19531] team0: Port device team_slave_0 added [ 1602.803955][T19531] team0: Port device team_slave_1 added [ 1604.201535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1604.202358][T11771] Bluetooth: hci2: command tx timeout [ 1604.777402][T19563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.147475][ T44] bridge_slave_1: left allmulticast mode [ 1605.147512][ T44] bridge_slave_1: left promiscuous mode [ 1605.147776][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.262783][ T44] bridge_slave_0: left allmulticast mode [ 1605.262819][ T44] bridge_slave_0: left promiscuous mode [ 1605.263127][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.378429][ T44] bridge_slave_1: left allmulticast mode [ 1605.378466][ T44] bridge_slave_1: left promiscuous mode [ 1605.378726][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.462895][ T44] bridge_slave_0: left allmulticast mode [ 1605.462932][ T44] bridge_slave_0: left promiscuous mode [ 1605.463208][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.517215][T19764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1605.553250][ T44] bridge_slave_1: left allmulticast mode [ 1605.553286][ T44] bridge_slave_1: left promiscuous mode [ 1605.553546][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.623850][ T44] bridge_slave_0: left allmulticast mode [ 1605.623888][ T44] bridge_slave_0: left promiscuous mode [ 1605.624275][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.685526][T11771] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1605.685577][T11771] CPU: 1 UID: 0 PID: 11771 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1605.685604][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1605.685621][T11771] Workqueue: hci1 hci_rx_work [ 1605.685658][T11771] Call Trace: [ 1605.685668][T11771] [ 1605.685679][T11771] dump_stack_lvl+0x189/0x250 [ 1605.685720][T11771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1605.685754][T11771] ? __pfx__printk+0x10/0x10 [ 1605.685786][T11771] ? kernfs_path_from_node+0x2c/0x280 [ 1605.685809][T11771] ? kernfs_path_from_node+0x243/0x280 [ 1605.685831][T11771] ? kernfs_path_from_node+0x2c/0x280 [ 1605.685859][T11771] sysfs_create_dir_ns+0x259/0x280 [ 1605.685880][T11771] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1605.685912][T11771] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1605.685935][T11771] ? rt_spin_unlock+0x65/0x80 [ 1605.685970][T11771] kobject_add_internal+0x5a5/0xb50 [ 1605.686011][T11771] kobject_add+0x155/0x220 [ 1605.686042][T11771] ? __pfx_kobject_add+0x10/0x10 [ 1605.686082][T11771] ? get_device_parent+0x370/0x3a0 [ 1605.686113][T11771] device_add+0x408/0xb50 [ 1605.686140][T11771] hci_conn_add_sysfs+0xd5/0x1e0 [ 1605.686170][T11771] le_conn_complete_evt+0xf39/0x1500 [ 1605.686226][T11771] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1605.686261][T11771] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1605.686301][T11771] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.686340][T11771] ? skb_pull_data+0xfb/0x200 [ 1605.686373][T11771] hci_le_conn_complete_evt+0x187/0x450 [ 1605.686414][T11771] hci_event_packet+0x78f/0x1200 [ 1605.686446][T11771] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1605.686481][T11771] ? __pfx_hci_event_packet+0x10/0x10 [ 1605.686508][T11771] ? __pfx_migrate_enable+0x10/0x10 [ 1605.686546][T11771] ? hci_send_to_monitor+0xe2/0x570 [ 1605.686583][T11771] hci_rx_work+0x46a/0xe80 [ 1605.686620][T11771] ? process_scheduled_works+0x9ef/0x17b0 [ 1605.686652][T11771] process_scheduled_works+0xae1/0x17b0 [ 1605.686714][T11771] ? __pfx_process_scheduled_works+0x10/0x10 [ 1605.686763][T11771] worker_thread+0x8a0/0xda0 [ 1605.686822][T11771] kthread+0x711/0x8a0 [ 1605.686860][T11771] ? __pfx_worker_thread+0x10/0x10 [ 1605.686889][T11771] ? __pfx_kthread+0x10/0x10 [ 1605.686931][T11771] ? __pfx_kthread+0x10/0x10 [ 1605.686967][T11771] ret_from_fork+0x436/0x7d0 [ 1605.687000][T11771] ? __pfx_ret_from_fork+0x10/0x10 [ 1605.687036][T11771] ? __switch_to_asm+0x39/0x70 [ 1605.687064][T11771] ? __switch_to_asm+0x33/0x70 [ 1605.687085][T11771] ? __pfx_kthread+0x10/0x10 [ 1605.687121][T11771] ret_from_fork_asm+0x1a/0x30 [ 1605.687162][T11771] [ 1605.689493][T11771] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1605.689549][T11771] Bluetooth: hci1: failed to register connection device [ 1605.770789][ T44] bridge_slave_1: left allmulticast mode [ 1605.770835][ T44] bridge_slave_1: left promiscuous mode [ 1605.777252][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.023815][ T44] bridge_slave_0: left allmulticast mode [ 1606.023841][ T44] bridge_slave_0: left promiscuous mode [ 1606.024035][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.281068][ T5846] Bluetooth: hci2: command tx timeout [ 1606.423246][ T44] bond0 (unregistering): Released all slaves [ 1606.783256][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1606.888422][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.971485][ T44] bond0 (unregistering): Released all slaves [ 1607.412173][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.532330][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.605835][ T44] bond0 (unregistering): Released all slaves [ 1608.145930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.208602][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1608.320410][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1608.365778][ T44] bond0 (unregistering): Released all slaves [ 1608.499770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.566369][T19563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.843009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.889322][T19531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.889337][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.889358][T19531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.091456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.124442][T19531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.124462][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.124494][T19531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.175832][T19698] chnl_net:caif_netlink_parms(): no params data found [ 1609.225397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.233495][T19563] team0: Port device team_slave_0 added [ 1609.290614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.306953][T19563] team0: Port device team_slave_1 added [ 1609.405622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.474354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.631278][T19779] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1609.631346][T19779] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1610.355491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.772982][T19563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.773002][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.773033][T19563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.901235][T17739] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1610.952675][T19563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.952694][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.952725][T19563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.985137][T19531] hsr_slave_0: entered promiscuous mode [ 1610.986931][T19531] hsr_slave_1: entered promiscuous mode [ 1611.074216][T17739] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1611.074257][T17739] usb 2-1: can't read configurations, error -61 [ 1611.231289][T17739] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1611.393391][T17739] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1611.393434][T17739] usb 2-1: can't read configurations, error -61 [ 1611.394778][T17739] usb usb2-port1: attempt power cycle [ 1611.431803][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.432050][T19698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.432344][T19698] bridge_slave_0: entered allmulticast mode [ 1611.435519][T19698] bridge_slave_0: entered promiscuous mode [ 1611.534028][ T44] hsr_slave_0: left promiscuous mode [ 1611.571214][ T44] hsr_slave_1: left promiscuous mode [ 1611.572365][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.608378][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.701166][ T44] hsr_slave_0: left promiscuous mode [ 1611.721488][ T44] hsr_slave_1: left promiscuous mode [ 1611.722562][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.731050][T17739] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1611.771476][T17739] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1611.771521][T17739] usb 2-1: can't read configurations, error -61 [ 1611.796216][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.911363][T17739] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1612.015929][T17739] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1612.016031][T17739] usb 2-1: can't read configurations, error -61 [ 1612.019006][T17739] usb usb2-port1: unable to enumerate USB device [ 1612.041342][ T44] hsr_slave_0: left promiscuous mode [ 1612.061185][ T44] hsr_slave_1: left promiscuous mode [ 1612.062296][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.122979][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.848814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1613.869099][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.946701][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.033722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.214370][ T5846] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1616.431837][T19809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1616.736817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.782243][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1616.840216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.905655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.965365][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1617.072471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.545807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.656288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.113635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.217256][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.384240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.526309][ T5925] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1618.592573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.659123][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1618.675311][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1618.675351][ T5925] usb 2-1: can't read configurations, error -61 [ 1618.793076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.801080][ T5925] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1618.852252][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1618.902205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.964900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.984264][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1618.984306][ T5925] usb 2-1: can't read configurations, error -61 [ 1618.984966][ T5925] usb usb2-port1: attempt power cycle [ 1619.050391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.101369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.310268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.321456][ T5925] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1619.361914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.371723][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1619.371770][ T5925] usb 2-1: can't read configurations, error -61 [ 1619.501099][ T5925] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1619.524690][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1619.524731][ T5925] usb 2-1: can't read configurations, error -61 [ 1619.525187][ T5925] usb usb2-port1: unable to enumerate USB device [ 1620.042460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.362063][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1620.482090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.552187][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1620.666169][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.753143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.969128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1621.791587][T19698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.791747][T19698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.792001][T19698] bridge_slave_1: entered allmulticast mode [ 1621.794916][T19698] bridge_slave_1: entered promiscuous mode [ 1622.199862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.558885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.683703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.000026][T19563] hsr_slave_0: entered promiscuous mode [ 1623.012830][T19563] hsr_slave_1: entered promiscuous mode [ 1623.026952][T19563] debugfs: 'hsr0' already exists in 'hsr' [ 1623.026976][T19563] Cannot create hsr debugfs directory [ 1623.267362][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.349380][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.378672][T11771] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1623.397656][T19698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.541268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.726747][T19698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.995570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.262993][T19844] lo speed is unknown, defaulting to 1000 [ 1625.274097][T19698] team0: Port device team_slave_0 added [ 1625.405474][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.417630][T19844] lo speed is unknown, defaulting to 1000 [ 1625.455332][T19851] input: syz1 as /devices/virtual/input/input12 [ 1625.461612][T19698] team0: Port device team_slave_1 added [ 1625.476314][T19844] lo speed is unknown, defaulting to 1000 [ 1625.522971][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.548167][T19844] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1625.767976][T19844] lo speed is unknown, defaulting to 1000 [ 1625.769688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.857258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.957657][T19844] lo speed is unknown, defaulting to 1000 [ 1625.959424][T19698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.959436][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1625.959456][T19698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.103587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.120994][T19844] lo speed is unknown, defaulting to 1000 [ 1626.148630][T19698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.148648][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.148673][T19698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.197657][T19844] lo speed is unknown, defaulting to 1000 [ 1626.350559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.436787][T19844] lo speed is unknown, defaulting to 1000 [ 1626.580236][T19844] lo speed is unknown, defaulting to 1000 [ 1626.865461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.555807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.558019][T19864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1627.923424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.135883][T19698] hsr_slave_0: entered promiscuous mode [ 1628.143452][T19698] hsr_slave_1: entered promiscuous mode [ 1628.144717][T19698] debugfs: 'hsr0' already exists in 'hsr' [ 1628.144751][T19698] Cannot create hsr debugfs directory [ 1628.576387][T11771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1628.578460][T11771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1628.606422][T11771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1628.609959][T11771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1628.610799][T11771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1628.802308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.706460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.539400][T19869] lo speed is unknown, defaulting to 1000 [ 1630.738694][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.796982][ T5846] Bluetooth: hci4: command tx timeout [ 1630.980622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.851294][T11771] Bluetooth: hci4: command tx timeout [ 1632.947518][T17739] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006a: 0000 [#1] SMP KASAN PTI [ 1632.947539][T17739] KASAN: null-ptr-deref in range [0x0000000000000350-0x0000000000000357] [ 1632.947554][T17739] CPU: 0 UID: 0 PID: 17739 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1632.947573][T17739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1632.947584][T17739] Workqueue: events l2cap_info_timeout [ 1632.947623][T17739] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1632.947647][T17739] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1632.947660][T17739] RSP: 0018:ffffc9000125f7a8 EFLAGS: 00010206 [ 1632.947673][T17739] RAX: dffffc0000000000 RBX: ffffffff88d7dbfe RCX: a022bba3786a1000 [ 1632.947685][T17739] RDX: 0000000000000000 RSI: ffffffff88d7dbfe RDI: 000000000000006a [ 1632.947696][T17739] RBP: ffffffff8a013165 R08: 0000000000000001 R09: 0000000000000000 [ 1632.947706][T17739] R10: dffffc0000000000 R11: ffffffff8a013120 R12: 0000000000000000 [ 1632.947717][T17739] R13: 0000000000000350 R14: 0000000000000350 R15: 0000000000000001 [ 1632.947727][T17739] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1632.947739][T17739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1632.947750][T17739] CR2: 0000200000004000 CR3: 0000000028394000 CR4: 00000000003526f0 [ 1632.947764][T17739] Call Trace: [ 1632.947771][T17739] [ 1632.947777][T17739] __kasan_check_byte+0x12/0x40 [ 1632.947798][T17739] lock_acquire+0x8d/0x360 [ 1632.947818][T17739] ? lockdep_hardirqs_on+0x9c/0x150 [ 1632.947843][T17739] ? __cancel_work+0x254/0x2e0 [ 1632.947868][T17739] lock_sock_nested+0x3e/0x130 [ 1632.947895][T17739] ? l2cap_sock_ready_cb+0x45/0x140 [ 1632.947914][T17739] l2cap_sock_ready_cb+0x45/0x140 [ 1632.947931][T17739] l2cap_conn_start+0x76a/0xe50 [ 1632.947956][T17739] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1632.947977][T17739] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1632.948002][T17739] ? lockdep_hardirqs_on+0x9c/0x150 [ 1632.948026][T17739] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1632.948049][T17739] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1632.948077][T17739] ? mutex_lock_nested+0x154/0x1d0 [ 1632.948095][T17739] ? l2cap_info_timeout+0x60/0xa0 [ 1632.948118][T17739] l2cap_info_timeout+0x68/0xa0 [ 1632.948139][T17739] ? process_scheduled_works+0x9ef/0x17b0 [ 1632.948158][T17739] process_scheduled_works+0xae1/0x17b0 [ 1632.948187][T17739] ? __pfx_process_scheduled_works+0x10/0x10 [ 1632.948216][T17739] worker_thread+0x8a0/0xda0 [ 1632.948236][T17739] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1632.948264][T17739] ? __kthread_parkme+0x7b/0x200 [ 1632.948288][T17739] kthread+0x711/0x8a0 [ 1632.948312][T17739] ? __pfx_worker_thread+0x10/0x10 [ 1632.948331][T17739] ? __pfx_kthread+0x10/0x10 [ 1632.948356][T17739] ? __pfx_kthread+0x10/0x10 [ 1632.948378][T17739] ret_from_fork+0x436/0x7d0 [ 1632.948399][T17739] ? __pfx_ret_from_fork+0x10/0x10 [ 1632.948421][T17739] ? __switch_to_asm+0x39/0x70 [ 1632.948436][T17739] ? __switch_to_asm+0x33/0x70 [ 1632.948449][T17739] ? __pfx_kthread+0x10/0x10 [ 1632.948472][T17739] ret_from_fork_asm+0x1a/0x30 [ 1632.948493][T17739] [ 1632.948502][T17739] Modules linked in: [ 1632.948529][T17739] ---[ end trace 0000000000000000 ]--- [ 1633.140310][T17739] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1633.140348][T17739] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1633.140363][T17739] RSP: 0018:ffffc9000125f7a8 EFLAGS: 00010206 [ 1633.140377][T17739] RAX: dffffc0000000000 RBX: ffffffff88d7dbfe RCX: a022bba3786a1000 [ 1633.140390][T17739] RDX: 0000000000000000 RSI: ffffffff88d7dbfe RDI: 000000000000006a [ 1633.140401][T17739] RBP: ffffffff8a013165 R08: 0000000000000001 R09: 0000000000000000 [ 1633.140411][T17739] R10: dffffc0000000000 R11: ffffffff8a013120 R12: 0000000000000000 [ 1633.140422][T17739] R13: 0000000000000350 R14: 0000000000000350 R15: 0000000000000001 [ 1633.140432][T17739] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1633.140445][T17739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1633.140456][T17739] CR2: 0000200000005000 CR3: 0000000028394000 CR4: 00000000003526f0 [ 1633.140473][T17739] Kernel panic - not syncing: Fatal exception [ 1633.140778][T17739] Kernel Offset: disabled