last executing test programs: 9m16.754651371s ago: executing program 1 (id=80): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x24040800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000002280)=@multiplanar_overlay={0x4, 0x9, 0x4, 0x100000, 0x100, {0x77359400}, {0x4, 0x2, 0x5, 0x0, 0x8, 0x7f, "d53e61a3"}, 0x10, 0x3, {&(0x7f0000000180)=[{0x1, 0x5, {0x7}, 0xaf}, {0x9, 0x0, {0xfffff5c7}, 0x7f}]}, 0x6, 0x0, r2}) clock_gettime(0x0, &(0x7f0000000040)) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x700, 0x2, 0x0, 0x1f}, &(0x7f0000000100), &(0x7f0000000140)={&(0x7f0000000280), 0xffffffffffffff49}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x216280) write$binfmt_aout(r3, 0x0, 0xc8) syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{0x80000000}, {0x10}, {0x2}, {0x2}, {}, {0x0, 0x10001}, {0x8000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 9m10.187137598s ago: executing program 1 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = getpid() ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000900)={&(0x7f00000008c0)=[{0x3, 0x1218, 0xd0, &(0x7f00000007c0)="e9b135856b67cd1dcc0b034b95f5f316da61d8a6165e87e4e1f993e68e700d97b8e2280f7991bb2689542658a766543d93435831d718442622fae22b9f6b39ddc78e29f80df56f0e2b9c49d851d75e2c4ca90111c1271ceea4853d9c4a429ae73f7f891704a19ac613aded8beb44d5a8b684beb75a06847a06b3a997f12cfe65100a1968384a2e9b99deff2571a9f4d4009141a2703afa2b95f80ea7c756d9c97df63acc98f98333e486f05e4f0479810902a1650babcc9c20d3870108b05c5c5149e25019ae458ee822732abbbe288a"}, {0x6, 0x2a01, 0x6a, &(0x7f00000006c0)="5685c188e4a238fcb9e1c4e4a8be4b5faec366ea7dc0d5f691fdf419a7657d9d1ae50c5fcb8a38b682da4cfa645db1c4a3ffce17e0812f7209fafad07ac0a56b2facf369b4b6b7b1c0de1bc199a36b5448ed84b8d0a0bcb189ce27cc3419820dba81fc47f10ac8822b9e"}, {0xfffb, 0x1, 0xe, &(0x7f0000000400)="bd3676e78ebe41cdc981e38d1e95"}], 0x3}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10) r9 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) 9m8.287231444s ago: executing program 1 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 9m3.979107562s ago: executing program 1 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000a002000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xf, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r8, 0x0, 0xffffffff004) splice(r1, &(0x7f0000001100)=0x3, r5, &(0x7f0000001140)=0x2ce, 0x80, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5f0500e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m0.183873561s ago: executing program 1 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x5441, 0xaecd, 0x5, &(0x7f0000000480)={[0x3]}, 0x8) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x8890}, 0xc000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b", 0x61, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000408010800000000000000000500000806000240fbfb000005000300110099b2"], 0x24}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) keyctl$dh_compute(0x17, &(0x7f0000000380)={r5, r6, r5}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}}) keyctl$setperm(0x5, r6, 0x2000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2083, 0x0) 8m58.448239136s ago: executing program 1 (id=98): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x800, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r3], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 8m47.858811008s ago: executing program 3 (id=101): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0xffffffffffffffba) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x83d}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000b63300010326bd7002fcdbdf2503000040"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000071353838000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002f660e4241a75bbe6960008ab290aa06d367cfbc12f4c8c4fb1e7bd078d96ff894171f39075fd0db7f3b07cef091ef7418b0edb5ba0f19d755123913b9f0b71c0b4147c3eae24c", @ANYRES32=r5, @ANYRESDEC], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x8b) ioctl$sock_TIOCOUTQ(r8, 0x5411, 0x0) 8m43.99783433s ago: executing program 3 (id=104): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000240)) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r7, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r8, r8, 0x0, 0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r9}) 8m42.365746474s ago: executing program 32 (id=98): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x800, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r3], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 8m42.04839506s ago: executing program 3 (id=108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$kcm(0x10, 0x2, 0x4) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xf7) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4cb717950744651acff508182c98b102bc886b584a35b7d8230844a708d40fdda8d389e715cfe7729db0e5446235124ad5", @ANYRES16=r11, @ANYBLOB="010027bd7000fcdbdf2507000000080004007f0000011400020000000000000000000000ffff6401010114000300ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r9, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r12}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x940003c8) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400"], 0x78) 8m36.709684516s ago: executing program 3 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc001102c, 0x0, 0x6}]}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xa2, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x88, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r8}, 0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r8, 0xfffffffc}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xa1, 0x6, 0x1, @remote, @remote, 0x1, 0x20, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x0, 0xd, 0x40, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x80}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @initdev, @remote}, &(0x7f0000000b00)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r13, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x8a361e238173eedc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x6, 0x5, 0x3, 0x200}, {0x1, 0x2, 0xc0, 0x8, 0x77, 0x2}, 0x6, 0x400000b, 0xd28}}]}}]}, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1e4, 0x0, 0x9d933e40fbe238e0, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x11}, 0x4) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x20010, r5, 0x2c000) 8m26.462704749s ago: executing program 3 (id=123): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x7b9e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)}, {0x0}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/36, 0x24}], 0x8, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000001000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000600000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000030900010073797a30"], 0xf8}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x2}, {0xffffffff}, {}, 0x0, 0x3f0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) 8m15.713145186s ago: executing program 3 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000104010300000000000000000500000005000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=']) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8m0.197840975s ago: executing program 33 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000104010300000000000000000500000005000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=']) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 7m43.734991496s ago: executing program 0 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r7, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m41.383419692s ago: executing program 0 (id=165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)='c6V', 0x3}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18018371e7cf6c2500000000002020207b1af8ff00000008b1b702000008000000b70300000000000085000000960000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 7m38.616616504s ago: executing program 0 (id=168): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000007c0)=""/160, 0xa0) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0), 0x0) recvfrom$inet_nvme(r6, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000040601020000000000000000020000020500010007000000c40e9d1680f29bfbdb698999759b6a826d9406af66d52fd0f62553a34de9f9ec2d384d95937d1ffef3886b81c75805ca6af2e4846d5c7286f92a3e54aff04412e533b1"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_io_uring_setup(0x57a, &(0x7f00000005c0)={0x0, 0x114dd, 0x2, 0x2, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r0], 0x1}) unshare(0x24020400) socket$phonet_pipe(0x23, 0x5, 0x2) 7m36.407149257s ago: executing program 0 (id=172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0xb, 0x3, 0x40, 0xad2, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0xc1105511, &(0x7f0000000040)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r7 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) shutdown(r0, 0x1) 7m33.8778355s ago: executing program 0 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 7m32.60935958s ago: executing program 0 (id=175): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000000008001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) unshare(0x2a020400) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f00000004c0)="8194a713fb8c07ebb9423607c5f31bac76782fda07131ee74eea61f546fbc38871007784afee543ea273048d1cdc567c0d8a0804cac96f9fe04e4f2feaa50984316b96a25c8863673ab7fd740cfd1ef4d91b7535e45ec09c7ff35914ff90aa735479203992035126d1c3699e499da41ce16fd6ff9a6dbd748d744ceb4fa44e0a76585af65f15", 0x2e, 0x4004000, &(0x7f0000000100)={0xa, 0x3, 0x5ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0xffffffffffffffcb) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240008c0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x80000000) 7m16.550488196s ago: executing program 34 (id=175): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000000008001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) unshare(0x2a020400) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f00000004c0)="8194a713fb8c07ebb9423607c5f31bac76782fda07131ee74eea61f546fbc38871007784afee543ea273048d1cdc567c0d8a0804cac96f9fe04e4f2feaa50984316b96a25c8863673ab7fd740cfd1ef4d91b7535e45ec09c7ff35914ff90aa735479203992035126d1c3699e499da41ce16fd6ff9a6dbd748d744ceb4fa44e0a76585af65f15", 0x2e, 0x4004000, &(0x7f0000000100)={0xa, 0x3, 0x5ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0xffffffffffffffcb) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240008c0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x80000000) 5m5.842457125s ago: executing program 7 (id=256): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003100)=@newtaction={0xac0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x908, 0x1, [@m_ipt={0x274, 0x17, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x91, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x17c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x154, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x10c, 0x12, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x62, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b26367"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x134, 0x11, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd4, 0x6, {0x2, 'mangle\x00', 0x1, 0x1, "26b28bee405c084d7d3004660f6902208128531e54ab5a1819783607be3e2e463fc401b2d641a72c11f6aea69efbc1dac1e8f34f762cbc8ee0231ffeebcb773de1e20df7f65c7029200a9570577fe540733523b10491dc5fda6c0091603360fb1b6019648c7b5ef50f8741b6670963cc5d8533f50c4a2cfbeda3e0ed5070ab41e44997bdda4c34c11413cb846041ef4060b9cb71e527a7dd8e4efb7877f6f37b7cd8648d2d22911f9fbf"}}]}, {0x35, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af842571f14f3b0700806b225899f9ba581b6cc401693affa591693a24cad555ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x11c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x89, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d459f3137f1349ab013b3b5732e45d6b45f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x160, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x64, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac0}}, 0x4008800) recvmmsg$unix(r6, &(0x7f0000000e00), 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x8918, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1) 5m3.969699128s ago: executing program 7 (id=260): syz_emit_vhci(&(0x7f0000002900)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) 5m3.514446211s ago: executing program 7 (id=263): socket$inet(0x2, 0x80b, 0xffffffda) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r4, &(0x7f0000000a80)=[{&(0x7f0000000700)}], 0x1) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002440), 0x0, 0x4804) syz_emit_ethernet(0x76, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010003000000000000c910fc0200ec00000000000000000000000107080000000300020500000000000000000000189078040000000600"/118], 0x0) write$binfmt_misc(r6, &(0x7f0000000300), 0x5b0) 5m0.45390395s ago: executing program 7 (id=266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r7, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800"], 0xc4}}, 0x0) 4m53.462744653s ago: executing program 7 (id=273): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x0, 0xa, 0x10000}, {0x80}, {}, 0x1, 0x10, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x84480) fstat(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="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", 0x2000, &(0x7f0000000d80)={&(0x7f0000000180)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x2, 0x40101000, 0x101, 0xfff, 0x8, 0x2, 0x0, 0x0, 0x40, 0x9}}, &(0x7f0000000280)={0x18, 0x0, 0x3, {0x4ec8e43c}}, &(0x7f00000002c0)={0x18, 0x0, 0x8001, {0xfffffffffffffffe}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x8000000000000001, {0x101}}, &(0x7f0000000400)={0x18, 0x0, 0x3656, {0xfffff764}}, &(0x7f0000000440)={0x28, 0xfffffffffffffffe, 0x4, {{0xfff, 0xa1a3, 0x2}}}, &(0x7f00000004c0)={0x60, 0xfffffffffffffffe, 0x7fff, {{0x2, 0x9, 0x35189cbf, 0x9, 0x12, 0xaa9d7d6, 0x7, 0x7fffffff}}}, &(0x7f0000000580)={0x18, 0xfffffffffffffffe, 0x4, {0x5}}, &(0x7f00000005c0)={0x11, 0x0, 0xb62, {'\x00'}}, &(0x7f0000000600)={0x20, 0x0, 0x8001, {0x0, 0x8}}, &(0x7f00000007c0)={0x78, 0x0, 0xc, {0x2, 0x8, 0x0, {0x6, 0x9, 0x9, 0x8, 0x5, 0x400000000000000, 0x8, 0x8, 0x8, 0xc000, 0xffffff8f, 0x0, 0x0, 0x0, 0x9}}}, &(0x7f00000008c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x7, 0x7fffffff, 0x7fff, 0xd, {0x3, 0x794, 0xfff, 0x5, 0x5, 0xb, 0x1, 0x200000, 0x1, 0x4000, 0x1, 0x0, 0x0, 0x9, 0x9}}}, &(0x7f0000000980)={0x48, 0xfffffffffffffffe, 0xe09, [{0x4, 0xc52c, 0x3, 0x3cf, '-{^'}, {0x3, 0x7ff, 0x0, 0x9}]}, &(0x7f0000000a00)={0xc0, 0x0, 0x7, [{{0x3, 0x3, 0x9, 0x8001, 0x9, 0x8, {0x0, 0x6af, 0xd, 0x100000001, 0xd81, 0x4, 0xfffffff8, 0x180, 0x0, 0xc000, 0x8, 0x0, 0x0, 0x0, 0x8}}, {0x0, 0xffffffff, 0x11, 0x0, '/dev/vhost-vsock\x00'}}]}, &(0x7f0000000ac0)={0xa0, 0xfffffffffffffff5, 0x4, {{0x0, 0x3, 0x1, 0x7ff, 0x2, 0xffffff95, {0x3, 0xfffffffffffffffb, 0x54, 0xffffffffffff95a1, 0x5, 0xff, 0x4, 0xc, 0x3, 0xa000, 0x7, 0x0, 0xee01, 0x3, 0xfffffffd}}, {0x0, 0x10}}}, &(0x7f0000000b80)={0x20, 0xfffffffffffffff5, 0x0, {0x6, 0x4, 0x2, 0x1}}, &(0x7f0000000c40)={0x130, 0x0, 0x1, {0x0, 0x8, 0x0, '\x00', {0x8, 0x100, 0xfffffffffffffffe, 0x2, r4, 0xee00, 0xc000, '\x00', 0xfffffffffffffffa, 0x7fffffffffffffff, 0x4, 0x4c1, {0xcb, 0x5}, {0x76, 0x9}, {0x8000000000000000, 0x10001}, {0x7fffffff, 0x6}, 0xfffffffc, 0x7fff, 0x9, 0x3f3e}}}}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xffe, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x30, 0x0, &(0x7f0000001000)) r9 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r9, 0x0, 0xfffffffffffffff2, 0x0, &(0x7f0000000480)={0x23, 0x28, 0xfd, 0x3}, 0x10) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 4m49.256863908s ago: executing program 7 (id=279): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r9, &(0x7f0000000000)=""/42, 0x2a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000002e064accfcd7f5fab2bbccff494dd317f6d01dd0a7aa512f2c32f79bb680a18fd2a5c33695"], 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 4m31.062543403s ago: executing program 35 (id=279): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r9, &(0x7f0000000000)=""/42, 0x2a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000002e064accfcd7f5fab2bbccff494dd317f6d01dd0a7aa512f2c32f79bb680a18fd2a5c33695"], 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 49.887724079s ago: executing program 6 (id=631): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xb00, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 49.382662989s ago: executing program 6 (id=635): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 49.35995756s ago: executing program 2 (id=636): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) read(r0, &(0x7f0000000340)=""/4096, 0x1000) 49.037408852s ago: executing program 2 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 49.036554607s ago: executing program 6 (id=639): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xa6, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x98, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x1e, 0x3, [{0x1, 0x8, "ecbb63cf7869"}, {0x1, 0xa, "1200000000d0f0f5"}, {0x1, 0x6, "4740c22c"}]}]}}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8adccdd5b271da89a45b8d8583362f6cb68e927df321779eafcc9ff6671d69e7", "290efca4e4937f712f2ba74ca75941ec", {"beea1f1b239f42c93cde265cf5a4daea", "a1556bcd75de3ebb36b7323bcf06706d"}}}}}}}, 0x0) 48.987792404s ago: executing program 4 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x9, 0xfc, 0x3, 0x0, 0x3, 0x2800}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 48.621501972s ago: executing program 5 (id=642): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="1a6f9f", 0x3}], 0x1}}], 0x2, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440), 0x2c}}], 0x1, 0x0) 48.605230215s ago: executing program 6 (id=643): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) 48.604581068s ago: executing program 2 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030009000000080001400000001708000240000000030900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 48.604373908s ago: executing program 4 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) 48.542869442s ago: executing program 8 (id=646): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000440)={&(0x7f0000000580)=[{0x9c, 0xa10, 0x50, &(0x7f0000000040)="56ff37a51071c66fe187209d41f569f351dc18f20f7b7fd9b1ab20c762f53890d227c737cd4ca910ab1379611b739c7e20707881d4d7b52aac0040370b511d291a38fdd3b3c78ade6a39b2aec219ca5b"}, {0x8, 0x1, 0x0, 0x0}], 0x2}) 48.285007651s ago: executing program 5 (id=647): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400e}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000340)={0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48) 48.284726654s ago: executing program 4 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 48.260595186s ago: executing program 2 (id=649): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) 47.421590515s ago: executing program 4 (id=650): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400e}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) 46.045740917s ago: executing program 2 (id=651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x23, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x5c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 45.566464618s ago: executing program 8 (id=652): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 44.162485166s ago: executing program 6 (id=653): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) acct(&(0x7f0000000000)='./file0\x00') 42.619860405s ago: executing program 5 (id=654): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) 42.619179238s ago: executing program 6 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x81}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 38.599270646s ago: executing program 5 (id=656): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc227, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xa, "cace"}, @global=@item_4={0x3, 0x1, 0xb, "192ccbb6"}]}}, 0x0}, 0x0) 35.2342918s ago: executing program 2 (id=657): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600}}, 0x20}, 0x1, 0x2}, 0x0) 35.213444902s ago: executing program 4 (id=658): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40}) 35.120082669s ago: executing program 8 (id=659): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) ioctl$SIOCSIFMTU(r0, 0x894b, &(0x7f00000002c0)={'bond0\x00', 0x7f}) 34.457553568s ago: executing program 4 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f47a3b6e947d8444ef8a51116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 34.403846s ago: executing program 8 (id=661): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)={0x40, 0x1, 0x5, {0x5, 0x31, "695b03"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 33.516040274s ago: executing program 5 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64, @ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x3) 30.874316487s ago: executing program 8 (id=663): r0 = socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 27.337857523s ago: executing program 36 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x81}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 22.328000225s ago: executing program 5 (id=665): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400e}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000340)={0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48) 22.306899024s ago: executing program 8 (id=666): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 15.944226064s ago: executing program 37 (id=657): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600}}, 0x20}, 0x1, 0x2}, 0x0) 15.563161327s ago: executing program 38 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f47a3b6e947d8444ef8a51116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 212.334457ms ago: executing program 39 (id=666): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 0s ago: executing program 40 (id=665): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400e}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000340)={0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48) kernel console output (not intermixed with test programs): +0x508/0x820 [ 236.840873][ T6446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.840907][ T6446] ? import_iovec+0x74/0xa0 [ 236.840930][ T6446] ___sys_sendmsg+0x21f/0x2a0 [ 236.840957][ T6446] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.840986][ T6446] ? rcu_is_watching+0x15/0xb0 [ 236.841038][ T6446] ? __fget_files+0x2a/0x420 [ 236.841063][ T6446] ? __fget_files+0x3a6/0x420 [ 236.841097][ T6446] __x64_sys_sendmsg+0x1a1/0x260 [ 236.841125][ T6446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.841160][ T6446] ? rcu_is_watching+0x15/0xb0 [ 236.841190][ T6446] ? do_syscall_64+0xbe/0x3b0 [ 236.841218][ T6446] do_syscall_64+0xfa/0x3b0 [ 236.841243][ T6446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.841260][ T6446] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 236.841276][ T6446] ? clear_bhb_loop+0x60/0xb0 [ 236.841298][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.841315][ T6446] RIP: 0033:0x7f4ad910ebe9 [ 236.841339][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.841354][ T6446] RSP: 002b:00007f4ad732c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.841373][ T6446] RAX: ffffffffffffffda RBX: 00007f4ad9346180 RCX: 00007f4ad910ebe9 [ 236.841386][ T6446] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 236.841397][ T6446] RBP: 00007f4ad9191e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.841412][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.841423][ T6446] R13: 00007f4ad9346218 R14: 00007f4ad9346180 R15: 00007ffd481e6418 [ 236.841454][ T6446] [ 236.841515][ T6446] Mem-Info: [ 236.841530][ T6446] active_anon:283 inactive_anon:5818 isolated_anon:0 [ 236.841530][ T6446] active_file:5298 inactive_file:37923 isolated_file:0 [ 236.841530][ T6446] unevictable:768 dirty:262 writeback:0 [ 236.841530][ T6446] slab_reclaimable:11606 slab_unreclaimable:101463 [ 236.841530][ T6446] mapped:29519 shmem:1382 pagetables:1145 [ 236.841530][ T6446] sec_pagetables:0 bounce:0 [ 236.841530][ T6446] kernel_misc_reclaimable:0 [ 236.841530][ T6446] free:1325802 free_pcp:6431 free_cma:0 [ 236.841618][ T6446] Node 0 active_anon:1132kB inactive_anon:23272kB active_file:20984kB inactive_file:151692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118076kB dirty:1048kB writeback:0kB shmem:3992kB kernel_stack:12944kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 236.841670][ T6446] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 236.841718][ T6446] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.841786][ T6446] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 236.841826][ T6446] Node 0 DMA32 free:1399668kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1128kB inactive_anon:23232kB active_file:19964kB inactive_file:151624kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2572324kB mlocked:0kB bounce:0kB free_pcp:24948kB local_pcp:16156kB free_cma:0kB [ 236.841892][ T6446] lowmem_reserve[]: 0 0 1 1 1 [ 236.841928][ T6446] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1020kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.841988][ T6446] lowmem_reserve[]: 0 0 0 0 0 [ 236.842024][ T6446] Node 1 Normal free:3888196kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:776kB local_pcp:744kB free_cma:0kB [ 236.842089][ T6446] lowmem_reserve[]: 0 0 0 0 0 [ 236.842126][ T6446] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 236.842285][ T6446] Node 0 DMA32: 921*4kB (UME) 418*8kB (UME) 237*16kB (UME) 19*32kB (UME) 15*64kB (ME) 18*128kB (UME) 34*256kB (UME) 20*512kB (M) 10*1024kB (UM) 8*2048kB (ME) 327*4096kB (M) = 1399652kB [ 236.842463][ T6446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 236.842583][ T6446] Node 1 Normal: 3*4kB (UME) 1*8kB (M) 1*16kB (M) 61*32kB (UME) 86*64kB (UME) 22*128kB (UME) 10*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3888196kB [ 236.842771][ T6446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.842790][ T6446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.842808][ T6446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.842826][ T6446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.842844][ T6446] 44599 total pagecache pages [ 236.842856][ T6446] 0 pages in swap cache [ 236.842865][ T6446] Free swap = 124996kB [ 236.842873][ T6446] Total swap = 124996kB [ 236.842882][ T6446] 2097051 pages RAM [ 236.842890][ T6446] 0 pages HighMem/MovableOnly [ 236.842897][ T6446] 422072 pages reserved [ 236.842905][ T6446] 0 pages cma reserved [ 238.506991][ T6447] loop2: detected capacity change from 0 to 7 [ 238.778651][ T6447] Dev loop2: unable to read RDB block 7 [ 238.778686][ T6447] loop2: AHDI p2 p3 [ 238.778708][ T6447] loop2: partition table partially beyond EOD, truncated [ 238.799510][ T6447] loop2: p2 size 150995456 extends beyond EOD, truncated [ 239.390388][ T6451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.839208][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 242.533451][ T6466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.782529][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.928500][ T38] audit: type=1326 audit(1756725700.387:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.2.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab94fbebe9 code=0x0 [ 243.118850][ T6304] udevd[6304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 243.702363][ T6462] syz.3.108 (6462) used greatest stack depth: 17872 bytes left [ 243.789174][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.039510][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.146212][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.468318][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.916725][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.401373][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 247.405624][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 247.418210][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 247.418465][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 247.762713][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 247.762952][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 248.845326][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 248.845556][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 250.492607][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.501836][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.503037][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.504295][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.505513][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.152529][ T6034] libceph: connect (1)[c::]:6789 error -101 [ 251.152800][ T6034] libceph: mon0 (1)[c::]:6789 connect error [ 251.367447][ T6482] ceph: No mds server is up or the cluster is laggy [ 252.214155][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 252.214384][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 252.484440][ T6034] libceph: connect (1)[c::]:6789 error -101 [ 252.484674][ T6034] libceph: mon0 (1)[c::]:6789 connect error [ 252.847068][ T5846] Bluetooth: hci2: command tx timeout [ 255.580923][ T59] Bluetooth: hci2: command tx timeout [ 256.020002][ T6527] Illegal XDP return value 4294967262 on prog (id 57) dev N/A, expect packet loss! [ 256.766999][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.614447][ T59] Bluetooth: hci2: command tx timeout [ 257.810962][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.184941][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.078296][ T59] Bluetooth: hci2: command tx timeout [ 263.088790][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.090079][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.773540][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 266.945702][ T6577] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 266.945764][ T6577] netlink: 224 bytes leftover after parsing attributes in process `syz.4.128'. [ 267.650437][ T6580] serio: Serial port ptm0 [ 269.666879][ T6594] tmpfs: Bad value for 'mpol' [ 271.507520][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 271.924778][ T6039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.509015][ T6616] erofs (device nbd2): cannot find valid erofs superblock [ 275.728295][ T6039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.268890][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.556498][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.149989][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.602683][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.773737][ T6635] ucma_write: process 128 (syz.4.140) changed security contexts after opening file descriptor, this is not allowed. [ 278.804534][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.239873][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.565054][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.079390][ T6647] /dev/nullb0: Can't open blockdev [ 282.477512][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 282.561716][ T6039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.274198][ T6664] netlink: 384 bytes leftover after parsing attributes in process `syz.2.146'. [ 283.279689][ T6664] netlink: 'syz.2.146': attribute type 2 has an invalid length. [ 284.829743][ T6039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.123759][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.731808][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.120911][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.176735][ T6507] chnl_net:caif_netlink_parms(): no params data found [ 286.509234][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.583826][ T5924] IPVS: starting estimator thread 0... [ 286.671729][ T6685] IPVS: using max 7 ests per chain, 16800 per kthread [ 287.031474][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.080955][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.106451][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.108494][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.109890][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.237091][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.689570][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.360238][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.690299][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.313419][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.343639][ T6702] (syz.4.154,6702,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 289.343674][ T6702] (syz.4.154,6702,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 289.586864][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.687393][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.792997][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.899972][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.248508][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.703959][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.805238][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.620754][ T5846] Bluetooth: hci5: command tx timeout [ 293.957938][ T5846] Bluetooth: hci5: command tx timeout [ 296.048810][ T5846] Bluetooth: hci5: command tx timeout [ 296.079816][ T6737] capability: warning: `syz.4.161' uses deprecated v2 capabilities in a way that may be insecure [ 298.113262][ T6739] loop2: detected capacity change from 0 to 7 [ 298.126719][ T6739] loop2: [ 298.126758][ T6739] loop2: partition table partially beyond EOD, truncated [ 298.134983][ T5846] Bluetooth: hci5: command tx timeout [ 298.984906][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.985021][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.985211][ T6507] bridge_slave_0: entered allmulticast mode [ 299.026630][ T6507] bridge_slave_0: entered promiscuous mode [ 299.067556][ T6748] netlink: 'syz.2.163': attribute type 14 has an invalid length. [ 299.194247][ T6034] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 299.272951][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.273107][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.273358][ T6507] bridge_slave_1: entered allmulticast mode [ 299.327499][ T6507] bridge_slave_1: entered promiscuous mode [ 299.393172][ T6034] usb 3-1: Using ep0 maxpacket: 16 [ 299.408723][ T6034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.408742][ T6034] usb 3-1: config 0 has no interfaces? [ 299.408766][ T6034] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 299.408782][ T6034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.724143][ T6034] usb 3-1: config 0 descriptor?? [ 301.198984][ T6034] usb 3-1: can't set config #0, error -71 [ 301.273664][ T6034] usb 3-1: USB disconnect, device number 2 [ 304.132682][ T6767] afs: Unknown parameter 'dynkaller' [ 305.533535][ T6039] bridge_slave_1: left allmulticast mode [ 305.534050][ T6039] bridge_slave_1: left promiscuous mode [ 305.535112][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.593465][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.230629][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.233990][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 306.237641][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.239551][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.246672][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.611911][ T6039] bridge_slave_0: left allmulticast mode [ 306.611946][ T6039] bridge_slave_0: left promiscuous mode [ 306.614790][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.771784][ T6796] netlink: 'syz.4.173': attribute type 3 has an invalid length. [ 308.247246][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.286103][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.621488][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.785902][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.779412][ T59] Bluetooth: hci4: command tx timeout [ 309.901232][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.150677][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.450407][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.676799][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.372714][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.160082][ T59] Bluetooth: hci4: command tx timeout [ 313.677278][ T38] audit: type=1326 audit(1756725771.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.751915][ T38] audit: type=1804 audit(1756725771.247:5): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.175" name="/newroot/54/file0" dev="tmpfs" ino=308 res=1 errno=0 [ 313.756371][ T38] audit: type=1326 audit(1756725771.287:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.758993][ T38] audit: type=1326 audit(1756725771.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.759091][ T38] audit: type=1326 audit(1756725771.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.759139][ T38] audit: type=1326 audit(1756725771.287:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.759186][ T38] audit: type=1326 audit(1756725771.287:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.759232][ T38] audit: type=1326 audit(1756725771.287:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.759277][ T38] audit: type=1326 audit(1756725771.287:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 313.759321][ T38] audit: type=1326 audit(1756725771.287:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38542febe9 code=0x7ffc0000 [ 314.682207][ T59] Bluetooth: hci4: command tx timeout [ 315.068319][ T6833] afs: Unknown parameter 'dynkaller' [ 315.271755][ T6838] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.626670][ T6844] virtio-fs: tag not found [ 317.326883][ T59] Bluetooth: hci4: command tx timeout [ 319.594434][ T5910] Process accounting resumed [ 322.555611][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.555695][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.170193][ T6873] block nbd4: Attempted send on invalid socket [ 323.170547][ T6873] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 323.174471][ T6873] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 324.587782][ T6879] afs: Unknown parameter 'dynkaller' [ 325.264969][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.598561][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 326.785840][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.104355][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.211046][ T6894] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 327.457006][ T6896] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 328.379222][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.386186][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.388130][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.389727][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.390550][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.733908][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'. [ 328.734002][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 329.032563][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.232237][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.409116][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.426804][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.612259][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.864229][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.914375][ T6905] vivid-000: kernel_thread() failed [ 329.916423][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.489881][ T59] Bluetooth: hci2: command tx timeout [ 331.096148][ T6916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.352399][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.404333][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.437510][ T6920] afs: Unknown parameter 'dynkaller' [ 332.451856][ T6039] bond0 (unregistering): Released all slaves [ 332.613736][ T59] Bluetooth: hci2: command tx timeout [ 334.829076][ T59] Bluetooth: hci2: command tx timeout [ 334.867418][ T6929] block nbd4: Attempted send on invalid socket [ 334.867442][ T6929] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.953965][ T59] Bluetooth: hci2: command tx timeout [ 337.364869][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 337.364888][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 341.521689][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.204'. [ 341.913469][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.205'. [ 341.913507][ T6966] netlink: 'syz.4.205': attribute type 7 has an invalid length. [ 341.913521][ T6966] netlink: 'syz.4.205': attribute type 8 has an invalid length. [ 341.913535][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 342.024332][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 342.024381][ T38] audit: type=1326 audit(1756725799.367:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38542febe9 code=0x0 [ 342.956975][ T6969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.206'. [ 343.325377][ T6975] afs: Unknown parameter 'dynkaller' [ 345.509674][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.513023][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.521642][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.486452][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.494522][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.723614][ T5846] Bluetooth: hci0: command tx timeout [ 349.054018][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.161152][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.334319][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.461052][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.795496][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.057984][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.504472][ T6998] lo speed is unknown, defaulting to 1000 [ 350.506698][ T6998] lo speed is unknown, defaulting to 1000 [ 350.511947][ T6998] lo speed is unknown, defaulting to 1000 [ 350.523057][ T6998] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 350.542366][ T6998] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 350.573743][ T6998] lo speed is unknown, defaulting to 1000 [ 350.576148][ T6998] lo speed is unknown, defaulting to 1000 [ 350.578180][ T6998] lo speed is unknown, defaulting to 1000 [ 350.580091][ T6998] lo speed is unknown, defaulting to 1000 [ 350.582069][ T6998] lo speed is unknown, defaulting to 1000 [ 350.584069][ T6998] lo speed is unknown, defaulting to 1000 [ 350.585977][ T6998] lo speed is unknown, defaulting to 1000 [ 350.588012][ T6998] lo speed is unknown, defaulting to 1000 [ 350.590001][ T6998] lo speed is unknown, defaulting to 1000 [ 350.704486][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.804629][ T5846] Bluetooth: hci0: command tx timeout [ 351.312250][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.498488][ T7008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.569300][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.414893][ T7010] afs: Unknown parameter 'dynkaller' [ 352.495464][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.601800][ T6039] hsr_slave_0: left promiscuous mode [ 352.691028][ T6039] hsr_slave_1: left promiscuous mode [ 352.881655][ T5846] Bluetooth: hci0: command tx timeout [ 353.150042][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.150120][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.211699][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.211728][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.425099][ T6039] veth1_macvtap: left promiscuous mode [ 353.425465][ T6039] veth0_macvtap: left promiscuous mode [ 353.433518][ T6039] veth1_vlan: left promiscuous mode [ 353.434018][ T6039] veth0_vlan: left promiscuous mode [ 353.653315][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.088026][ T5846] Bluetooth: hci0: command tx timeout [ 355.527687][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.714034][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.869519][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.213131][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.569728][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.930345][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.378506][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.987665][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.301793][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.353836][ T7044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.360114][ T7044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.471485][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.564049][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.616796][ T7052] afs: Unknown parameter 'dynkaller' [ 363.274053][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.319508][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.364270][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.390667][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.399096][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.612528][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 363.812623][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 365.521733][ T5846] Bluetooth: hci5: command tx timeout [ 365.990190][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.227'. [ 365.990336][ T7069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.227'. [ 366.317687][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.648843][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.594831][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.619943][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.717112][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.855077][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.195214][ T5846] Bluetooth: hci5: command tx timeout [ 368.379448][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.641769][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.772397][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.880944][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.911525][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.960886][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.099609][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.247360][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.317074][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.486711][ T5910] kernel write not supported for file /313/attr/sockcreate (pid: 5910 comm: kworker/0:4) [ 369.980098][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.057978][ T7090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 370.145418][ T7063] lo speed is unknown, defaulting to 1000 [ 370.250349][ T5846] Bluetooth: hci5: command tx timeout [ 370.623226][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.702145][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.326910][ T5846] Bluetooth: hci5: command tx timeout [ 374.421241][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.830867][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.866544][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.099784][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.133784][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.214371][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.282298][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 375.488285][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.929318][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.874901][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.000619][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.200617][ T6983] chnl_net:caif_netlink_parms(): no params data found [ 377.874141][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.874294][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.874497][ T6899] bridge_slave_0: entered allmulticast mode [ 377.878971][ T6899] bridge_slave_0: entered promiscuous mode [ 377.943810][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.944039][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.944283][ T6899] bridge_slave_1: entered allmulticast mode [ 377.972351][ T6899] bridge_slave_1: entered promiscuous mode [ 378.540824][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.592194][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 378.688085][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.947125][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.947614][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.947863][ T6983] bridge_slave_0: entered allmulticast mode [ 378.950774][ T6983] bridge_slave_0: entered promiscuous mode [ 379.087804][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.087974][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.088212][ T6983] bridge_slave_1: entered allmulticast mode [ 379.091168][ T6983] bridge_slave_1: entered promiscuous mode [ 379.404521][ T6039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.604060][ T6899] team0: Port device team_slave_0 added [ 379.699211][ T6899] team0: Port device team_slave_1 added [ 379.836393][ T6039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.891802][ T6983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.987324][ T6983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.364316][ T6039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.427088][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.427105][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.427135][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.735431][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.735449][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.735475][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.746078][ T6983] team0: Port device team_slave_0 added [ 380.749564][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.749738][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.749983][ T7063] bridge_slave_0: entered allmulticast mode [ 380.756005][ T7063] bridge_slave_0: entered promiscuous mode [ 380.967376][ T6039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.019778][ T6983] team0: Port device team_slave_1 added [ 381.020320][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.023216][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.023516][ T7063] bridge_slave_1: entered allmulticast mode [ 381.026637][ T7063] bridge_slave_1: entered promiscuous mode [ 381.522619][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.522638][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.522668][ T6983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.669991][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.682608][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.682625][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.682653][ T6983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.761263][ T6899] hsr_slave_0: entered promiscuous mode [ 381.767263][ T6899] hsr_slave_1: entered promiscuous mode [ 381.768973][ T6899] debugfs: 'hsr0' already exists in 'hsr' [ 381.769000][ T6899] Cannot create hsr debugfs directory [ 381.796395][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.467022][ T7063] team0: Port device team_slave_0 added [ 382.670787][ T7063] team0: Port device team_slave_1 added [ 382.687110][ T6983] hsr_slave_0: entered promiscuous mode [ 382.688498][ T6983] hsr_slave_1: entered promiscuous mode [ 382.689409][ T6983] debugfs: 'hsr0' already exists in 'hsr' [ 382.689434][ T6983] Cannot create hsr debugfs directory [ 383.135169][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.135186][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.135214][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.214179][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.214197][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.214226][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.571894][ T6039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.930577][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.930674][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.038750][ T6039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.213376][ T7063] hsr_slave_0: entered promiscuous mode [ 384.214842][ T7063] hsr_slave_1: entered promiscuous mode [ 384.215804][ T7063] debugfs: 'hsr0' already exists in 'hsr' [ 384.215829][ T7063] Cannot create hsr debugfs directory [ 384.400840][ T6039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.818510][ T6039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.219268][ T6899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 385.336148][ T6899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 385.487057][ T6899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 385.591132][ T6899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 385.851229][ T6039] bridge_slave_1: left allmulticast mode [ 385.851266][ T6039] bridge_slave_1: left promiscuous mode [ 385.853481][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.924518][ T6039] bridge_slave_0: left allmulticast mode [ 385.924555][ T6039] bridge_slave_0: left promiscuous mode [ 385.925501][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.005025][ T6039] bridge_slave_1: left allmulticast mode [ 386.005060][ T6039] bridge_slave_1: left promiscuous mode [ 386.005351][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.075355][ T6039] bridge_slave_0: left allmulticast mode [ 386.075381][ T6039] bridge_slave_0: left promiscuous mode [ 386.075573][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.148198][ T6039] bridge_slave_1: left allmulticast mode [ 386.148224][ T6039] bridge_slave_1: left promiscuous mode [ 386.148403][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.226079][ T6039] bridge_slave_0: left allmulticast mode [ 386.226115][ T6039] bridge_slave_0: left promiscuous mode [ 386.226386][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.482906][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.494598][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.508397][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.510150][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.525571][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.662655][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.722572][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.746887][ T6039] bond0 (unregistering): Released all slaves [ 388.960766][ T6039] bond0 (unregistering): Released all slaves [ 389.601748][ T5846] Bluetooth: hci4: command tx timeout [ 390.642440][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.732752][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.756346][ T6039] bond0 (unregistering): Released all slaves [ 390.880593][ T6983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.960132][ T6983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 391.155766][ T6983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 391.232563][ T6983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 391.407051][ T7194] lo speed is unknown, defaulting to 1000 [ 391.566394][ T7063] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.681670][ T5846] Bluetooth: hci4: command tx timeout [ 391.884635][ T7063] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.234862][ T7063] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.348308][ T7063] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.768183][ T5846] Bluetooth: hci4: command tx timeout [ 393.996069][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 394.445505][ T6039] hsr_slave_0: left promiscuous mode [ 394.481715][ T6039] hsr_slave_1: left promiscuous mode [ 394.482708][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.482737][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.517362][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.517397][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.671719][ T6039] hsr_slave_0: left promiscuous mode [ 394.691812][ T6039] hsr_slave_1: left promiscuous mode [ 394.692851][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.692882][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.744493][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.744527][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.890696][ T6039] veth1_macvtap: left promiscuous mode [ 394.890827][ T6039] veth0_macvtap: left promiscuous mode [ 394.891143][ T6039] veth1_vlan: left promiscuous mode [ 394.893312][ T6039] veth0_vlan: left promiscuous mode [ 395.046206][ T6039] veth1_macvtap: left promiscuous mode [ 395.046339][ T6039] veth0_macvtap: left promiscuous mode [ 395.046644][ T6039] veth1_vlan: left promiscuous mode [ 395.046875][ T6039] veth0_vlan: left promiscuous mode [ 395.841630][ T5846] Bluetooth: hci4: command tx timeout [ 397.832675][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 398.083239][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 402.954047][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 403.222617][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 404.088215][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.092790][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.102437][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.103659][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.104424][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.161812][ T5846] Bluetooth: hci2: command tx timeout [ 406.287935][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.288125][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.288349][ T7194] bridge_slave_0: entered allmulticast mode [ 406.313289][ T7194] bridge_slave_0: entered promiscuous mode [ 406.332403][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.332560][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.332792][ T7194] bridge_slave_1: entered allmulticast mode [ 406.335215][ T7194] bridge_slave_1: entered promiscuous mode [ 406.745300][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.753545][ T7231] lo speed is unknown, defaulting to 1000 [ 406.769895][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.563865][ T7194] team0: Port device team_slave_0 added [ 407.662985][ T7194] team0: Port device team_slave_1 added [ 407.953769][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.953786][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.953808][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.959016][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.959031][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.959054][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.049829][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.241820][ T5846] Bluetooth: hci2: command tx timeout [ 408.324103][ T7194] hsr_slave_0: entered promiscuous mode [ 408.325627][ T7194] hsr_slave_1: entered promiscuous mode [ 408.787032][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.877206][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.878185][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.924347][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.924575][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.261909][ T7231] chnl_net:caif_netlink_parms(): no params data found [ 410.321771][ T59] Bluetooth: hci2: command tx timeout [ 410.455907][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.456062][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.456291][ T7231] bridge_slave_0: entered allmulticast mode [ 410.459483][ T7231] bridge_slave_0: entered promiscuous mode [ 410.551089][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.551323][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.554296][ T7231] bridge_slave_1: entered allmulticast mode [ 410.557593][ T7231] bridge_slave_1: entered promiscuous mode [ 411.047389][ T7231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.249613][ T7231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.257994][ T6039] IPVS: stop unused estimator thread 0... [ 411.517305][ T7231] team0: Port device team_slave_0 added [ 411.534135][ T7231] team0: Port device team_slave_1 added [ 411.949281][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.949297][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.949320][ T7231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.141902][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.141921][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.141951][ T7231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.401959][ T59] Bluetooth: hci2: command tx timeout [ 412.884766][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.086076][ T7231] hsr_slave_0: entered promiscuous mode [ 413.087581][ T7231] hsr_slave_1: entered promiscuous mode [ 413.088568][ T7231] debugfs: 'hsr0' already exists in 'hsr' [ 413.088593][ T7231] Cannot create hsr debugfs directory [ 413.120926][ T7194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 413.189720][ T7194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 413.512802][ T7194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 413.585068][ T7194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.566237][ T6039] bridge_slave_1: left allmulticast mode [ 414.566274][ T6039] bridge_slave_1: left promiscuous mode [ 414.566583][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.691144][ T6039] bridge_slave_0: left allmulticast mode [ 414.691181][ T6039] bridge_slave_0: left promiscuous mode [ 414.694432][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.778130][ T6039] bridge_slave_1: left allmulticast mode [ 414.778166][ T6039] bridge_slave_1: left promiscuous mode [ 414.778431][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.863464][ T6039] bridge_slave_0: left allmulticast mode [ 414.863499][ T6039] bridge_slave_0: left promiscuous mode [ 414.863766][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.816725][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.913923][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.976088][ T6039] bond0 (unregistering): Released all slaves [ 416.302604][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.392873][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.455479][ T6039] bond0 (unregistering): Released all slaves [ 416.664715][ T7063] veth0_vlan: entered promiscuous mode [ 416.736424][ T7063] veth1_vlan: entered promiscuous mode [ 417.161641][ T6039] hsr_slave_0: left promiscuous mode [ 417.181682][ T6039] hsr_slave_1: left promiscuous mode [ 417.182708][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.252310][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.391848][ T6039] hsr_slave_0: left promiscuous mode [ 417.421678][ T6039] hsr_slave_1: left promiscuous mode [ 417.422735][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.452527][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.303762][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 418.444075][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 419.773499][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 419.952727][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 420.791130][ T7063] veth0_macvtap: entered promiscuous mode [ 420.829612][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.830915][ T7063] veth1_macvtap: entered promiscuous mode [ 420.916007][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.921241][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.993676][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.034765][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.034940][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.113205][ T1128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.117731][ T1128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.140820][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.140992][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.148710][ T1128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.164588][ T1128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.541673][ T7231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.651646][ T7231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.719444][ T7231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.798594][ T7231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.987489][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.987509][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.887696][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.013867][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.050916][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.051140][ T981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.106353][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.118741][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.565391][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.590865][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.598472][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.603006][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.604433][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.897431][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.010599][ T7357] lo speed is unknown, defaulting to 1000 [ 424.791147][ T6039] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.089509][ T6039] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.347493][ T6039] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.450691][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.691500][ T59] Bluetooth: hci0: command tx timeout [ 425.744013][ T6039] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.191580][ T7194] veth0_vlan: entered promiscuous mode [ 426.195319][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 426.658358][ T7194] veth1_vlan: entered promiscuous mode [ 426.870884][ T6039] bridge_slave_1: left allmulticast mode [ 426.870910][ T6039] bridge_slave_1: left promiscuous mode [ 426.871093][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.943274][ T6039] bridge_slave_0: left allmulticast mode [ 426.943311][ T6039] bridge_slave_0: left promiscuous mode [ 426.943601][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.761855][ T59] Bluetooth: hci0: command tx timeout [ 428.903748][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.964698][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.006853][ T6039] bond0 (unregistering): Released all slaves [ 429.145746][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.145895][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.146103][ T7357] bridge_slave_0: entered allmulticast mode [ 429.149074][ T7357] bridge_slave_0: entered promiscuous mode [ 429.187632][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.187774][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.187975][ T7357] bridge_slave_1: entered allmulticast mode [ 429.190023][ T7357] bridge_slave_1: entered promiscuous mode [ 429.527304][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.543495][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.851759][ T59] Bluetooth: hci0: command tx timeout [ 430.092067][ T7357] team0: Port device team_slave_0 added [ 430.123598][ T7357] team0: Port device team_slave_1 added [ 430.494911][ T6039] hsr_slave_0: left promiscuous mode [ 430.531631][ T6039] hsr_slave_1: left promiscuous mode [ 430.534363][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.534394][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.561109][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.561144][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.659327][ T6039] veth1_macvtap: left promiscuous mode [ 430.659416][ T6039] veth0_macvtap: left promiscuous mode [ 430.659611][ T6039] veth1_vlan: left promiscuous mode [ 430.659747][ T6039] veth0_vlan: left promiscuous mode [ 431.921589][ T59] Bluetooth: hci0: command tx timeout [ 433.172819][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 433.382210][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 435.884657][ T7194] veth0_macvtap: entered promiscuous mode [ 435.898026][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.898045][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.898077][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.932690][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.932708][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.932740][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.939951][ T7194] veth1_macvtap: entered promiscuous mode [ 435.956911][ T7231] veth0_vlan: entered promiscuous mode [ 436.263655][ T7357] hsr_slave_0: entered promiscuous mode [ 436.265086][ T7357] hsr_slave_1: entered promiscuous mode [ 436.266124][ T7357] debugfs: 'hsr0' already exists in 'hsr' [ 436.266149][ T7357] Cannot create hsr debugfs directory [ 436.267981][ T7231] veth1_vlan: entered promiscuous mode [ 436.309004][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.629079][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.805935][ T6022] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.871685][ T6022] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.887724][ T6022] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.899224][ T6022] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.223532][ T7231] veth0_macvtap: entered promiscuous mode [ 437.506629][ T7231] veth1_macvtap: entered promiscuous mode [ 437.755779][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.867869][ T6022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.867891][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.881351][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.175720][ T981] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.225194][ T981] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.257372][ T981] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.258359][ T981] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.312958][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.312980][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.105241][ T7442] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 439.105271][ T7442] CIFS mount error: No usable UNC path provided in device string! [ 439.105271][ T7442] [ 439.105526][ T7442] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 442.450740][ T6607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.450763][ T6607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.693065][ T7357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.005345][ T7357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.169326][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.169347][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.064802][ T7357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 446.310030][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.310083][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.852753][ T7357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 448.560282][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.598810][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.623239][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.663526][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.832918][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.985740][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.990244][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.599389][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.609188][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 451.641726][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.540483][ T7497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.540571][ T7497] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 452.658347][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.677721][ T7497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 452.677783][ T7497] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 452.792608][ T7497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 452.792670][ T7497] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 452.867744][ T7497] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 452.923460][ T7497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.923550][ T7497] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 453.256258][ T7497] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 453.563211][ T7522] netlink: 'syz.2.255': attribute type 11 has an invalid length. [ 453.563235][ T7522] netlink: 224 bytes leftover after parsing attributes in process `syz.2.255'. [ 453.945862][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 454.356193][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.356561][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.443051][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.443268][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.813655][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 454.822925][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 454.844582][ T7528] fuse: Bad value for 'fd' [ 454.972319][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 455.502540][ T7497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.502596][ T7497] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 456.106474][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 456.479065][ T7497] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 456.891677][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 456.891715][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 457.041672][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.422886][ T5923] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 457.521589][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.602338][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 457.631092][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 457.682853][ T5923] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=e8.95 [ 457.682883][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.682905][ T5923] usb 3-1: Product: syz [ 457.682919][ T5923] usb 3-1: Manufacturer: syz [ 457.683494][ T5923] usb 3-1: SerialNumber: syz [ 458.102991][ T5923] usb 3-1: config 0 descriptor?? [ 458.286214][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 458.513942][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 458.519769][ T10] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 458.519796][ T10] usb 7-1: config 0 has no interface number 0 [ 458.519842][ T10] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 458.519858][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.524128][ T10] usb 7-1: config 0 descriptor?? [ 458.638869][ T10] viperboard 7-1:0.143: version 0.00 found at bus 007 address 002 [ 458.811550][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 458.811596][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 458.965749][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 459.044144][ T10] usb 7-1: USB disconnect, device number 2 [ 459.121702][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 459.143081][ T5923] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 459.295887][ T5923] usb 3-1: USB disconnect, device number 3 [ 459.601798][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.677745][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.146581][ T7577] virtio-fs: tag not found [ 461.933712][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.984145][ T7533] udevd[7533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.696594][ T7586] trusted_key: encrypted_key: insufficient parameters specified [ 464.776182][ T7595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.721135][ T7593] syz.4.267 (7593) used greatest stack depth: 16880 bytes left [ 469.719436][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.769883][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.982751][ T7633] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 471.078516][ T7633] cramfs: wrong magic [ 471.096618][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.346228][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.662519][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.929308][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.091750][ T7636] virtio-fs: tag not found [ 472.179910][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.197274][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.932116][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.226729][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.397239][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.727143][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.251611][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 475.961936][ T7357] veth0_vlan: entered promiscuous mode [ 475.963644][ T5923] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 475.963671][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.963691][ T5923] usb 3-1: Product: syz [ 475.963705][ T5923] usb 3-1: Manufacturer: syz [ 475.963719][ T5923] usb 3-1: SerialNumber: syz [ 475.999117][ T5923] usb 3-1: config 0 descriptor?? [ 476.008411][ T5923] hub 3-1:0.0: bad descriptor, ignoring hub [ 476.008450][ T5923] hub 3-1:0.0: probe with driver hub failed with error -5 [ 476.010162][ T5923] f81232 3-1:0.0: f81534a converter detected [ 476.318320][ T5923] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 476.318350][ T5923] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 477.370622][ T7357] veth1_vlan: entered promiscuous mode [ 477.476744][ T5923] usb 3-1: USB disconnect, device number 4 [ 477.623070][ T5923] f81232 3-1:0.0: device disconnected [ 477.763758][ T7357] veth0_macvtap: entered promiscuous mode [ 477.836675][ T7357] veth1_macvtap: entered promiscuous mode [ 477.933745][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.004192][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.068027][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.068610][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.071295][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.074194][ T981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.332535][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.332558][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.464415][ T7702] CIFS mount error: No usable UNC path provided in device string! [ 487.464415][ T7702] [ 487.464504][ T7702] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 493.906275][ T59] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 494.241619][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.292'. [ 494.241798][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.292'. [ 495.546210][ T59] Bluetooth: hci1: Malformed LE Event: 0x1b [ 497.029727][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.047002][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.051731][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.151603][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.297319][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.557181][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.569860][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.585615][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.588372][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.589227][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.250271][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.294498][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.332896][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.473810][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.526542][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.583499][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.627703][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.819216][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.933827][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.387326][ T5846] Bluetooth: hci0: command tx timeout [ 500.003193][ T5846] Bluetooth: hci5: command tx timeout [ 500.679449][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.333947][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.686896][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.699929][ T5846] Bluetooth: hci0: command tx timeout [ 501.951993][ T7741] lo speed is unknown, defaulting to 1000 [ 502.091867][ T5846] Bluetooth: hci5: command tx timeout [ 502.333455][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.456105][ T5846] Bluetooth: hci0: command tx timeout [ 504.456142][ T5846] Bluetooth: hci5: command tx timeout [ 505.630571][ T7795] vivid-004: kernel_thread() failed [ 505.769946][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 506.079894][ T981] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.151452][ T7752] lo speed is unknown, defaulting to 1000 [ 506.481416][ T59] Bluetooth: hci5: command tx timeout [ 506.481450][ T59] Bluetooth: hci0: command tx timeout [ 507.132979][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.395398][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.399794][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.399877][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.487641][ T7804] syz.4.308 (7804) used greatest stack depth: 15600 bytes left [ 507.738331][ T5846] Bluetooth: hci1: Malformed HCI Event [ 507.923093][ T981] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.191972][ T5923] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 509.071872][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.072080][ T5923] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.300691][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 509.300721][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.300740][ T5923] usb 5-1: SerialNumber: syz [ 509.350519][ T5923] cdc_ether 5-1:1.0: skipping garbage [ 509.350547][ T5923] usb 5-1: bad CDC descriptors [ 509.367112][ T5923] usb-storage 5-1:1.0: USB Mass Storage device detected [ 509.379979][ T7825] fuse: Bad value for 'fd' [ 509.391074][ T31] Process accounting resumed [ 509.430217][ T5923] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 509.504825][ T7824] Process accounting resumed [ 509.608077][ T5923] usb 5-1: USB disconnect, device number 3 [ 509.738894][ T5846] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 509.876575][ T981] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.269047][ T5846] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 510.293595][ T31] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 510.534391][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.579546][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 510.610538][ T31] usb 7-1: config 0 has no interfaces? [ 510.883016][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.310603][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.342538][ T981] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.395219][ T31] usb 7-1: language id specifier not provided by device, defaulting to English [ 511.475164][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.475194][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.600799][ T31] usb 7-1: config 0 descriptor?? [ 511.639627][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.721943][ T7851] fuse: Bad value for 'fd' [ 511.743097][ T9] Process accounting resumed [ 511.852881][ T9] usb 7-1: USB disconnect, device number 3 [ 511.903605][ T7851] Process accounting resumed [ 512.240280][ T7741] chnl_net:caif_netlink_parms(): no params data found [ 512.378536][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 513.642399][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.675026][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.679020][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 513.923313][ T5846] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 514.331900][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.576179][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.595136][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 514.596466][ T10] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 514.596490][ T10] usb 3-1: config 5 has no interface number 0 [ 514.596539][ T10] usb 3-1: config 5 interface 52 has no altsetting 0 [ 515.693417][ T10] usb 3-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=97.1d [ 515.693448][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.693474][ T10] usb 3-1: Product: syz [ 515.914727][ T10] usb 3-1: can't set config #5, error -71 [ 515.926132][ T10] usb 3-1: USB disconnect, device number 6 [ 516.031491][ T6034] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 516.095850][ T5846] Bluetooth: hci3: unexpected event for opcode 0x042c [ 516.191471][ T6034] usb 7-1: Using ep0 maxpacket: 32 [ 516.192370][ T6034] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 516.215232][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.219539][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.252130][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.252524][ T981] bridge_slave_1: left allmulticast mode [ 516.252554][ T981] bridge_slave_1: left promiscuous mode [ 516.252816][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.254971][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.256435][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.257808][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.259277][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.260714][ T6034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.271516][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 516.336686][ T6034] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 516.336723][ T6034] usb 7-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 516.336747][ T6034] usb 7-1: Product: syz [ 516.363168][ T6034] usb 7-1: config 0 descriptor?? [ 516.397148][ T6034] hub 7-1:0.0: Invalid hub with more than one config or interface [ 516.397194][ T6034] hub 7-1:0.0: probe with driver hub failed with error -22 [ 516.431482][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.435368][ T10] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 516.435399][ T10] usb 3-1: config 0 has no interface number 0 [ 516.435431][ T10] usb 3-1: config 0 interface 238 has no altsetting 0 [ 516.452001][ T10] usb 3-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 516.452037][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.452062][ T10] usb 3-1: Product: syz [ 516.452079][ T10] usb 3-1: Manufacturer: syz [ 516.452106][ T10] usb 3-1: SerialNumber: syz [ 516.509877][ T10] usb 3-1: config 0 descriptor?? [ 516.525509][ T981] bridge_slave_0: left allmulticast mode [ 516.525542][ T981] bridge_slave_0: left promiscuous mode [ 516.527884][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.744704][ T5924] usb 7-1: USB disconnect, device number 4 [ 516.866564][ T10] gspca_main: spca501-2.14.0 probing 1776:501c [ 516.868813][ T10] gspca_spca501: reg write: error -71 [ 516.868828][ T10] spca501 3-1:0.238: Reg write failed for 0x02,0x07,0x05 [ 516.868920][ T10] spca501 3-1:0.238: probe with driver spca501 failed with error -22 [ 516.880349][ T10] usb 3-1: USB disconnect, device number 7 [ 520.755159][ T5846] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 520.917822][ T5846] Bluetooth: hci3: unexpected cc 0x203c length: 9 > 1 [ 520.917873][ T5846] Bluetooth: hci3: unexpected event for opcode 0x203c [ 525.172093][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.460605][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.750459][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.127122][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.546601][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.694909][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.164288][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.696146][ T7971] siw: device registration error -23 [ 530.178374][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 531.158487][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.300639][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.535814][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.722971][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.012273][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.953683][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.173609][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.379371][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.692310][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.781151][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.845911][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.291048][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.550209][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.116156][ T981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.155671][ T981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.183146][ T981] bond0 (unregistering): Released all slaves [ 536.478247][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.478413][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.478609][ T7741] bridge_slave_0: entered allmulticast mode [ 536.483368][ T7741] bridge_slave_0: entered promiscuous mode [ 536.594725][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.594866][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.595088][ T7741] bridge_slave_1: entered allmulticast mode [ 536.597280][ T7741] bridge_slave_1: entered promiscuous mode [ 537.063746][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.087149][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.087431][ T7752] bridge_slave_0: entered allmulticast mode [ 537.092198][ T7752] bridge_slave_0: entered promiscuous mode [ 537.223363][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.223543][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.223770][ T7752] bridge_slave_1: entered allmulticast mode [ 537.225878][ T7752] bridge_slave_1: entered promiscuous mode [ 537.263620][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.364973][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.551657][ T981] hsr_slave_0: left promiscuous mode [ 537.572148][ T981] hsr_slave_1: left promiscuous mode [ 537.573169][ T981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.573198][ T981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.627850][ T981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.627884][ T981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.740204][ T981] veth1_macvtap: left promiscuous mode [ 537.740337][ T981] veth0_macvtap: left promiscuous mode [ 537.740644][ T981] veth1_vlan: left promiscuous mode [ 537.740855][ T981] veth0_vlan: left promiscuous mode [ 540.432649][ T981] team0 (unregistering): Port device team_slave_1 removed [ 540.692612][ T981] team0 (unregistering): Port device team_slave_0 removed [ 543.405235][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.617087][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.621065][ T7741] team0: Port device team_slave_0 added [ 543.728137][ T7741] team0: Port device team_slave_1 added [ 543.938099][ T7752] team0: Port device team_slave_0 added [ 544.039188][ T7752] team0: Port device team_slave_1 added [ 544.042897][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.042914][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.042944][ T7741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.155925][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.155942][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.155971][ T7741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.317938][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.317956][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.317983][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.383296][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.383311][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.383334][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.764298][ T7741] hsr_slave_0: entered promiscuous mode [ 544.765647][ T7741] hsr_slave_1: entered promiscuous mode [ 544.766540][ T7741] debugfs: 'hsr0' already exists in 'hsr' [ 544.766565][ T7741] Cannot create hsr debugfs directory [ 544.942698][ T7752] hsr_slave_0: entered promiscuous mode [ 544.944111][ T7752] hsr_slave_1: entered promiscuous mode [ 544.945020][ T7752] debugfs: 'hsr0' already exists in 'hsr' [ 544.945045][ T7752] Cannot create hsr debugfs directory [ 546.230338][ T981] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.600680][ T981] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.166953][ T981] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.437195][ T981] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.583641][ T981] bridge_slave_1: left allmulticast mode [ 548.583728][ T981] bridge_slave_1: left promiscuous mode [ 548.583985][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.702114][ T981] bridge_slave_0: left allmulticast mode [ 548.702148][ T981] bridge_slave_0: left promiscuous mode [ 548.702414][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.782819][ T981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.853875][ T981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.897243][ T981] bond0 (unregistering): Released all slaves [ 551.687224][ T7741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 552.208307][ T7741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 552.300143][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.331219][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.336445][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.338547][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.339458][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.002908][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.008356][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.038543][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.048899][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 553.049819][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.681646][ T981] hsr_slave_0: left promiscuous mode [ 553.731554][ T981] hsr_slave_1: left promiscuous mode [ 553.732601][ T981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.732630][ T981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.792552][ T981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.792584][ T981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.915617][ T981] veth1_macvtap: left promiscuous mode [ 553.915743][ T981] veth0_macvtap: left promiscuous mode [ 553.916049][ T981] veth1_vlan: left promiscuous mode [ 553.916259][ T981] veth0_vlan: left promiscuous mode [ 554.411969][ T5846] Bluetooth: hci4: command tx timeout [ 555.211572][ T5846] Bluetooth: hci6: command tx timeout [ 556.432985][ T981] team0 (unregistering): Port device team_slave_1 removed [ 556.483252][ T5846] Bluetooth: hci4: command tx timeout [ 556.652470][ T981] team0 (unregistering): Port device team_slave_0 removed [ 557.281637][ T5846] Bluetooth: hci6: command tx timeout [ 558.561735][ T5846] Bluetooth: hci4: command tx timeout [ 559.371339][ T5846] Bluetooth: hci6: command tx timeout [ 559.463909][ T8080] lo speed is unknown, defaulting to 1000 [ 559.490597][ T8085] lo speed is unknown, defaulting to 1000 [ 560.313972][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 560.641522][ T5846] Bluetooth: hci4: command tx timeout [ 560.665423][ T8080] chnl_net:caif_netlink_parms(): no params data found [ 561.024790][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.025020][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.025253][ T8085] bridge_slave_0: entered allmulticast mode [ 561.028203][ T8085] bridge_slave_0: entered promiscuous mode [ 561.081255][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.081673][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.081928][ T8085] bridge_slave_1: entered allmulticast mode [ 561.084808][ T8085] bridge_slave_1: entered promiscuous mode [ 561.441437][ T5846] Bluetooth: hci6: command tx timeout [ 561.725493][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.890754][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.891063][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.891234][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.892182][ T8080] bridge_slave_0: entered allmulticast mode [ 561.895447][ T8080] bridge_slave_0: entered promiscuous mode [ 562.093000][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.093150][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.093341][ T8080] bridge_slave_1: entered allmulticast mode [ 562.096582][ T8080] bridge_slave_1: entered promiscuous mode [ 562.394605][ T8085] team0: Port device team_slave_0 added [ 562.524911][ T8085] team0: Port device team_slave_1 added [ 562.543646][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.844494][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.280516][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.280531][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.280552][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.388588][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.388605][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.388634][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.436045][ T8080] team0: Port device team_slave_0 added [ 563.467135][ T8080] team0: Port device team_slave_1 added [ 563.750630][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.750649][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.750679][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.004983][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.005000][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.005030][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.230075][ T8085] hsr_slave_0: entered promiscuous mode [ 564.242048][ T8085] hsr_slave_1: entered promiscuous mode [ 564.779406][ T8080] hsr_slave_0: entered promiscuous mode [ 564.780424][ T8080] hsr_slave_1: entered promiscuous mode [ 564.781135][ T8080] debugfs: 'hsr0' already exists in 'hsr' [ 564.781153][ T8080] Cannot create hsr debugfs directory [ 566.576495][ T981] bridge_slave_1: left allmulticast mode [ 566.576535][ T981] bridge_slave_1: left promiscuous mode [ 566.576814][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.638480][ T981] bridge_slave_0: left allmulticast mode [ 566.638516][ T981] bridge_slave_0: left promiscuous mode [ 566.638831][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.718677][ T981] bridge_slave_1: left allmulticast mode [ 566.718713][ T981] bridge_slave_1: left promiscuous mode [ 566.718974][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.783568][ T981] bridge_slave_0: left allmulticast mode [ 566.783605][ T981] bridge_slave_0: left promiscuous mode [ 566.783897][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.172605][ T981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.272294][ T981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.336984][ T981] bond0 (unregistering): Released all slaves [ 567.612353][ T981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.702281][ T981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.775331][ T981] bond0 (unregistering): Released all slaves [ 568.248689][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.248796][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.301729][ T981] hsr_slave_0: left promiscuous mode [ 568.358498][ T981] hsr_slave_1: left promiscuous mode [ 568.360134][ T981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.394711][ T981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.553274][ T981] hsr_slave_0: left promiscuous mode [ 568.571798][ T981] hsr_slave_1: left promiscuous mode [ 568.572797][ T981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.622444][ T981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.427727][ T981] team0 (unregistering): Port device team_slave_1 removed [ 569.573437][ T981] team0 (unregistering): Port device team_slave_0 removed [ 570.833607][ T981] team0 (unregistering): Port device team_slave_1 removed [ 570.982330][ T981] team0 (unregistering): Port device team_slave_0 removed [ 573.361772][ T8085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.417677][ T8085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.544626][ T8085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 573.598384][ T8085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.811685][ T8080] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 573.884622][ T8080] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 573.938592][ T8080] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 573.985972][ T8080] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 574.339579][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.408512][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.431004][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.431251][ T981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.486856][ T981] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.487627][ T981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.619848][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.747294][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.799124][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.799868][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.866641][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.866873][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.412265][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.740005][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.396207][ T8085] veth0_vlan: entered promiscuous mode [ 576.452393][ T8085] veth1_vlan: entered promiscuous mode [ 576.611964][ T8085] veth0_macvtap: entered promiscuous mode [ 576.626790][ T8085] veth1_macvtap: entered promiscuous mode [ 576.780317][ T8080] veth0_vlan: entered promiscuous mode [ 576.806390][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.829002][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.859271][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.863805][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.879394][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.880683][ T8080] veth1_vlan: entered promiscuous mode [ 576.887107][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.344835][ T8080] veth0_macvtap: entered promiscuous mode [ 577.436698][ T8080] veth1_macvtap: entered promiscuous mode [ 577.455501][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.455522][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.573952][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.583596][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.583619][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.633916][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.664969][ T69] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.665229][ T69] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.665918][ T69] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.669612][ T69] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.368931][ T1717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.368955][ T1717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.182543][ T8279] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8279] [ 583.033631][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.033655][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.641568][ T8294] fuse: Unknown parameter '0x0000000000000004' [ 583.644648][ T6034] Process accounting resumed [ 583.698894][ T8294] Process accounting resumed [ 583.851548][ T5824] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 583.951487][ T6034] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 584.014614][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 584.015391][ T5824] usb 3-1: not running at top speed; connect to a high speed hub [ 584.016998][ T5824] usb 3-1: config 6 has an invalid interface number: 208 but max is 0 [ 584.017024][ T5824] usb 3-1: config 6 has no interface number 0 [ 584.017057][ T5824] usb 3-1: config 6 interface 208 has no altsetting 0 [ 584.060564][ T5824] usb 3-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2 [ 584.060594][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.060615][ T5824] usb 3-1: Product: syz [ 584.060629][ T5824] usb 3-1: Manufacturer: syz [ 584.060644][ T5824] usb 3-1: SerialNumber: syz [ 584.991444][ T6034] usb 7-1: Using ep0 maxpacket: 16 [ 585.054005][ T6034] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 585.054057][ T6034] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.111795][ T6034] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.111826][ T6034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.111845][ T6034] usb 7-1: Product: syz [ 585.111858][ T6034] usb 7-1: Manufacturer: syz [ 585.111872][ T6034] usb 7-1: SerialNumber: syz [ 585.940804][ T6034] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 585.983648][ T5824] qmi_wwan 3-1:6.208: invalid descriptor buffer length [ 586.007863][ T5824] qmi_wwan 3-1:6.208: probe with driver qmi_wwan failed with error -22 [ 586.061925][ T5824] usb 3-1: USB disconnect, device number 8 [ 586.204942][ T6034] usb 7-1: USB disconnect, device number 5 [ 586.309712][ T8312] netlink: 36 bytes leftover after parsing attributes in process `syz.8.289'. [ 586.438501][ T8274] udevd[8274]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.510109][ T8306] 9pnet: Could not find request transport: fd0x0000000000000003 [ 586.869140][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.993379][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.290656][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.227663][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.661877][ T8321] vivid-004: kernel_thread() failed [ 588.815307][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.028076][ T8328] comedi comedi0: pcl724: I/O port conflict (0x3,4) [ 589.850236][ T8332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.307701][ T5846] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 590.660838][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 590.935268][ T8351] evm: overlay not supported [ 591.162779][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.469348][ T8357] 9pnet_virtio: no channels available for device syz [ 597.096548][ T8390] vivid-000: kernel_thread() failed [ 601.533135][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.742861][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.130067][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.531763][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.574457][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.699459][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.469022][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.726509][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.943569][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.934903][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.087618][ T8458] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 606.087643][ T8458] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 616.069736][ T5846] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 623.539132][ T8576] misc userio: The device must be registered before sending interrupts [ 629.296786][ T8629] vlan0: entered promiscuous mode [ 629.709388][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.709470][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.781547][ T8644] warning: `syz.8.459' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 631.166318][ T5932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 631.331369][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 631.341776][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.341807][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.341875][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.341905][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.341952][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 631.342005][ T5932] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 631.342032][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.367587][ T8646] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 631.375047][ T5932] hub 3-1:1.0: bad descriptor, ignoring hub [ 631.375093][ T5932] hub 3-1:1.0: probe with driver hub failed with error -5 [ 631.387014][ T5932] cdc_wdm 3-1:1.0: skipping garbage [ 631.387038][ T5932] cdc_wdm 3-1:1.0: skipping garbage [ 631.480060][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.467'. [ 631.508342][ T5932] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 631.508379][ T5932] cdc_wdm 3-1:1.0: Unknown control protocol [ 635.631823][ T9] usb 3-1: USB disconnect, device number 9 [ 635.729276][ T8681] genirq: Flags mismatch irq 5. 00202000 (at-a2150c) vs. 00202000 (pcl812) [ 636.741547][ T5923] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 636.903655][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.067590][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.242823][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.298930][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.394908][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.555976][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.682457][ T8719] netlink: 56 bytes leftover after parsing attributes in process `syz.2.480'. [ 637.855652][ T5923] usb 6-1: config 1 interface 0 has no altsetting 0 [ 637.918704][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.941096][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 637.941130][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.941152][ T5923] usb 6-1: Product: syz [ 637.941166][ T5923] usb 6-1: Manufacturer: syz [ 637.941181][ T5923] usb 6-1: SerialNumber: syz [ 645.134162][ T5923] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 645.226866][ T5923] usb 6-1: USB disconnect, device number 2 [ 645.254629][ T5923] usblp0: removed [ 648.920159][ T8774] vivid-003: kernel_thread() failed [ 649.571459][ T7952] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 650.759843][ T8787] vivid-004: kernel_thread() failed [ 650.953809][ T7952] usb 3-1: Using ep0 maxpacket: 8 [ 651.224176][ T7952] usb 3-1: device descriptor read/all, error -71 [ 651.585838][ T5846] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 652.333466][ T8797] tty tty3: ldisc open failed (-12), clearing slot 2 [ 666.920282][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 666.933979][ T8882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.521'. [ 667.076572][ T8888] IPv6: Can't replace route, no match found [ 667.242787][ T5846] Bluetooth: hci6: link tx timeout [ 667.244183][ T5846] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 667.462856][ T59] Bluetooth: hci6: link tx timeout [ 667.462878][ T59] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 667.799806][ T8894] Bluetooth: hci6: link tx timeout [ 667.799871][ T8894] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 669.958673][ T8894] Bluetooth: hci6: command 0x0406 tx timeout [ 670.977034][ T5932] IPVS: starting estimator thread 0... [ 672.822108][ T8908] IPVS: using max 7 ests per chain, 16800 per kthread [ 678.653120][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 680.272308][ T8894] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 684.019528][ T8980] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 684.547770][ T8993] netdevsim netdevsim8: Direct firmware load for þ failed with error -2 [ 684.547806][ T8993] netdevsim netdevsim8: Falling back to sysfs fallback for: þ [ 689.258347][ T8894] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 691.131604][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.131686][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.877714][ T9065] tipc: Started in network mode [ 691.877748][ T9065] tipc: Node identity fe1341285f41, cluster identity 4711 [ 691.878908][ T9065] tipc: Enabled bearer , priority 10 [ 692.301073][ T9073] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 693.706502][ T10] tipc: Node number set to 2706522408 [ 694.229154][ T9086] Process accounting resumed [ 699.365997][ T9142] netlink: 'syz.6.595': attribute type 1 has an invalid length. [ 699.366079][ T9142] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.595'. [ 701.281779][ T9151] sp0: Synchronizing with TNC [ 701.290471][ T9155] sp0: Found TNC [ 701.356589][ T9148] [U] è` [ 701.733409][ T7952] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 701.773165][ T7953] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 701.881484][ T7952] usb 7-1: Using ep0 maxpacket: 32 [ 701.884053][ T7952] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.884088][ T7952] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.886422][ T7952] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 701.886451][ T7952] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 701.886474][ T7952] usb 7-1: Product: syz [ 701.886489][ T7952] usb 7-1: Manufacturer: syz [ 701.931606][ T7953] usb 9-1: Using ep0 maxpacket: 8 [ 701.946144][ T7953] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 701.946180][ T7953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.946204][ T7953] usb 9-1: Product: syz [ 701.946221][ T7953] usb 9-1: Manufacturer: syz [ 701.946235][ T7953] usb 9-1: SerialNumber: syz [ 702.002673][ T7952] hub 7-1:4.0: USB hub found [ 702.014840][ T7953] usb 9-1: config 0 descriptor?? [ 702.233933][ T7952] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 702.322135][ T7953] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 702.581346][ T10] usb 7-1: USB disconnect, device number 6 [ 702.698860][ T7953] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 702.703074][ T7953] usb 9-1: USB disconnect, device number 2 [ 708.440295][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 709.021583][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 709.119161][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.119198][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.119223][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 709.119259][ T10] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 709.119283][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.178609][ T10] usb 9-1: config 0 descriptor?? [ 709.787368][ T7953] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 709.848083][ T10] a4tech 0003:09DA:000A.0001: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.8-1/input0 [ 709.873802][ T9247] geneve2: entered promiscuous mode [ 709.873830][ T9247] geneve2: entered allmulticast mode [ 709.876853][ T1417] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 709.877156][ T1417] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 709.877217][ T1417] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 709.877257][ T1417] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 709.944320][ T7953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.944380][ T7953] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 709.944405][ T7953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.946265][ T10] usb 9-1: USB disconnect, device number 3 [ 711.261953][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.624'. [ 711.306872][ T9257] fido_id[9257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 711.364301][ T7953] usb 3-1: config 0 descriptor?? [ 711.488076][ T9265] netlink: 36 bytes leftover after parsing attributes in process `syz.8.625'. [ 712.675522][ T9285] syz.8.629 uses obsolete (PF_INET,SOCK_PACKET) [ 712.850615][ T7953] usbhid 3-1:0.0: can't add hid device: -71 [ 712.850752][ T7953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 712.887771][ T7953] usb 3-1: USB disconnect, device number 12 [ 713.827859][ T38] audit: type=1400 audit(1756726624.356:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9317 comm="syz.6.639" src=1 dest=20000 netif=wpan0 [ 714.533211][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 714.571563][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 714.853497][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 715.133544][ T31] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 715.391565][ T31] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 715.391612][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.391633][ T31] usb 9-1: Product: syz [ 715.391647][ T31] usb 9-1: Manufacturer: syz [ 715.391663][ T31] usb 9-1: SerialNumber: syz [ 715.512250][ T31] usb 9-1: config 0 descriptor?? [ 715.797763][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 715.797850][ T31] usb 9-1: setting power ON [ 715.975184][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 716.406687][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.452657][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 716.452766][ T31] usb 9-1: media controller created [ 716.737571][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.973059][ T31] usb 9-1: selecting invalid altsetting 6 [ 717.973084][ T31] usb 9-1: digital interface selection failed (-22) [ 717.973102][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 718.008471][ T31] usb 9-1: setting power OFF [ 718.008804][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 718.024949][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 718.024970][ T31] (NULL device *): no alternate interface [ 719.194911][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 719.318684][ T31] usb 9-1: USB disconnect, device number 4 [ 720.326080][ T10] usb 7-1: device not accepting address 7, error -71 [ 721.011447][ C0] sched: DL replenish lagged too much [ 727.851460][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 728.041706][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 728.047238][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.047274][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.047297][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 728.047344][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 728.047368][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.317405][ T5923] usb 6-1: config 0 descriptor?? [ 729.031380][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 729.031517][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 729.066844][ T9392] xt_l2tp: unknown flags: 51 [ 729.098060][ T5923] usb 6-1: USB disconnect, device number 3 [ 729.161633][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 729.406134][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.406184][ T10] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 729.406209][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.468465][ T8439] udevd[8439]: setting mode of /dev/bus/usb/006/003 to 020664 failed: No such file or directory [ 729.468678][ T8439] udevd[8439]: setting owner of /dev/bus/usb/006/003 to uid=0, gid=0 failed: No such file or directory [ 729.495635][ T10] usb 9-1: config 0 descriptor?? [ 731.078238][ T10] zydacron 0003:13EC:0006.0002: item fetching failed at offset 4/5 [ 731.080021][ T10] zydacron 0003:13EC:0006.0002: parse failed [ 731.080137][ T10] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 731.174528][ T10] usb 9-1: USB disconnect, device number 5 [ 731.471525][ T8285] IPVS: starting estimator thread 0... [ 731.571763][ T9397] IPVS: using max 6 ests per chain, 14400 per kthread [ 736.363122][ T8892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.388988][ T8892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 736.416970][ T8892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.418980][ T8892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.419902][ T8892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.481825][ T8892] Bluetooth: hci0: command tx timeout [ 740.581541][ T8892] Bluetooth: hci0: command tx timeout [ 742.641588][ T8892] Bluetooth: hci0: command tx timeout [ 744.721378][ T8892] Bluetooth: hci0: command tx timeout [ 746.005846][ T9381] geneve0: entered allmulticast mode [ 754.247997][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.248084][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.174435][ T8894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 767.194475][ T8894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 767.196047][ T8894] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 767.197517][ T8894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 767.198557][ T8894] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 768.349175][ T8892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.368911][ T8892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.370479][ T8892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.371988][ T8892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.387952][ T8892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 769.598785][ T9430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 769.614758][ T9430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 769.616718][ T9430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 769.618151][ T9430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 769.665794][ T9430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.083717][ T9433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 771.111920][ T9433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 771.148662][ T9433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 771.164326][ T9433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 771.165165][ T9433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 783.528862][ T8894] Bluetooth: hci3: command tx timeout [ 783.529460][ T8894] Bluetooth: hci5: command tx timeout [ 783.529726][ T8894] Bluetooth: hci1: command tx timeout [ 784.165244][ T8894] Bluetooth: hci2: command tx timeout [ 785.611705][ T8892] Bluetooth: hci1: command tx timeout [ 785.611751][ T8892] Bluetooth: hci5: command tx timeout [ 785.616983][ T8894] Bluetooth: hci3: command tx timeout [ 786.241453][ T8894] Bluetooth: hci2: command tx timeout [ 787.681504][ T9433] Bluetooth: hci5: command tx timeout [ 787.681541][ T9433] Bluetooth: hci1: command tx timeout [ 787.687309][ T8894] Bluetooth: hci3: command tx timeout [ 788.321383][ T8894] Bluetooth: hci2: command tx timeout [ 789.761545][ T8892] Bluetooth: hci1: command tx timeout [ 789.761584][ T8892] Bluetooth: hci5: command tx timeout [ 789.761659][ T8894] Bluetooth: hci3: command tx timeout [ 790.403405][ T8894] Bluetooth: hci2: command tx timeout [ 796.887147][ T9433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.927678][ T9433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.929496][ T9433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.930786][ T9433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.967560][ T9433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 799.041605][ T9433] Bluetooth: hci4: command tx timeout [ 801.161463][ T9433] Bluetooth: hci4: command tx timeout [ 803.201440][ T9433] Bluetooth: hci4: command tx timeout [ 805.281544][ T9433] Bluetooth: hci4: command tx timeout [ 808.757362][ T8894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.797525][ T8894] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 808.821957][ T8894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 808.830849][ T8894] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 808.834558][ T8894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 809.347242][ T8894] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 809.380617][ T8894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 809.398087][ T8894] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 809.415635][ T8894] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 809.416912][ T8894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 810.961474][ T8894] Bluetooth: hci6: command tx timeout [ 811.521648][ T8894] Bluetooth: hci7: command tx timeout [ 813.041580][ T8894] Bluetooth: hci6: command tx timeout [ 813.601866][ T8894] Bluetooth: hci7: command tx timeout [ 814.010627][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.010748][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.121488][ T8894] Bluetooth: hci6: command tx timeout [ 815.681483][ T8894] Bluetooth: hci7: command tx timeout [ 817.201726][ T8894] Bluetooth: hci6: command tx timeout [ 817.761549][ T8894] Bluetooth: hci7: command tx timeout [ 824.480192][ T9433] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 824.528398][ T9433] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 824.562098][ T9433] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 824.564970][ T9433] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 824.570776][ T9433] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 824.845201][ T8894] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 824.879229][ T8894] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 824.880632][ T8894] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 824.898147][ T8894] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 824.899031][ T8894] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 826.771495][ T9433] Bluetooth: hci8: command tx timeout [ 826.964837][ T9433] Bluetooth: hci9: command tx timeout [ 828.801474][ T9433] Bluetooth: hci8: command tx timeout [ 829.051376][ T9433] Bluetooth: hci9: command tx timeout [ 830.889398][ T9433] Bluetooth: hci8: command tx timeout [ 831.123802][ T9433] Bluetooth: hci9: command tx timeout [ 832.961476][ T9433] Bluetooth: hci8: command tx timeout [ 833.201525][ T9433] Bluetooth: hci9: command tx timeout [ 860.973332][ T8894] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 860.999188][ T8894] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 861.000679][ T8894] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 861.021685][ T8894] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 861.029449][ T8894] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 863.201887][ T8894] Bluetooth: hci10: command tx timeout [ 865.284763][ T8894] Bluetooth: hci10: command tx timeout [ 867.365273][ T8894] Bluetooth: hci10: command tx timeout [ 869.441398][ T8894] Bluetooth: hci10: command tx timeout [ 870.400738][ T9433] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 870.430184][ T9433] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 870.440057][ T9433] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 870.455289][ T9433] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 870.480276][ T9433] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 870.727817][ T8894] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 870.764001][ T8894] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 870.765399][ T8894] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 870.766666][ T8894] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 870.770375][ T8894] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 872.564964][ T8894] Bluetooth: hci11: command tx timeout [ 872.881707][ T8894] Bluetooth: hci12: command tx timeout [ 874.641421][ T8894] Bluetooth: hci11: command tx timeout [ 874.961489][ T8894] Bluetooth: hci12: command tx timeout [ 875.464115][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.464206][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.721439][ T8894] Bluetooth: hci11: command tx timeout [ 877.051320][ T8894] Bluetooth: hci12: command tx timeout [ 878.804569][ T8894] Bluetooth: hci11: command tx timeout [ 879.121379][ T8894] Bluetooth: hci12: command tx timeout [ 886.007908][ T9433] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 886.030645][ T9433] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 886.032365][ T9433] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 886.073440][ T9433] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 886.083150][ T9433] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 886.110207][ T9433] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 886.121107][ T9433] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 886.133651][ T5846] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 886.201764][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 886.260049][ T5846] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 888.241520][ T8892] Bluetooth: hci13: command tx timeout [ 888.321698][ T8892] Bluetooth: hci14: command tx timeout [ 890.331503][ T8892] Bluetooth: hci13: command tx timeout [ 890.404347][ T8892] Bluetooth: hci14: command tx timeout [ 892.401551][ T8892] Bluetooth: hci13: command tx timeout [ 892.481551][ T8892] Bluetooth: hci14: command tx timeout [ 894.481464][ T8892] Bluetooth: hci13: command tx timeout [ 894.561490][ T8892] Bluetooth: hci14: command tx timeout [ 898.010956][ T8892] Bluetooth: hci2: command 0x0406 tx timeout [ 908.241404][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 908.351015][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 908.351063][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 918.998036][ T9430] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 919.026556][ T9430] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 919.028195][ T9430] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 919.029831][ T9430] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 919.030789][ T9430] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 920.268794][ T39] INFO: task kworker/u8:18:6567 blocked for more than 143 seconds. [ 920.268822][ T39] Not tainted syzkaller #0 [ 920.268834][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.268845][ T39] task:kworker/u8:18 state:D stack:20784 pid:6567 tgid:6567 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 920.268907][ T39] Workqueue: events_unbound linkwatch_event [ 920.268964][ T39] Call Trace: [ 920.268971][ T39] [ 920.268987][ T39] __schedule+0x16f3/0x4c20 [ 920.269046][ T39] ? __pfx___schedule+0x10/0x10 [ 920.269095][ T39] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 920.269128][ T39] rt_mutex_schedule+0x77/0xf0 [ 920.269151][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 920.269181][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 920.269226][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 920.269252][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 920.269284][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.269320][ T39] ? linkwatch_event+0xe/0x60 [ 920.269360][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 920.269394][ T39] ? linkwatch_event+0xe/0x60 [ 920.269424][ T39] mutex_lock_nested+0x16a/0x1d0 [ 920.269445][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.269474][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 920.269504][ T39] linkwatch_event+0xe/0x60 [ 920.269535][ T39] process_scheduled_works+0xade/0x17b0 [ 920.269597][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 920.269645][ T39] worker_thread+0x8a0/0xda0 [ 920.269676][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 920.269716][ T39] ? __kthread_parkme+0x7b/0x200 [ 920.269758][ T39] kthread+0x711/0x8a0 [ 920.269794][ T39] ? __pfx_worker_thread+0x10/0x10 [ 920.269822][ T39] ? __pfx_kthread+0x10/0x10 [ 920.269858][ T39] ? __rcu_read_unlock+0x84/0xe0 [ 920.269883][ T39] ? __pfx_kthread+0x10/0x10 [ 920.269917][ T39] ret_from_fork+0x3f9/0x770 [ 920.269949][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 920.269985][ T39] ? __switch_to_asm+0x39/0x70 [ 920.270007][ T39] ? __switch_to_asm+0x33/0x70 [ 920.270026][ [ 920.270026][ T39] ? __pfx_kthread+0x10/0x10 [ 920.270061][ T39] ret_from_fork_asm+0x1a/0x30 [ 920.270101][ T39] [ 920.270142][ T39] INFO: task syz.2.657:9381 blocked for more than 143 seconds. [ 920.270157][ T39] Not tainted syzkaller #0 [ 920.270175][ T39] Blocked by coredump. [ 920.270182][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.270192][ T39] task:syz.2.657 state:D stack:17464 pid:9381 tgid:9379 ppid:5841 task_flags:0x40054c flags:0x00004002 [ 920.270243][ T39] Call Trace: [ 920.270250][ T39] [ 920.270264][ T39] __schedule+0x16f3/0x4c20 [ 920.270321][ T39] ? __pfx___schedule+0x10/0x10 [ 920.270369][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.270402][ T39] rt_mutex_schedule+0x77/0xf0 [ 920.270422][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 920.270446][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 920.270489][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 920.270516][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 920.270540][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.270583][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 920.270622][ T39] ? tun_chr_close+0x41/0x1c0 [ 920.270650][ T39] mutex_lock_nested+0x16a/0x1d0 [ 920.270675][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 920.270705][ T39] tun_chr_close+0x41/0x1c0 [ 920.270736][ T39] __fput+0x45b/0xa80 [ 920.270772][ T39] task_work_run+0x1d4/0x260 [ 920.270798][ T39] ? __pfx_task_work_run+0x10/0x10 [ 920.270822][ T39] ? do_exit+0x6b0/0x2300 [ 920.270841][ T39] ? kmem_cache_free+0x195/0x510 [ 920.270878][ T39] do_exit+0x6b5/0x2300 [ 920.270897][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 920.270933][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.270966][ T39] ? __pfx_do_exit+0x10/0x10 [ 920.270984][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 920.271011][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 920.271045][ T39] do_group_exit+0x21c/0x2d0 [ 920.271073][ T39] get_signal+0x125e/0x1310 [ 920.289578][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 920.289629][ T39] ? __x64_sys_sendmsg+0x236/0x260 [ 920.289672][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 920.289722][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 920.289761][ T39] exit_to_user_mode_loop+0x75/0x110 [ 920.289794][ T39] do_syscall_64+0x2bd/0x3b0 [ 920.289828][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.289859][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.289884][ T39] ? clear_bhb_loop+0x60/0xb0 [ 920.289915][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.289956][ T39] RIP: 0033:0x7fab94fbebe9 [ 920.289979][ T39] RSP: 002b:00007fab93226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.290005][ T39] RAX: 0000000000000020 RBX: 00007fab951f5fa0 RCX: 00007fab94fbebe9 [ 920.290023][ T39] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 920.290040][ T39] RBP: 00007fab95041e19 R08: 0000000000000000 R09: 0000000000000000 [ 920.290054][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.290070][ T39] R13: 00007fab951f6038 R14: 00007fab951f5fa0 R15: 00007ffc4a870b28 [ 920.290109][ T39] [ 920.290125][ T39] INFO: task syz-executor:9423 blocked for more than 143 seconds. [ 920.290143][ T39] Not tainted syzkaller #0 [ 920.290155][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.290174][ T39] task:syz-executor state:D stack:23816 pid:9423 tgid:9423 ppid:1 task_flags:0x400140 flags:0x00004004 [ 920.290242][ T39] Call Trace: [ 920.290251][ T39] [ 920.290265][ T39] __schedule+0x16f3/0x4c20 [ 920.290328][ T39] ? __pfx___schedule+0x10/0x10 [ 920.290382][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.290420][ T39] rt_mutex_schedule+0x77/0xf0 [ 920.290444][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 920.290471][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 920.290530][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 920.290559][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 920.290586][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.290611][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.290657][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.290704][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 920.290742][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.290777][ T39] mutex_lock_nested+0x16a/0x1d0 [ 920.290818][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 920.290892][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.290956][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.290993][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 920.291023][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.291058][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 920.291087][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.291259][ T39] netlink_rcv_skb+0x205/0x470 [ 920.291287][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.291317][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.291347][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.291387][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.291424][ T39] netlink_unicast+0x843/0xa10 [ 920.291458][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 920.291485][ T39] ? netlink_sendmsg+0x642/0xb30 [ 920.291511][ T39] ? skb_put+0x11b/0x210 [ 920.291545][ T39] netlink_sendmsg+0x805/0xb30 [ 920.291586][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.291624][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.291647][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.291676][ T39] __sock_sendmsg+0x219/0x270 [ 920.291705][ T39] __sys_sendto+0x3c7/0x520 [ 920.291739][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 920.291799][ T39] ? exc_page_fault+0x76/0xf0 [ 920.291833][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 920.291866][ T39] __x64_sys_sendto+0xde/0x100 [ 920.291899][ T39] do_syscall_64+0xfa/0x3b0 [ 920.291938][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.291967][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.291989][ T39] ? clear_bhb_loop+0x60/0xb0 [ 920.292017][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.292039][ T39] RIP: 0033:0x7ff4a7230a7c [ 920.292057][ T39] RSP: 002b:00007fff83d73380 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 920.292080][ T39] RAX: ffffffffffffffda RBX: 00007ff4a7f94620 RCX: 00007ff4a7230a7c [ 920.292097][ T39] RDX: 0000000000000028 RSI: 00007ff4a7f94670 RDI: 0000000000000003 [ 920.292111][ T39] RBP: 0000000000000000 R08: 00007fff83d733d4 R09: 000000000000000c [ 920.292126][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 920.292139][ T39] R13: 0000000000000000 R14: 00007ff4a7f94670 R15: 0000000000000000 [ 920.292173][ T39] [ 920.292182][ T39] INFO: task syz-executor:9426 blocked for more than 143 seconds. [ 920.292198][ T39] Not tainted syzkaller #0 [ 920.292209][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.292220][ T39] task:syz-executor state:D stack:26952 pid:9426 tgid:9426 ppid:1 task_flags:0x400140 flags:0x00004004 [ 920.292284][ T39] Call Trace: [ 920.292291][ T39] [ 920.292305][ T39] __schedule+0x16f3/0x4c20 [ 920.292363][ T39] ? __pfx___schedule+0x10/0x10 [ 920.292411][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.292444][ T39] rt_mutex_schedule+0x77/0xf0 [ 920.292466][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 920.292489][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 920.292533][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 920.292560][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 920.292585][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.292607][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.292648][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.292691][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 920.292726][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.292759][ T39] mutex_lock_nested+0x16a/0x1d0 [ 920.292789][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 920.292834][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.292889][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.292934][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 920.292960][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.292992][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 920.293020][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.293066][ T39] netlink_rcv_skb+0x205/0x470 [ 920.293092][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.293122][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.293151][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.293192][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.293229][ T39] netlink_unicast+0x843/0xa10 [ 920.293265][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 920.293291][ T39] ? netlink_sendmsg+0x642/0xb30 [ 920.293317][ T39] ? skb_put+0x11b/0x210 [ 920.293351][ T39] netlink_sendmsg+0x805/0xb30 [ 920.293390][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.293429][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.293450][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.293480][ T39] __sock_sendmsg+0x219/0x270 [ 920.293509][ T39] __sys_sendto+0x3c7/0x520 [ 920.293541][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 920.293600][ T39] ? exc_page_fault+0x76/0xf0 [ 920.293633][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 920.293666][ T39] __x64_sys_sendto+0xde/0x100 [ 920.293700][ T39] do_syscall_64+0xfa/0x3b0 [ 920.293729][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.293758][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.293780][ T39] ? clear_bhb_loop+0x60/0xb0 [ 920.293808][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.293829][ T39] RIP: 0033:0x7f3653030a7c [ 920.293847][ T39] RSP: 002b:00007ffee7614040 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 920.293868][ T39] RAX: ffffffffffffffda RBX: 00007f3653d94620 RCX: 00007f3653030a7c [ 920.293884][ T39] RDX: 0000000000000028 RSI: 00007f3653d94670 RDI: 0000000000000003 [ 920.293898][ T39] RBP: 0000000000000000 R08: 00007ffee7614094 R09: 000000000000000c [ 920.293920][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 920.293934][ T39] R13: 0000000000000000 R14: 00007f3653d94670 R15: 0000000000000000 [ 920.293968][ T39] [ 920.293978][ T39] INFO: task syz-executor:9429 blocked for more than 143 seconds. [ 920.293993][ T39] Not tainted syzkaller #0 [ 920.294004][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.294014][ T39] task:syz-executor state:D stack:26952 pid:9429 tgid:9429 ppid:1 task_flags:0x400140 flags:0x00004004 [ 920.294077][ T39] Call Trace: [ 920.294085][ T39] [ 920.294098][ T39] __schedule+0x16f3/0x4c20 [ 920.294154][ T39] ? __pfx___schedule+0x10/0x10 [ 920.294204][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.294237][ T39] rt_mutex_schedule+0x77/0xf0 [ 920.294258][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 920.294281][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 920.294325][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 920.294352][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 920.294377][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.294398][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.294440][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.294482][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 920.294517][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.294547][ T39] mutex_lock_nested+0x16a/0x1d0 [ 920.294577][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 920.294623][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.294679][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.294712][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 920.294738][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.294770][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 920.294796][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.294843][ T39] netlink_rcv_skb+0x205/0x470 [ 920.294869][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.294898][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.294938][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.294979][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.295016][ T39] netlink_unicast+0x843/0xa10 [ 920.295052][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 920.295079][ T39] ? netlink_sendmsg+0x642/0xb30 [ 920.295104][ T39] ? skb_put+0x11b/0x210 [ 920.295138][ T39] netlink_sendmsg+0x805/0xb30 [ 920.295177][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.295215][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.295237][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.295266][ T39] __sock_sendmsg+0x219/0x270 [ 920.295295][ T39] __sys_sendto+0x3c7/0x520 [ 920.295327][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 920.295387][ T39] ? exc_page_fault+0x76/0xf0 [ 920.295421][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 920.295452][ T39] __x64_sys_sendto+0xde/0x100 [ 920.295487][ T39] do_syscall_64+0xfa/0x3b0 [ 920.295516][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.295544][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.295567][ T39] ? clear_bhb_loop+0x60/0xb0 [ 920.295594][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.295615][ T39] RIP: 0033:0x7f6d63180a7c [ 920.295632][ T39] RSP: 002b:00007fff410dfe60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 920.295655][ T39] RAX: ffffffffffffffda RBX: 00007f6d63ee4620 RCX: 00007f6d63180a7c [ 920.295671][ T39] RDX: 0000000000000028 RSI: 00007f6d63ee4670 RDI: 0000000000000003 [ 920.295686][ T39] RBP: 0000000000000000 R08: 00007fff410dfeb4 R09: 000000000000000c [ 920.295700][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 920.295712][ T39] R13: 0000000000000000 R14: 00007f6d63ee4670 R15: 0000000000000000 [ 920.295746][ T39] [ 920.295756][ T39] INFO: task syz-executor:9432 blocked for more than 143 seconds. [ 920.295771][ T39] Not tainted syzkaller #0 [ 920.295782][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.295792][ T39] task:syz-executor state:D stack:26952 pid:9432 tgid:9432 ppid:1 task_flags:0x400140 flags:0x00004004 [ 920.295854][ T39] Call Trace: [ 920.295861][ T39] [ 920.295874][ T39] __schedule+0x16f3/0x4c20 [ 920.295937][ T39] ? __pfx___schedule+0x10/0x10 [ 920.295986][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.296018][ T39] rt_mutex_schedule+0x77/0xf0 [ 920.296039][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 920.296063][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 920.296106][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 920.296132][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 920.296157][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.296180][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.296222][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.296263][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 920.296299][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 920.296330][ T39] mutex_lock_nested+0x16a/0x1d0 [ 920.296359][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 920.296404][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.296458][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 920.296492][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 920.296518][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.296550][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 920.296577][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.296624][ T39] netlink_rcv_skb+0x205/0x470 [ 920.296649][ T39] ? __lock_acquire+0xab9/0xd20 [ 920.296677][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.296707][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.296748][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.296785][ T39] netlink_unicast+0x843/0xa10 [ 920.296820][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 920.296847][ T39] ? netlink_sendmsg+0x642/0xb30 [ 920.296872][ T39] ? skb_put+0x11b/0x210 [ 920.296906][ T39] netlink_sendmsg+0x805/0xb30 [ 920.296951][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.296993][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.297015][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.297045][ T39] __sock_sendmsg+0x219/0x270 [ 920.297073][ T39] __sys_sendto+0x3c7/0x520 [ 920.297106][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 920.297165][ T39] ? exc_page_fault+0x76/0xf0 [ 920.297200][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 920.297232][ T39] __x64_sys_sendto+0xde/0x100 [ 920.297266][ T39] do_syscall_64+0xfa/0x3b0 [ 920.297295][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.297324][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.297347][ T39] ? clear_bhb_loop+0x60/0xb0 [ 920.297374][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.297396][ T39] RIP: 0033:0x7f9068c20a7c [ 920.297413][ T39] RSP: 002b:00007ffc5e4fb460 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 920.297436][ T39] RAX: ffffffffffffffda RBX: 00007f9069984620 RCX: 00007f9068c20a7c [ 920.297452][ T39] RDX: 0000000000000028 RSI: 00007f9069984670 RDI: 0000000000000003 [ 920.297467][ T39] RBP: 0000000000000000 R08: 00007ffc5e4fb4b4 R09: 000000000000000c [ 920.297481][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 920.297494][ T39] R13: 0000000000000000 R14: 00007f9069984670 R15: 0000000000000000 [ 920.297528][ T39] [ 920.297565][ T39] [ 920.297565][ T39] Showing all locks held in the system: [ 920.297577][ T39] 4 locks held by pr/legacy/17: [ 920.297592][ T39] 2 locks held by rcuc/1/28: [ 920.297605][ T39] 7 locks held by ktimers/1/29: [ 920.297619][ T39] 1 lock held by khungtaskd/39: [ 920.297630][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 920.297702][ T39] 3 locks held by kworker/u8:10/1417: [ 920.297714][ T39] #0: ffff8880301ab138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.297772][ T39] #1: ffffc90005497bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.297831][ T39] #2: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 920.297895][ T39] 4 locks held by kworker/u8:14/4039: [ 920.297915][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.297972][ T39] #1: ffffc9000e297bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.298027][ T39] #2: ffffffff8ecc5400 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 920.298084][ T39] #3: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 920.298138][ T39] 2 locks held by dhcpcd/5503: [ 920.298150][ T39] #0: ffff888037c9c908 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 920.298204][ T39] #1: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 920.298259][ T39] 2 locks held by getty/5605: [ 920.298272][ T39] #0: ffff88823bf720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 920.298331][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 920.298385][ T39] 4 locks held by kworker/u9:3/5846: [ 920.298398][ T39] #0: ffff88805b86a938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.298454][ T39] #1: ffffc90004cf7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.298511][ T39] #2: ffff88805cc00e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 920.298574][ T39] #3: ffff88805cc000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 920.298631][ T39] 3 locks held by kworker/0:3/5851: [ 920.298644][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.298699][ T39] #1: ffffc90004d47bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.298755][ T39] #2: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 920.298820][ T39] 2 locks held by kworker/1:5/5931: [ 920.298834][ T39] 2 locks held by kworker/1:7/6070: [ 920.298847][ T39] 3 locks held by kworker/u8:18/6567: [ 920.298860][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.298924][ T39] #1: ffffc9000475fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.298980][ T39] #2: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 920.299040][ T39] 3 locks held by kworker/u8:20/6853: [ 920.299058][ T39] 1 lock held by syz-executor/8080: [ 920.299070][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 920.299132][ T39] 5 locks held by kworker/u9:1/8892: [ 920.299145][ T39] #0: ffff888035a6b938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.299201][ T39] #1: ffffc90003e8fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.299258][ T39] #2: ffff88804ef68e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 920.299319][ T39] #3: ffff88804ef680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 920.299375][ T39] #4: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 920.299434][ T39] 5 locks held by kworker/u9:2/8894: [ 920.299447][ T39] #0: ffff8880507cc138 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.299509][ T39] #1: ffffc90004f87bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.299566][ T39] #2: ffff8880295a8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 920.299628][ T39] #3: ffff8880295a80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 920.299684][ T39] #4: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 920.299741][ T39] 1 lock held by syz.5.546/8985: [ 920.299754][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 920.299807][ T39] 1 lock held by syz.6.655/9376: [ 920.299819][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 920.299876][ T39] 1 lock held by syz.2.657/9381: [ 920.299886][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 920.299948][ T39] 3 locks held by syz-executor/9401: [ 920.299961][ T39] #0: ffff88803aaf8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 920.300012][ T39] #1: ffff88803aaf80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 920.300067][ T39] #2: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 920.300128][ T39] 1 lock held by syz-executor/9423: [ 920.300141][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.300204][ T39] 1 lock held by syz-executor/9426: [ 920.300216][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.300278][ T39] 1 lock held by syz-executor/9429: [ 920.300290][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.300351][ T39] 4 locks held by kworker/u9:4/9430: [ 920.300363][ T39] #0: ffff88805e38b938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.300425][ T39] #1: ffffc90005067bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.300481][ T39] #2: ffff888072cbc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 920.300533][ T39] #3: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 920.300586][ T39] 1 lock held by syz-executor/9432: [ 920.300598][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.300658][ T39] 6 locks held by kworker/u9:5/9433: [ 920.300671][ T39] #0: ffff8880600ce138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 920.300733][ T39] #1: ffffc90005037bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 920.300790][ T39] #2: ffff88804f2b0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 920.300852][ T39] #3: ffff88804f2b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 920.300914][ T39] #4: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 920.300971][ T39] #5: ffff88804a331358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 920.301035][ T39] 1 lock held by syz-executor/9443: [ 920.301047][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.301110][ T39] 1 lock held by syz-executor/9450: [ 920.551185][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551266][ T39] 1 lock held by syz-executor/9455: [ 920.551279][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551343][ T39] 1 lock held by syz-executor/9459: [ 920.551356][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551419][ T39] 1 lock held by syz-executor/9463: [ 920.551431][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551498][ T39] 1 lock held by syz-executor/9478: [ 920.551511][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551574][ T39] 1 lock held by syz-executor/9485: [ 920.551586][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551649][ T39] 1 lock held by syz-executor/9489: [ 920.551662][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551724][ T39] 1 lock held by syz-executor/9493: [ 920.551736][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551798][ T39] 1 lock held by syz-executor/9494: [ 920.551810][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551873][ T39] 1 lock held by syz-executor/9503: [ 920.551886][ T39] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 920.551958][ T39] [ 920.551963][ T39] ============================================= [ 920.551963][ T39] [ 920.551987][ T39] NMI backtrace for cpu 0 [ 920.552016][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 920.552063][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 920.552087][ T39] Call Trace: [ 920.552102][ T39] [ 920.552118][ T39] dump_stack_lvl+0x189/0x250 [ 920.552170][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.552203][ T39] ? __pfx__printk+0x10/0x10 [ 920.552241][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 920.552270][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 920.552298][ T39] ? __pfx__printk+0x10/0x10 [ 920.552326][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 920.552356][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 920.552385][ T39] watchdog+0xf93/0xfe0 [ 920.552421][ T39] ? watchdog+0x1de/0xfe0 [ 920.552455][ T39] kthread+0x711/0x8a0 [ 920.552492][ T39] ? __pfx_watchdog+0x10/0x10 [ 920.552519][ T39] ? __pfx_kthread+0x10/0x10 [ 920.552557][ T39] ? __pfx_kthread+0x10/0x10 [ 920.552590][ T39] ret_from_fork+0x3f9/0x770 [ 920.552622][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 920.552658][ T39] ? __switch_to_asm+0x39/0x70 [ 920.552678][ T39] ? __switch_to_asm+0x33/0x70 [ 920.552698][ T39] ? __pfx_kthread+0x10/0x10 [ 920.552732][ T39] ret_from_fork_asm+0x1a/0x30 [ 920.552771][ T39] [ 920.552779][ T39] Sending NMI from CPU 0 to CPUs 1: [ 920.552806][ C1] NMI backtrace for cpu 1 [ 920.552822][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 920.552855][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 920.552866][ C1] RIP: 0010:lock_release+0x69/0x3e0 [ 920.552894][ C1] Code: 05 6c 46 81 0d 73 16 e8 a5 03 09 00 84 c0 75 0d f6 05 a0 4f 6b 0d 01 0f 84 ad 02 00 00 83 3d 5d 57 81 0d 00 0f 84 44 02 00 00 <65> 8b 05 c0 1c 5a 10 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 e0 [ 920.552911][ C1] RSP: 0018:ffffc90000a3e4d0 EFLAGS: 00000202 [ 920.552927][ C1] RAX: 0000000000000001 RBX: ffffffff8fa56001 RCX: 052f7b048c3c0a00 [ 920.552942][ C1] RDX: ffffc90000a3e601 RSI: ffffffff8b620e60 RDI: ffffffff8b620e20 [ 920.552956][ C1] RBP: dffffc0000000000 R08: ffffc90000a3ff48 R09: 0000000000000000 [ 920.552969][ C1] R10: ffffc90000a3e658 R11: fffff52000147ccd R12: ffffc90000a3ff58 [ 920.552983][ C1] R13: ffffffff8172b165 R14: ffffffff8d9a8bc0 R15: ffffffff8172b165 [ 920.552997][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 920.553012][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.553025][ C1] CR2: 00007fa43f5e29c3 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 920.553042][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 920.553053][ C1] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 920.553064][ C1] Call Trace: [ 920.553071][ C1] [ 920.553078][ C1] ? deref_stack_reg+0x19f/0x230 [ 920.553107][ C1] ? unwind_next_frame+0xa5/0x2390 [ 920.553133][ C1] unwind_next_frame+0x19a9/0x2390 [ 920.553168][ C1] ? unwind_next_frame+0xa5/0x2390 [ 920.553194][ C1] ? ret_from_fork+0x3f9/0x770 [ 920.553219][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 920.553240][ C1] arch_stack_walk+0x11c/0x150 [ 920.553270][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 920.553290][ C1] stack_trace_save+0x9c/0xe0 [ 920.553309][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 920.553327][ C1] ? do_raw_spin_lock+0x121/0x290 [ 920.553354][ C1] kasan_save_track+0x3e/0x80 [ 920.553374][ C1] ? kasan_save_track+0x3e/0x80 [ 920.553393][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 920.553422][ C1] ? kmem_cache_alloc_noprof+0x143/0x310 [ 920.553447][ C1] ? dst_alloc+0x105/0x170 [ 920.553473][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 920.553502][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 920.553530][ C1] ? ip_route_output_flow+0x2a/0x150 [ 920.553554][ C1] ? ip_route_me_harder+0x6d2/0x1030 [ 920.553571][ C1] ? synproxy_send_tcp+0x359/0x6c0 [ 920.553594][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 920.553618][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 920.553646][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 920.553672][ C1] ? nft_do_chain+0x409/0x1920 [ 920.553698][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 920.553725][ C1] ? nf_hook_slow+0xc5/0x220 [ 920.553747][ C1] ? NF_HOOK+0x206/0x3a0 [ 920.553767][ C1] ? NF_HOOK+0x30c/0x3a0 [ 920.553786][ C1] ? __netif_receive_skb+0x143/0x380 [ 920.553805][ C1] ? process_backlog+0x31e/0x900 [ 920.553824][ C1] ? __napi_poll+0xb6/0x540 [ 920.553841][ C1] ? net_rx_action+0x707/0xe00 [ 920.553860][ C1] ? handle_softirqs+0x22c/0x710 [ 920.553882][ C1] ? run_ktimerd+0xcf/0x190 [ 920.553905][ C1] ? smpboot_thread_fn+0x542/0xa60 [ 920.553927][ C1] ? kthread+0x711/0x8a0 [ 920.553952][ C1] ? ret_from_fork+0x3f9/0x770 [ 920.553990][ C1] ? dst_alloc+0x105/0x170 [ 920.554018][ C1] __kasan_slab_alloc+0x6c/0x80 [ 920.554040][ C1] ? dst_alloc+0x105/0x170 [ 920.554066][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 920.554093][ C1] dst_alloc+0x105/0x170 [ 920.554122][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 920.554162][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 920.554191][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 920.554219][ C1] ? __lock_acquire+0xab9/0xd20 [ 920.554243][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 920.554276][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 920.554298][ C1] ip_route_output_flow+0x2a/0x150 [ 920.554323][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 920.554342][ C1] ip_route_me_harder+0x6d2/0x1030 [ 920.554366][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 920.554401][ C1] synproxy_send_tcp+0x359/0x6c0 [ 920.554429][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 920.554462][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 920.554487][ C1] ? nft_osf_init+0x68/0x240 [ 920.554512][ C1] ? synproxy_pernet+0x45/0x270 [ 920.554543][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 920.554574][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 920.554604][ C1] ? nf_ip_checksum+0x13c/0x510 [ 920.554634][ C1] nft_synproxy_do_eval+0x345/0x570 [ 920.554665][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 920.554694][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 920.554725][ C1] nft_do_chain+0x409/0x1920 [ 920.554761][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 920.554809][ C1] nft_do_chain_inet+0x25d/0x340 [ 920.554837][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 920.554864][ C1] ? __lock_acquire+0xab9/0xd20 [ 920.554893][ C1] ? NF_HOOK+0x9a/0x3a0 [ 920.554916][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 920.554944][ C1] nf_hook_slow+0xc5/0x220 [ 920.554969][ C1] NF_HOOK+0x206/0x3a0 [ 920.554992][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 920.555015][ C1] ? NF_HOOK+0x9a/0x3a0 [ 920.555035][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 920.555060][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 920.555084][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 920.555108][ C1] ? skb_dst+0x4f/0xd0 [ 920.555130][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 920.555160][ C1] NF_HOOK+0x30c/0x3a0 [ 920.555182][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 920.555205][ C1] ? NF_HOOK+0x9a/0x3a0 [ 920.555225][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 920.555248][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 920.555276][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 920.555296][ C1] __netif_receive_skb+0x143/0x380 [ 920.555316][ C1] ? rt_spin_unlock+0x65/0x80 [ 920.555337][ C1] ? process_backlog+0x27b/0x900 [ 920.555357][ C1] process_backlog+0x31e/0x900 [ 920.555385][ C1] __napi_poll+0xb6/0x540 [ 920.555408][ C1] net_rx_action+0x707/0xe00 [ 920.555428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.555462][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 920.555504][ C1] handle_softirqs+0x22c/0x710 [ 920.555532][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 920.555561][ C1] run_ktimerd+0xcf/0x190 [ 920.555586][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 920.555612][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 920.555635][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 920.555658][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 920.555679][ C1] smpboot_thread_fn+0x542/0xa60 [ 920.555702][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 920.555729][ C1] kthread+0x711/0x8a0 [ 920.555758][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 920.555780][ C1] ? __pfx_kthread+0x10/0x10 [ 920.555810][ C1] ? __pfx_kthread+0x10/0x10 [ 920.555836][ C1] ret_from_fork+0x3f9/0x770 [ 920.555861][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 920.555887][ C1] ? __switch_to_asm+0x39/0x70 [ 920.555903][ C1] ? __switch_to_asm+0x33/0x70 [ 920.555920][ C1] ? __pfx_kthread+0x10/0x10 [ 920.555947][ C1] ret_from_fork_asm+0x1a/0x30 [ 920.555973][ C1] [ 920.556810][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 920.556827][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 920.556852][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 920.556864][ T39] Call Trace: [ 920.556872][ T39] [ 920.556882][ T39] dump_stack_lvl+0x99/0x250 [ 920.556921][ T39] ? __asan_memcpy+0x40/0x70 [ 920.556946][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.556979][ T39] ? __pfx__printk+0x10/0x10 [ 920.557022][ T39] vpanic+0x281/0x750 [ 920.557058][ T39] ? __pfx_vpanic+0x10/0x10 [ 920.557088][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 920.557112][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.557153][ T39] panic+0xb9/0xc0 [ 920.557184][ T39] ? __pfx_panic+0x10/0x10 [ 920.557220][ T39] ? irq_work_queue+0xc3/0x140 [ 920.557252][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 920.557279][ T39] watchdog+0xfd2/0xfe0 [ 920.557314][ T39] ? watchdog+0x1de/0xfe0 [ 920.557347][ T39] kthread+0x711/0x8a0 [ 920.557383][ T39] ? __pfx_watchdog+0x10/0x10 [ 920.557411][ T39] ? __pfx_kthread+0x10/0x10 [ 920.557449][ T39] ? __pfx_kthread+0x10/0x10 [ 920.557484][ T39] ret_from_fork+0x3f9/0x770 [ 920.557516][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 920.557552][ T39] ? __switch_to_asm+0x39/0x70 [ 920.557572][ T39] ? __switch_to_asm+0x33/0x70 [ 920.557591][ T39] ? __pfx_kthread+0x10/0x10 [ 920.557626][ T39] ret_from_fork_asm+0x1a/0x30 [ 920.557664][ T39] [ 920.558093][ T39] Kernel Offset: disabled