last executing test programs: 23m43.518032201s ago: executing program 32 (id=1286): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0xffffffffffffffff, 0x5}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000000c0)={0x28}) 22m4.627322161s ago: executing program 3 (id=2039): socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 22m4.396469685s ago: executing program 3 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 22m3.502522995s ago: executing program 3 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mlockall(0x7) 21m48.243572689s ago: executing program 33 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mlockall(0x7) 20m37.722365861s ago: executing program 34 (id=2285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 6m31.532057655s ago: executing program 2 (id=5663): syz_io_uring_setup(0x1f87, &(0x7f0000000400)={0x0, 0x0, 0x13580, 0x80}, 0x0, 0x0) r0 = syz_io_uring_setup(0xf4d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x69f1227ab38ce363}, &(0x7f0000000080)={&(0x7f0000000100)=""/15}) sigaltstack(0x0, &(0x7f0000000200)={0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 6m31.422291931s ago: executing program 2 (id=5664): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m28.184122481s ago: executing program 2 (id=5669): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) flock(r0, 0x2) 6m27.055414063s ago: executing program 2 (id=5675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6m25.745447538s ago: executing program 2 (id=5685): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 6m25.521242952s ago: executing program 2 (id=5686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {0x0}], 0x2) 6m19.615041139s ago: executing program 5 (id=5713): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) 6m17.369494237s ago: executing program 5 (id=5721): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 6m16.617295161s ago: executing program 6 (id=5725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, 0x0, 0x0) 6m15.573413269s ago: executing program 6 (id=5727): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 6m15.479992247s ago: executing program 7 (id=5728): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 6m15.448976932s ago: executing program 6 (id=5729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m15.269788576s ago: executing program 5 (id=5730): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000270000000210119078"], 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 6m15.212088272s ago: executing program 6 (id=5732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 6m14.234233538s ago: executing program 6 (id=5733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x7b9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setpriority(0x2, 0x0, 0xb0) 6m14.222712191s ago: executing program 5 (id=5734): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kexec_load(0x80, 0x0, &(0x7f0000000480), 0x150000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x20000) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) 6m14.175929205s ago: executing program 7 (id=5735): socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 6m13.526500776s ago: executing program 7 (id=5736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) 6m13.476419834s ago: executing program 6 (id=5737): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$kcm(0x21, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0xa8340, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 6m12.469280872s ago: executing program 7 (id=5738): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="9dd0288d8e3ad62cc5d6b9387a3e0c9962db0550212c3c6900a8babca0db1c3a8023f7aab02d46ced8a8b75bdc8e340c8a960eaa029113c31526f0b45d581f89357a424aa7c415faee7198b52dc80e3a9180e839be79e7162e2ceb1e27230de93d33b829c6a16a8a95c95e62c6c50b684542", 0x72}], 0x1, 0x0, 0x0, 0x604c011}], 0x1, 0x20040810) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) 6m12.292495744s ago: executing program 7 (id=5739): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fea000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0xa699, 0x1f410, 0x0, 0x24c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2cbe, 0x366, 0x12, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) 6m12.139015084s ago: executing program 7 (id=5740): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) timer_create(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 6m12.014872406s ago: executing program 5 (id=5741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) ppoll(&(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) 6m10.603937872s ago: executing program 5 (id=5743): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), 0x0}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) 5m52.834055371s ago: executing program 35 (id=5686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {0x0}], 0x2) 5m52.631890654s ago: executing program 36 (id=5743): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), 0x0}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) 5m52.142080651s ago: executing program 37 (id=5740): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) timer_create(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 5m51.823634651s ago: executing program 38 (id=5737): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$kcm(0x21, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0xa8340, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 4m59.69136882s ago: executing program 4 (id=5792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0x20000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) 4m58.640261429s ago: executing program 4 (id=5793): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m58.232040438s ago: executing program 4 (id=5794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) 4m57.703470609s ago: executing program 4 (id=5795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4m56.656824678s ago: executing program 4 (id=5796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x735c, &(0x7f0000000980)) 4m55.177640175s ago: executing program 4 (id=5797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 4m39.772866772s ago: executing program 39 (id=5797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 2m2.021372313s ago: executing program 9 (id=5939): add_key$user(0x0, &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={'blake2s-160-generic\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) 1m57.079225449s ago: executing program 9 (id=5943): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) io_uring_setup(0x2e15, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1m55.861474172s ago: executing program 9 (id=5944): socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1m53.332638092s ago: executing program 9 (id=5948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0xf1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) 1m47.08380282s ago: executing program 9 (id=5950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m45.397015922s ago: executing program 9 (id=5953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m30.007964964s ago: executing program 40 (id=5953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 59.354622779s ago: executing program 0 (id=6002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 59.2365989s ago: executing program 1 (id=6003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x29, 0x7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) tgkill(r0, r0, 0x20000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x74000000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) listen(r4, 0x802) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) 58.307952172s ago: executing program 0 (id=6004): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(0x0, 0xd, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x891d, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4) 9.949560044s ago: executing program 3 (id=5748): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x16, 0x80, 0x5, 0x19, "0076ba7d82000000002700000000f7ff6fd800"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x22a7, 0x3, 0x2, 0x2, 0x9], 0xc000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x10, 0x0, 0x7, 0x0, 0x8, 0x9}, {0xeeee8000, 0x10000, 0x4, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x3, 0xfd, 0x3}, {0x2000, 0xdddd0000, 0xc, 0x5, 0x3, 0xc4, 0x0, 0x0, 0x4e, 0x9, 0x40, 0x3}, {0xffffffff, 0x33331000, 0xe, 0x9, 0x1, 0x0, 0x9, 0x7, 0x8, 0x1, 0x3}, {0x80a0000, 0xeeee8000, 0xb, 0xfc, 0xfd, 0x4, 0x1, 0x0, 0x0, 0x3f, 0x3, 0x1}, {0x100000, 0x0, 0x4, 0x78, 0x2, 0x1, 0xff, 0x80, 0x0, 0xfd, 0x6}, {0x60000, 0x50000, 0x2, 0x4, 0x3, 0x0, 0xe1, 0x20, 0x0, 0x40, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x4, 0x4, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.939666856s ago: executing program 0 (id=6012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 9.931203214s ago: executing program 1 (id=6013): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r6, 0x1c, &(0x7f0000000040)=""/28}) close(r0) 7.997626364s ago: executing program 3 (id=6005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) 7.996559305s ago: executing program 1 (id=6006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0), 0x0, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) setgroups(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) 7.995465691s ago: executing program 0 (id=6015): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r6}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn']) 7.961726389s ago: executing program 8 (id=5744): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 7.032565952s ago: executing program 8 (id=6007): socket$alg(0x26, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) socket(0x2, 0x2, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007400), 0x0, 0x60002120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.107124243s ago: executing program 3 (id=6008): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000000904000001030000000921000001000000000905810300"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f00000000c0)) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfbU\x00\x00\x00\x00\x00\x00\x00\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) close(0xffffffffffffffff) 5.049049985s ago: executing program 1 (id=6009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setrlimit(0x1, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09000000"], 0x54}}, 0x0) 4.705625225s ago: executing program 0 (id=6010): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2005, 0x4, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) mq_open(0x0, 0x40, 0x1b4, 0x0) syz_open_procfs(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.533900483s ago: executing program 0 (id=6011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) 1.531259221s ago: executing program 1 (id=6014): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.492597965s ago: executing program 8 (id=6016): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 0s ago: executing program 1 (id=6017): syz_init_net_socket$ax25(0x3, 0x2, 0xf0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./control\x00', 0x81) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ea) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): syz.5.5380 (pid 21071) Use of int in max_burst socket option deprecated. [ 1220.653653][T21071] Use struct sctp_assoc_value instead [ 1220.893510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.414273][T14176] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1221.594416][T14176] usb 5-1: Using ep0 maxpacket: 8 [ 1221.600340][T14176] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1221.600358][T14176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.600369][T14176] usb 5-1: Product: syz [ 1221.600377][T14176] usb 5-1: Manufacturer: syz [ 1221.600384][T14176] usb 5-1: SerialNumber: syz [ 1221.603927][T14176] usb 5-1: config 0 descriptor?? [ 1221.885633][T14176] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1222.406219][T21093] all: renamed from lo (while UP) [ 1222.894514][T14176] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1222.921733][T14176] usb 5-1: USB disconnect, device number 44 [ 1223.014951][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5391'. [ 1223.185618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.445244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.465996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.833577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.248662][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.325650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.448506][T21140] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1226.486045][T21140] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1226.486065][T21140] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.486102][T21140] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1227.187156][T21154] syzkaller1: entered promiscuous mode [ 1227.187183][T21154] syzkaller1: entered allmulticast mode [ 1227.423615][T21163] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5416'. [ 1228.227592][T21174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1228.413660][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1228.413678][ T37] audit: type=1326 audit(1764147766.365:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.444936][ T37] audit: type=1326 audit(1764147766.395:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.482179][ T37] audit: type=1326 audit(1764147766.435:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.482719][ T37] audit: type=1326 audit(1764147766.435:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.482765][ T37] audit: type=1326 audit(1764147766.435:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.483243][ T37] audit: type=1326 audit(1764147766.435:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.585070][ T37] audit: type=1326 audit(1764147766.435:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.585121][ T37] audit: type=1326 audit(1764147766.545:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.585160][ T37] audit: type=1326 audit(1764147766.545:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1228.585198][ T37] audit: type=1326 audit(1764147766.545:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21181 comm="syz.7.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3ce3f749 code=0x7ffc0000 [ 1229.103882][T21199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5430'. [ 1231.024339][T14176] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1231.194264][T14176] usb 5-1: Using ep0 maxpacket: 8 [ 1231.196604][T14176] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1231.196674][T14176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1231.196699][T14176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1231.196724][T14176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1231.196747][T14176] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.196786][T14176] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1231.196807][T14176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.214313][T15855] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1231.367677][T15855] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1231.367713][T15855] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1231.367753][T15855] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1231.367774][T15855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.441589][T21255] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1231.457216][T15855] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1231.478207][T14176] usb 5-1: usb_control_msg returned -32 [ 1231.478250][T14176] usbtmc 5-1:16.0: can't read capabilities [ 1231.759604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.886466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.088164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.329623][T15855] usb 7-1: USB disconnect, device number 27 [ 1233.815318][T15855] usb 5-1: USB disconnect, device number 45 [ 1237.144328][T15855] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1237.307512][T15855] usb 5-1: Using ep0 maxpacket: 8 [ 1237.322989][T15855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1237.337641][T15855] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1237.337670][T15855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.337690][T15855] usb 5-1: Product: syz [ 1237.337704][T15855] usb 5-1: Manufacturer: syz [ 1237.337719][T15855] usb 5-1: SerialNumber: syz [ 1237.343657][T15855] usb 5-1: config 0 descriptor?? [ 1237.385995][T15855] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1237.782927][T21336] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1238.655128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.916036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.930277][T15855] gspca_zc3xx: reg_w_i err -110 [ 1239.080503][T21359] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1239.480237][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.480342][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.534185][T15855] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1239.534283][T15855] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1239.794356][ T1142] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1239.946150][ T1142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.946181][ T1142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.946204][ T1142] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1239.946216][ T1142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.949570][ T1142] usb 6-1: config 0 descriptor?? [ 1240.368901][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.368926][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.368944][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.368960][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.368976][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.368991][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.369006][ T1142] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1240.371093][ T1142] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1240.501632][T15855] usb 5-1: USB disconnect, device number 46 [ 1240.572507][ T1142] cp2112 0003:10C4:EA90.002E: Part Number: 0x82 Device Version: 0xFE [ 1240.951058][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.058190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.133707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.612661][ T1142] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 1241.634250][ T1142] usb 6-1: USB disconnect, device number 42 [ 1241.911713][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5509'. [ 1241.937280][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5509'. [ 1242.126485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.204536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.286068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.374956][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.681335][T21413] kvm: kvm [21409]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 1243.824516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.062354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.102286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.316960][T14176] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1245.390294][T21459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1245.390536][T21459] block device autoloading is deprecated and will be removed. [ 1245.440495][T21486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1245.464278][T14176] usb 6-1: Using ep0 maxpacket: 8 [ 1245.468951][T14176] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1245.483690][T14176] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1245.483725][T14176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.483745][T14176] usb 6-1: Product: syz [ 1245.483759][T14176] usb 6-1: Manufacturer: syz [ 1245.483774][T14176] usb 6-1: SerialNumber: syz [ 1245.530483][T14176] usb 6-1: config 0 descriptor?? [ 1245.544331][T14176] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1246.054564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.251132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.398208][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.464126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.439098][T14176] gspca_zc3xx: reg_w_i err -71 [ 1248.044292][T14176] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1248.044391][T14176] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1248.048023][T14176] usb 6-1: USB disconnect, device number 43 [ 1248.889562][ T9] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1248.897438][ T9] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1250.064843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.151329][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.198250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.275194][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.352425][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.881944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.513391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.884122][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.985524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1252.018719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1252.116237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1252.200216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1252.525391][T21593] netlink: 'syz.6.5575': attribute type 1 has an invalid length. [ 1252.648521][T21593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1252.659773][T21596] ip6gretap2: entered allmulticast mode [ 1252.679888][T21596] bond1: (slave ip6gretap2): making interface the new active one [ 1252.701653][T21596] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1253.268992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.372553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.962041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.354759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.447341][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.567329][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.231317][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5597'. [ 1255.730752][T21669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.730783][T21669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.769411][T21669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.769441][T21669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.961329][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 1255.961351][ T37] audit: type=1804 audit(1764147793.905:923): pid=21678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.5606" name="/newroot/560/file0" dev="tmpfs" ino=2869 res=1 errno=0 [ 1256.255246][ T37] audit: type=1804 audit(1764147794.215:924): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.5609" name="/newroot/516/file0" dev="tmpfs" ino=2662 res=1 errno=0 [ 1256.258373][T21685] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1256.258391][T21685] ref_ctr increment failed for inode: 0xa66 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801979b980 [ 1256.259141][T21684] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1256.259166][T21684] ref_ctr decrement failed for inode: 0xa66 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801979b980 [ 1256.259290][T21684] uprobe: syz.7.5609:21684 failed to unregister, leaking uprobe [ 1256.698566][T21693] kvm: pic: non byte read [ 1256.698904][T21693] kvm: pic: level sensitive irq not supported [ 1256.698957][T21693] kvm: pic: non byte read [ 1256.699118][T21693] kvm: pic: level sensitive irq not supported [ 1256.699154][T21693] kvm: pic: non byte read [ 1256.699310][T21693] kvm: pic: level sensitive irq not supported [ 1256.699358][T21693] kvm: pic: non byte read [ 1256.699540][T21693] kvm: pic: level sensitive irq not supported [ 1256.699576][T21693] kvm: pic: non byte read [ 1256.699727][T21693] kvm: pic: level sensitive irq not supported [ 1256.699768][T21693] kvm: pic: non byte read [ 1256.699920][T21693] kvm: pic: level sensitive irq not supported [ 1256.699955][T21693] kvm: pic: non byte read [ 1256.700110][T21693] kvm: pic: level sensitive irq not supported [ 1256.700145][T21693] kvm: pic: non byte read [ 1256.700296][T21693] kvm: pic: level sensitive irq not supported [ 1256.700331][T21693] kvm: pic: non byte read [ 1256.700541][T21693] kvm: pic: level sensitive irq not supported [ 1256.700591][T21693] kvm: pic: non byte read [ 1256.700871][T21693] kvm: pic: level sensitive irq not supported [ 1258.927405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.076683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.196389][T21744] syzkaller1: entered promiscuous mode [ 1259.196411][T21744] syzkaller1: entered allmulticast mode [ 1259.377562][T21746] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5632'. [ 1259.387037][T21746] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5632'. [ 1259.606033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.750583][T21755] program syz.4.5636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1259.931756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.348313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.512083][T21766] binder: 21765:21766 ioctl c0306201 200000000640 returned -22 [ 1260.806159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.936038][T21779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.431386][T21799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1262.170105][T21816] binder: 21815:21816 unknown command 0 [ 1262.170128][T21816] binder: 21815:21816 ioctl c0306201 200000000080 returned -22 [ 1262.194573][T21816] binder: 21815:21816 ioctl c0306201 2000000003c0 returned -14 [ 1265.109004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.602625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.614680][ T37] audit: type=1107 audit(1764147803.935:925): pid=21841 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1266.839383][T21856] tipc: Cannot configure node identity twice [ 1268.002951][T21874] tipc: Started in network mode [ 1268.002978][T21874] tipc: Node identity 062aefe2731b, cluster identity 4711 [ 1268.017948][T21874] tipc: Enabled bearer , priority 0 [ 1268.136910][T21873] tipc: Disabling bearer [ 1268.572061][T21897] binder: 21896:21897 ioctl c0306201 200000000080 returned -14 [ 1270.594385][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1270.755582][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1270.784750][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1270.784789][ T9] usb 5-1: config 0 has no interface number 0 [ 1270.787018][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1271.022781][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1271.024447][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.024473][ T9] usb 5-1: Product: syz [ 1271.024488][ T9] usb 5-1: Manufacturer: syz [ 1271.024503][ T9] usb 5-1: SerialNumber: syz [ 1271.629687][ T9] usb 5-1: config 0 descriptor?? [ 1271.640872][ T9] smsc75xx v1.0.0 [ 1272.282204][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1272.282235][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1273.498697][ T37] audit: type=1804 audit(1764147811.425:926): pid=21957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.5709" name="file0" dev="ramfs" ino=88768 res=1 errno=0 [ 1273.542392][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1273.542423][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1273.542444][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1273.542947][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1273.607000][ T9] usb 5-1: USB disconnect, device number 47 [ 1273.943637][T21963] binder: 21962:21963 ioctl 3ba0 0 returned -22 [ 1274.634703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.670919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.945534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1275.249865][T21968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1275.249893][T21968] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1275.251247][T21972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.251399][T21972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1275.463658][T21972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1275.559592][T21968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.559615][T21968] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1275.563648][T21968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1275.563669][T21968] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1275.790320][T21986] overlayfs: failed to resolve './file0/file0:/': -2 [ 1276.560739][T21994] binder: 21992:21994 ioctl 4018620d 0 returned -22 [ 1277.211022][T21991] lec:lec_atm_close: lec0: Shut down! [ 1278.819234][T22032] ieee802154 phy0 wpan0: encryption failed: -22 [ 1280.045590][T14176] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1280.254417][T22044] ubi0: attaching mtd0 [ 1280.258171][T22044] ubi0: scanning is finished [ 1280.374194][T14176] usb 5-1: Using ep0 maxpacket: 32 [ 1280.380845][T14176] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 1280.380873][T14176] usb 5-1: config 0 has no interface number 0 [ 1280.380907][T14176] usb 5-1: config 0 interface 202 has no altsetting 0 [ 1280.385786][T14176] usb 5-1: New USB device found, idVendor=86ba, idProduct=3fa1, bcdDevice=39.61 [ 1280.385814][T14176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.385834][T14176] usb 5-1: Product: syz [ 1280.385848][T14176] usb 5-1: Manufacturer: syz [ 1280.385862][T14176] usb 5-1: SerialNumber: syz [ 1280.402276][T14176] usb 5-1: config 0 descriptor?? [ 1280.407993][T14176] usb-storage 5-1:0.202: USB Mass Storage device detected [ 1280.520945][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1281.131617][T22035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.138049][T22035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.646522][T22044] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1281.767089][T14176] usb 5-1: USB disconnect, device number 48 [ 1282.034120][T15396] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1287.318031][T15396] usb 7-1: unable to read config index 0 descriptor/start: -110 [ 1287.318061][T15396] usb 7-1: can't read configurations, error -110 [ 1287.454199][T15396] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1287.614276][T15396] usb 7-1: device descriptor read/64, error -32 [ 1287.734782][T15396] usb usb7-port1: attempt power cycle [ 1288.104207][T15396] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1288.124464][T15396] usb 7-1: device descriptor read/8, error -32 [ 1288.384200][T15396] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1288.404486][T15396] usb 7-1: device descriptor read/8, error -32 [ 1288.514577][T15396] usb usb7-port1: unable to enumerate USB device [ 1300.929341][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.929386][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.391167][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1302.424340][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1302.428411][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1302.429756][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1302.430247][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1302.648207][T15153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1302.697107][T15153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1302.700225][T15153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1302.775070][T15153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1302.964443][T15153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1303.455256][T17747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1303.495172][T17747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1303.500446][T17747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1303.501151][T17747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1303.502077][T17747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1303.563695][T17747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1303.605574][T17747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1303.611150][T17747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1303.612309][T17747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1303.612789][T17747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1303.719241][T17747] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1303.753486][T17747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1303.763461][T17747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1303.855401][T17747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1303.855906][T17747] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1304.410351][T22065] raw-gadget.0 gadget.6: fail, usb_ep_queue returned -108 [ 1304.994266][T15153] Bluetooth: hci4: command tx timeout [ 1305.579788][T22091] lo speed is unknown, defaulting to 1000 [ 1305.581801][T22097] lo speed is unknown, defaulting to 1000 [ 1305.714311][T15153] Bluetooth: hci1: command tx timeout [ 1305.840167][T22100] lo speed is unknown, defaulting to 1000 [ 1305.954196][T15153] Bluetooth: hci6: command tx timeout [ 1306.034743][T15153] Bluetooth: hci2: command tx timeout [ 1306.054115][T22098] lo speed is unknown, defaulting to 1000 [ 1307.074094][ T5815] Bluetooth: hci4: command tx timeout [ 1307.794166][ T5815] Bluetooth: hci1: command tx timeout [ 1308.034229][ T5815] Bluetooth: hci6: command tx timeout [ 1308.114201][ T5815] Bluetooth: hci2: command tx timeout [ 1308.292317][T22091] chnl_net:caif_netlink_parms(): no params data found [ 1308.300279][T22097] chnl_net:caif_netlink_parms(): no params data found [ 1308.580031][T15455] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.660673][T22100] chnl_net:caif_netlink_parms(): no params data found [ 1308.840404][T22098] chnl_net:caif_netlink_parms(): no params data found [ 1308.979912][T15455] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.164148][ T5815] Bluetooth: hci4: command tx timeout [ 1309.508430][T15455] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.728898][T22091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.729000][T22091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.729205][T22091] bridge_slave_0: entered allmulticast mode [ 1309.732805][T22091] bridge_slave_0: entered promiscuous mode [ 1309.737400][T22097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.737525][T22097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.737718][T22097] bridge_slave_0: entered allmulticast mode [ 1309.741605][T22097] bridge_slave_0: entered promiscuous mode [ 1309.874357][ T5815] Bluetooth: hci1: command tx timeout [ 1310.007209][T15455] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.065632][T22091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.065730][T22091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.065939][T22091] bridge_slave_1: entered allmulticast mode [ 1310.067603][T22091] bridge_slave_1: entered promiscuous mode [ 1310.068460][T22097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.068574][T22097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.068712][T22097] bridge_slave_1: entered allmulticast mode [ 1310.070342][T22097] bridge_slave_1: entered promiscuous mode [ 1310.114716][ T5815] Bluetooth: hci6: command tx timeout [ 1310.204165][ T5815] Bluetooth: hci2: command tx timeout [ 1310.395557][T22100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.395710][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.395937][T22100] bridge_slave_0: entered allmulticast mode [ 1310.401183][T22100] bridge_slave_0: entered promiscuous mode [ 1310.665148][T22100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.665434][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.665711][T22100] bridge_slave_1: entered allmulticast mode [ 1310.667626][T22100] bridge_slave_1: entered promiscuous mode [ 1310.686099][T22091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.699983][T22097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.706156][T22098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.706463][T22098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.706732][T22098] bridge_slave_0: entered allmulticast mode [ 1310.709881][T22098] bridge_slave_0: entered promiscuous mode [ 1310.809759][T22091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.812216][T22097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.812480][T22098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.812573][T22098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.812705][T22098] bridge_slave_1: entered allmulticast mode [ 1310.814862][T22098] bridge_slave_1: entered promiscuous mode [ 1311.112283][T22100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.124414][T15853] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1311.244288][ T5815] Bluetooth: hci4: command tx timeout [ 1311.286684][T15853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1311.286738][T15853] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1311.286762][T15853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.289986][T15853] usb 5-1: config 0 descriptor?? [ 1311.349454][T22100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.425735][T22091] team0: Port device team_slave_0 added [ 1311.594977][T22097] team0: Port device team_slave_0 added [ 1311.606061][T22098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.689585][T22091] team0: Port device team_slave_1 added [ 1311.693193][T22097] team0: Port device team_slave_1 added [ 1311.699857][T22098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.722513][T15853] logitech 0003:046D:CA03.0030: item fetching failed at offset 5/7 [ 1311.723408][T15853] logitech 0003:046D:CA03.0030: parse failed [ 1311.723516][T15853] logitech 0003:046D:CA03.0030: probe with driver logitech failed with error -22 [ 1311.924377][ T5186] usb 5-1: USB disconnect, device number 49 [ 1311.954513][ T5815] Bluetooth: hci1: command tx timeout [ 1312.036977][T22100] team0: Port device team_slave_0 added [ 1312.194257][ T5815] Bluetooth: hci6: command tx timeout [ 1312.256895][T22100] team0: Port device team_slave_1 added [ 1312.257866][T22091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.257875][T22091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.257889][T22091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.273844][T22097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.273862][T22097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.273886][T22097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.278915][ T5815] Bluetooth: hci2: command tx timeout [ 1312.289556][T22098] team0: Port device team_slave_0 added [ 1312.370970][T22091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.370988][T22091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.371014][T22091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.378900][T22097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.378916][T22097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.378943][T22097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.389032][T22098] team0: Port device team_slave_1 added [ 1313.937524][T22100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.937536][T22100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.937551][T22100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.826954][T22100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.826971][T22100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.826997][T22100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.863603][T22098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.863619][T22098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.863645][T22098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.087437][T22098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.087454][T22098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.087469][T22098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.442111][T15455] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.601690][T22091] hsr_slave_0: entered promiscuous mode [ 1315.603718][T22091] hsr_slave_1: entered promiscuous mode [ 1315.616152][T22091] debugfs: 'hsr0' already exists in 'hsr' [ 1315.616180][T22091] Cannot create hsr debugfs directory [ 1315.628296][T22097] hsr_slave_0: entered promiscuous mode [ 1315.629829][T22097] hsr_slave_1: entered promiscuous mode [ 1315.630811][T22097] debugfs: 'hsr0' already exists in 'hsr' [ 1315.630845][T22097] Cannot create hsr debugfs directory [ 1316.851781][T15455] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.667724][T22100] hsr_slave_0: entered promiscuous mode [ 1317.668916][T22100] hsr_slave_1: entered promiscuous mode [ 1317.682941][T22100] debugfs: 'hsr0' already exists in 'hsr' [ 1317.682969][T22100] Cannot create hsr debugfs directory [ 1318.161803][T15455] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.205159][T22098] hsr_slave_0: entered promiscuous mode [ 1318.206642][T22098] hsr_slave_1: entered promiscuous mode [ 1318.207676][T22098] debugfs: 'hsr0' already exists in 'hsr' [ 1318.207709][T22098] Cannot create hsr debugfs directory [ 1318.733001][T15455] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.658852][T22173] Invalid ELF header type: 25773 != 1 [ 1322.113801][T22097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1323.040670][T22097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1323.301692][T15455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.467958][T22097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1323.674396][T22097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1324.600553][T15455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.056868][T15455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.406741][T15455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.632919][T22097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.874871][T22097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.167220][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.167302][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.241150][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.241338][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.101671][T15455] bridge_slave_1: left allmulticast mode [ 1328.101702][T15455] bridge_slave_1: left promiscuous mode [ 1328.101959][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.205446][T15455] bridge_slave_0: left promiscuous mode [ 1328.205664][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.297246][T15455] gretap0: left allmulticast mode [ 1328.297273][T15455] gretap0: left promiscuous mode [ 1328.297507][T15455] bridge0: port 3(gretap0) entered disabled state [ 1328.405128][T15455] bridge_slave_1: left allmulticast mode [ 1328.405149][T15455] bridge_slave_1: left promiscuous mode [ 1328.405391][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.485174][T15455] bridge_slave_0: left allmulticast mode [ 1328.485197][T15455] bridge_slave_0: left promiscuous mode [ 1328.485357][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.563186][T15455] bridge_slave_1: left allmulticast mode [ 1328.563217][T15455] bridge_slave_1: left promiscuous mode [ 1328.563486][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.661141][T15455] bridge_slave_0: left allmulticast mode [ 1328.661171][T15455] bridge_slave_0: left promiscuous mode [ 1328.661406][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.727029][T15455] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1329.354207][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1329.524152][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1329.526033][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1329.526059][ T9] usb 5-1: config 0 has no interface number 0 [ 1329.528380][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1329.528406][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.528426][ T9] usb 5-1: Product: syz [ 1329.528433][ T9] usb 5-1: Manufacturer: syz [ 1329.528441][ T9] usb 5-1: SerialNumber: syz [ 1329.531627][ T9] usb 5-1: config 0 descriptor?? [ 1329.541032][ T9] smsc95xx v2.0.0 [ 1329.639710][T15455] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1329.785004][T15455] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 1329.956491][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1329.956523][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1331.847511][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 1331.847704][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1331.851003][ T9] usb 5-1: USB disconnect, device number 50 [ 1332.705171][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.812959][T22221] trusted_key: encrypted_key: insufficient parameters specified [ 1333.575032][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.624606][T15455] bond0 (unregistering): Released all slaves [ 1335.956269][T15455] bond1 (unregistering): Released all slaves [ 1336.638907][T22265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.345412][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.406950][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.427415][T15455] bond0 (unregistering): Released all slaves [ 1340.894904][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.957213][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.015249][T15455] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1341.047352][T15455] bond0 (unregistering): Released all slaves [ 1341.777239][T15455] tipc: Left network mode [ 1342.392030][T15455] IPVS: stopping backup sync thread 20144 ... [ 1342.496508][T22097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.446959][T22091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1343.597895][T22091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1343.898550][T22091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1344.041475][T22091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1345.897509][T22100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1346.145127][T22100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1349.338711][T22100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1350.719106][T22100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1351.463672][T22097] veth0_vlan: entered promiscuous mode [ 1352.538830][T15455] hsr_slave_0: left promiscuous mode [ 1352.684834][T15455] hsr_slave_1: left promiscuous mode [ 1352.712305][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.712376][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.835863][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.835890][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.054478][T15455] hsr_slave_0: left promiscuous mode [ 1354.133753][T15455] hsr_slave_1: left promiscuous mode [ 1355.214136][T15455] hsr_slave_0: left promiscuous mode [ 1355.254246][T15455] hsr_slave_1: left promiscuous mode [ 1355.255371][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.255397][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.310306][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.310333][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.502401][T15455] veth1_macvtap: left promiscuous mode [ 1355.502470][T15455] veth0_macvtap: left promiscuous mode [ 1355.502658][T15455] veth1_vlan: left promiscuous mode [ 1355.502766][T15455] veth0_vlan: left promiscuous mode [ 1356.061645][T15455] veth1_macvtap: left promiscuous mode [ 1356.061709][T15455] veth0_macvtap: left promiscuous mode [ 1356.061858][T15455] veth1_vlan: left promiscuous mode [ 1356.061966][T15455] veth0_vlan: left promiscuous mode [ 1356.364567][T15455] veth1_macvtap: left promiscuous mode [ 1356.364635][T15455] veth0_macvtap: left promiscuous mode [ 1356.364792][T15455] veth1_vlan: left promiscuous mode [ 1356.364899][T15455] veth0_vlan: left promiscuous mode [ 1358.795346][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5797'. [ 1361.784852][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1362.146527][T15153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1362.165810][T15153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1362.174463][T15153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1362.193035][T15153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1362.193849][T15153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1362.226342][T17747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1362.253658][T17747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1362.256777][T17747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1362.257934][T17747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1362.258675][T17747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1362.400768][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.400841][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.474982][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1362.672978][T15153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1362.701969][T15153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1362.718016][T15153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1362.719340][T15153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1362.720291][T15153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1363.116071][ T5815] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1363.123100][ T5815] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1363.134337][ T5815] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1363.203256][ T5815] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1363.214349][ T5815] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1364.292318][T15153] Bluetooth: hci0: command tx timeout [ 1364.445669][ T5815] Bluetooth: hci5: command tx timeout [ 1364.864219][ T5815] Bluetooth: hci7: command tx timeout [ 1365.354137][ T5815] Bluetooth: hci8: command tx timeout [ 1366.374215][ T5815] Bluetooth: hci0: command tx timeout [ 1366.514128][ T5815] Bluetooth: hci5: command tx timeout [ 1366.924215][ T5815] Bluetooth: hci7: command tx timeout [ 1367.394424][ T5815] Bluetooth: hci8: command tx timeout [ 1368.436705][ T5815] Bluetooth: hci0: command tx timeout [ 1368.594350][ T5815] Bluetooth: hci5: command tx timeout [ 1368.964710][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1368.994347][ T5815] Bluetooth: hci7: command tx timeout [ 1369.294840][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1369.497550][ T5815] Bluetooth: hci8: command tx timeout [ 1370.514252][ T5815] Bluetooth: hci0: command tx timeout [ 1370.674393][ T5815] Bluetooth: hci5: command tx timeout [ 1371.121963][T15153] Bluetooth: hci7: command tx timeout [ 1371.554168][T15153] Bluetooth: hci8: command tx timeout [ 1374.462738][ T5815] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1374.533589][ T5815] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1374.548552][ T5815] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1374.549860][ T5815] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1374.550752][ T5815] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1375.656082][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1375.984766][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1376.621758][ T5815] Bluetooth: hci9: command tx timeout [ 1377.284814][T15455] team0 (unregistering): Port device veth0_to_bridge removed [ 1378.693684][ T5815] Bluetooth: hci9: command tx timeout [ 1380.222655][T22375] lo speed is unknown, defaulting to 1000 [ 1380.384057][T22378] lo speed is unknown, defaulting to 1000 [ 1380.512454][T22381] lo speed is unknown, defaulting to 1000 [ 1380.581562][T22386] lo speed is unknown, defaulting to 1000 [ 1380.703720][T22383] lo speed is unknown, defaulting to 1000 [ 1380.759081][ T5815] Bluetooth: hci9: command tx timeout [ 1382.741437][T22372] syz_tun (unregistering): left promiscuous mode [ 1382.774864][T22372] team0: Port device syz_tun removed [ 1382.834179][ T5815] Bluetooth: hci9: command tx timeout [ 1383.482905][T22375] chnl_net:caif_netlink_parms(): no params data found [ 1383.679030][T22378] chnl_net:caif_netlink_parms(): no params data found [ 1383.952174][T22381] chnl_net:caif_netlink_parms(): no params data found [ 1384.071810][T22386] chnl_net:caif_netlink_parms(): no params data found [ 1384.078793][T22383] chnl_net:caif_netlink_parms(): no params data found [ 1384.665092][T22375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.665274][T22375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.665425][T22375] bridge_slave_0: entered allmulticast mode [ 1384.667023][T22375] bridge_slave_0: entered promiscuous mode [ 1384.897592][T22375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.897730][T22375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.898028][T22375] bridge_slave_1: entered allmulticast mode [ 1384.900224][T22375] bridge_slave_1: entered promiscuous mode [ 1385.131410][T22378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.131809][T22378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.132019][T22378] bridge_slave_0: entered allmulticast mode [ 1385.177292][T22378] bridge_slave_0: entered promiscuous mode [ 1385.366269][T22378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.366442][T22378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.366670][T22378] bridge_slave_1: entered allmulticast mode [ 1385.368754][T22378] bridge_slave_1: entered promiscuous mode [ 1385.599230][T22375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.675094][T22381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.675211][T22381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.675388][T22381] bridge_slave_0: entered allmulticast mode [ 1385.677042][T22381] bridge_slave_0: entered promiscuous mode [ 1385.858943][T22375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.926419][T22381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.926576][T22381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.926804][T22381] bridge_slave_1: entered allmulticast mode [ 1385.928494][T22381] bridge_slave_1: entered promiscuous mode [ 1385.929503][T22386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.929615][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.929753][T22386] bridge_slave_0: entered allmulticast mode [ 1385.931344][T22386] bridge_slave_0: entered promiscuous mode [ 1385.932851][T22383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.932972][T22383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.933163][T22383] bridge_slave_0: entered allmulticast mode [ 1385.936877][T22383] bridge_slave_0: entered promiscuous mode [ 1386.110262][T22378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.186355][T22386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.186476][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.186638][T22386] bridge_slave_1: entered allmulticast mode [ 1386.188270][T22386] bridge_slave_1: entered promiscuous mode [ 1386.189173][T22383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.189287][T22383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.189430][T22383] bridge_slave_1: entered allmulticast mode [ 1386.191023][T22383] bridge_slave_1: entered promiscuous mode [ 1386.398317][T22378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.617798][T22375] team0: Port device team_slave_0 added [ 1386.688137][T22381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.848967][T22375] team0: Port device team_slave_1 added [ 1386.931768][T22381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.935295][T22386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.946967][T22383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.018049][T22378] team0: Port device team_slave_0 added [ 1387.078418][T22386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.080774][T22383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.149443][T22378] team0: Port device team_slave_1 added [ 1387.366817][T22375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.366828][T22375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.366849][T22375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.447670][T22381] team0: Port device team_slave_0 added [ 1387.815544][T22375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.815559][T22375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.815580][T22375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.936827][T22381] team0: Port device team_slave_1 added [ 1387.940020][T22386] team0: Port device team_slave_0 added [ 1387.942212][T22383] team0: Port device team_slave_0 added [ 1387.964828][T22378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.964844][T22378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.964870][T22378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.067435][T22386] team0: Port device team_slave_1 added [ 1388.069317][T22383] team0: Port device team_slave_1 added [ 1388.071929][T22378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.071944][T22378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.071969][T22378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.346530][T22381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.346541][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.346556][T22381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.557009][T22381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.557021][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.557035][T22381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.677119][T22386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.677136][T22386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.677164][T22386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.679839][T22383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.679853][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.679878][T22383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.976841][T22386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.976857][T22386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.976878][T22386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.978292][T22383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.978303][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.978318][T22383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.130413][T22375] hsr_slave_0: entered promiscuous mode [ 1389.131587][T22375] hsr_slave_1: entered promiscuous mode [ 1389.132190][T22375] debugfs: 'hsr0' already exists in 'hsr' [ 1389.132206][T22375] Cannot create hsr debugfs directory [ 1389.390605][T22378] hsr_slave_0: entered promiscuous mode [ 1389.391535][T22378] hsr_slave_1: entered promiscuous mode [ 1389.392293][T22378] debugfs: 'hsr0' already exists in 'hsr' [ 1389.392320][T22378] Cannot create hsr debugfs directory [ 1390.016769][T22381] hsr_slave_0: entered promiscuous mode [ 1390.017643][T22381] hsr_slave_1: entered promiscuous mode [ 1390.018258][T22381] debugfs: 'hsr0' already exists in 'hsr' [ 1390.018275][T22381] Cannot create hsr debugfs directory [ 1390.371212][T22383] hsr_slave_0: entered promiscuous mode [ 1390.372117][T22383] hsr_slave_1: entered promiscuous mode [ 1390.373528][T22383] debugfs: 'hsr0' already exists in 'hsr' [ 1390.373544][T22383] Cannot create hsr debugfs directory [ 1390.570595][T22386] hsr_slave_0: entered promiscuous mode [ 1390.571564][T22386] hsr_slave_1: entered promiscuous mode [ 1390.572203][T22386] debugfs: 'hsr0' already exists in 'hsr' [ 1390.572220][T22386] Cannot create hsr debugfs directory [ 1395.830949][T15455] bridge_slave_1: left allmulticast mode [ 1395.830978][T15455] bridge_slave_1: left promiscuous mode [ 1395.831240][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.902792][T15455] bridge_slave_0: left allmulticast mode [ 1395.902815][T15455] bridge_slave_0: left promiscuous mode [ 1395.903018][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.966718][T15455] bridge_slave_1: left allmulticast mode [ 1395.966740][T15455] bridge_slave_1: left promiscuous mode [ 1395.966894][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.025257][T15455] bridge_slave_0: left allmulticast mode [ 1396.025277][T15455] bridge_slave_0: left promiscuous mode [ 1396.025437][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.086950][T15455] bridge_slave_1: left allmulticast mode [ 1396.086971][T15455] bridge_slave_1: left promiscuous mode [ 1396.087141][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.155132][T15455] bridge_slave_0: left allmulticast mode [ 1396.155153][T15455] bridge_slave_0: left promiscuous mode [ 1396.155318][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.228543][T15455] bridge_slave_1: left allmulticast mode [ 1396.228566][T15455] bridge_slave_1: left promiscuous mode [ 1396.228719][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.295277][T15455] bridge_slave_0: left allmulticast mode [ 1396.295299][T15455] bridge_slave_0: left promiscuous mode [ 1396.295463][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.555102][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.615885][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.637004][T15455] bond0 (unregistering): Released all slaves [ 1399.015790][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1399.094916][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.176584][T15455] bond0 (unregistering): Released all slaves [ 1399.405039][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1399.485466][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.546522][T15455] bond0 (unregistering): Released all slaves [ 1399.764979][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1399.854824][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.916687][T15455] bond0 (unregistering): Released all slaves [ 1401.218672][T22386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.404535][T15455] hsr_slave_0: left promiscuous mode [ 1401.444257][T15455] hsr_slave_1: left promiscuous mode [ 1401.445367][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.467202][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.624223][T15455] hsr_slave_0: left promiscuous mode [ 1401.644189][T15455] hsr_slave_1: left promiscuous mode [ 1401.644959][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.684932][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.824227][T15455] hsr_slave_0: left promiscuous mode [ 1401.875209][T15455] hsr_slave_1: left promiscuous mode [ 1401.876047][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.924992][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.104258][T15455] hsr_slave_0: left promiscuous mode [ 1402.144292][T15455] hsr_slave_1: left promiscuous mode [ 1402.145072][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.174910][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.293653][T15455] veth0_vlan: left promiscuous mode [ 1404.064846][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1404.374783][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1408.245071][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1408.415330][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1409.924819][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1410.094750][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1411.475934][T15455] team0 (unregistering): Port device team_slave_1 removed [ 1411.654932][T15455] team0 (unregistering): Port device team_slave_0 removed [ 1412.546389][T22386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.892580][T22386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.146358][T22386] netdevsim netdevsim1 v (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.726570][T22375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1413.753757][T22375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1413.787894][T22375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1413.876112][T22375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1414.097666][T22378] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1414.176250][T22378] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1414.220038][T22378] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1414.350297][T22378] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1414.557789][T22381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1414.607747][T22381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1414.686483][T22381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1414.833255][T22381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1414.949607][T22375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.036978][T22383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1415.114815][T22383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1415.190386][T22383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1415.279853][T22383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1415.360240][T22375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.518021][T22250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.521359][T22250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.594193][T22250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.594353][T22250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.645637][T22386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1415.780213][T22386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1415.850574][T22386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1415.902394][T22386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1415.944159][T22378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.166982][T22378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.206002][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.206213][ T9488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.291222][T22381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.293063][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.293163][ T9488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.591384][T22381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.767700][T22383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.769870][T22228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.770048][T22228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.813023][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.813172][ T9488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.957719][T22383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.018900][T22386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.042754][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.042974][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.105373][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.105621][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.112577][T22375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.181996][T22386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.247967][T22250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.248111][T22250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.296521][T22250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.296665][T22250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.380992][T22378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.941080][T22375] veth0_vlan: entered promiscuous mode [ 1417.945499][T22381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.062129][T22375] veth1_vlan: entered promiscuous mode [ 1418.156433][T22383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.223431][T22375] veth0_macvtap: entered promiscuous mode [ 1418.240659][T22386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.242276][T22381] veth0_vlan: entered promiscuous mode [ 1418.272711][T22375] veth1_macvtap: entered promiscuous mode [ 1418.303162][T22381] veth1_vlan: entered promiscuous mode [ 1418.343394][T22375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.377895][T22375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.378099][T22383] veth0_vlan: entered promiscuous mode [ 1418.407149][T22378] veth0_vlan: entered promiscuous mode [ 1418.421104][ T9488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.427125][ T9488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.443680][ T9488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.451372][T22383] veth1_vlan: entered promiscuous mode [ 1418.463011][ T9488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.479756][T22386] veth0_vlan: entered promiscuous mode [ 1418.485514][T22378] veth1_vlan: entered promiscuous mode [ 1418.540664][T22381] veth0_macvtap: entered promiscuous mode [ 1418.613878][T22381] veth1_macvtap: entered promiscuous mode [ 1418.626491][T22386] veth1_vlan: entered promiscuous mode [ 1418.819804][T22381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.839907][T15455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.839929][T15455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.857099][T22383] veth0_macvtap: entered promiscuous mode [ 1418.870756][T22381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.910706][T22383] veth1_macvtap: entered promiscuous mode [ 1418.912255][T22378] veth0_macvtap: entered promiscuous mode [ 1418.931832][ T9488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.931854][ T9488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.937254][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.947937][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.960595][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.961157][T22378] veth1_macvtap: entered promiscuous mode [ 1419.005889][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.018644][T22386] veth0_macvtap: entered promiscuous mode [ 1419.122770][T22386] veth1_macvtap: entered promiscuous mode [ 1419.133128][T22383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.235101][T22383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.240456][T22378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.347173][T22378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.876008][ T9488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.431405][ T9488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.485426][ T9488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.491298][T22386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.511527][ T9488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.559431][ T9488] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.564506][T22250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.564525][T22250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.567683][T22386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.567770][ T9488] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.651728][ T9488] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.674008][ T9488] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.770379][ T9488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.891454][ T9488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.912658][ T9488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.986570][T22498] netlink: 'syz.9.5800': attribute type 39 has an invalid length. [ 1421.028293][ T9488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.031148][T22250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.031165][T22250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.573609][T22225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.573628][T22225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.942678][ T9488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.942698][ T9488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.294547][T22250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.294569][T22250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.041927][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.042002][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.097320][T22250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.097341][T22250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.035351][T15153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1428.088808][T15153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1428.091006][T15153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1428.096861][T15153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1428.115892][T15153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1429.392021][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1429.421578][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1429.423474][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1429.455921][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1429.456567][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1430.274217][T15153] Bluetooth: hci1: command tx timeout [ 1431.396255][T22564] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1431.554426][T15153] Bluetooth: hci2: command tx timeout [ 1433.768258][ T5815] Bluetooth: hci2: command tx timeout [ 1433.768358][T15153] Bluetooth: hci1: command tx timeout [ 1433.985115][ T1166] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.059148][T16478] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1434.330724][T16478] usb 10-1: Using ep0 maxpacket: 16 [ 1434.333157][T16478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1434.356180][T16478] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1434.356199][T16478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.356211][T16478] usb 10-1: Product: syz [ 1434.356219][T16478] usb 10-1: Manufacturer: syz [ 1434.356227][T16478] usb 10-1: SerialNumber: syz [ 1434.437957][T16478] usb 10-1: config 0 descriptor?? [ 1434.478285][T16478] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1434.478321][T16478] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1434.529784][T22542] lo speed is unknown, defaulting to 1000 [ 1434.582227][T22536] lo speed is unknown, defaulting to 1000 [ 1435.018867][ T1166] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.082925][T16478] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1435.926842][T15153] Bluetooth: hci1: command tx timeout [ 1435.927119][T15153] Bluetooth: hci2: command tx timeout [ 1436.244675][T16478] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1436.244709][T16478] em28xx 10-1:0.0: board has no eeprom [ 1437.504174][T16478] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1437.504261][T16478] em28xx 10-1:0.0: dvb set to bulk mode. [ 1437.506484][ T44] em28xx 10-1:0.0: Binding DVB extension [ 1437.525751][T16478] usb 10-1: USB disconnect, device number 2 [ 1437.527034][T16478] em28xx 10-1:0.0: Disconnecting em28xx [ 1437.907836][ T1166] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.085169][ T5815] Bluetooth: hci1: command tx timeout [ 1438.774246][ T5815] Bluetooth: hci2: command tx timeout [ 1438.813154][ T44] em28xx 10-1:0.0: Registering input extension [ 1438.822844][T16478] em28xx 10-1:0.0: Closing input extension [ 1439.127203][T22601] tipc: Started in network mode [ 1439.127234][T22601] tipc: Node identity c290dab6a255, cluster identity 4711 [ 1439.127462][T22601] tipc: Enabled bearer , priority 0 [ 1439.913211][T16478] em28xx 10-1:0.0: Freeing device [ 1439.941457][T22601] tipc: Resetting bearer [ 1441.045365][ T1166] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.581164][T22591] tipc: Disabling bearer [ 1441.946801][T22624] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1442.544383][T15396] tipc: Node number set to 1623579318 [ 1443.074391][T15153] Bluetooth: hci2: command tx timeout [ 1445.331456][ T9] IPVS: starting estimator thread 0... [ 1446.629394][T22649] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 1446.974393][T22646] IPVS: using max 10 ests per chain, 24000 per kthread [ 1448.544535][T22542] chnl_net:caif_netlink_parms(): no params data found [ 1448.563832][T22536] chnl_net:caif_netlink_parms(): no params data found [ 1451.370163][ T1166] bridge_slave_1: left allmulticast mode [ 1451.370195][ T1166] bridge_slave_1: left promiscuous mode [ 1451.370457][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.462265][ T1166] bridge_slave_0: left allmulticast mode [ 1451.462300][ T1166] bridge_slave_0: left promiscuous mode [ 1451.462635][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.982645][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10ef [ 1451.983089][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1ff2 [ 1452.017805][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x60cd [ 1452.019573][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6fa8 [ 1452.021929][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x96cd [ 1452.022852][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa339 [ 1452.023032][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa4f2 [ 1452.033673][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xedc2 [ 1452.035955][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfc4b [ 1452.178785][T22697] kvm: kvm [22696]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3ba8 [ 1457.148051][T22725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5851'. [ 1461.417154][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.486272][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.531474][ T1166] bond0 (unregistering): Released all slaves [ 1461.787329][T22725] vlan2: entered promiscuous mode [ 1461.787345][T22725] macvtap0: entered promiscuous mode [ 1466.551849][T22770] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1468.005976][T22542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.006187][T22542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.006432][T22542] bridge_slave_0: entered allmulticast mode [ 1468.009593][T22542] bridge_slave_0: entered promiscuous mode [ 1468.159429][ T1166] hsr_slave_0: left promiscuous mode [ 1468.200007][ T1166] hsr_slave_1: left promiscuous mode [ 1468.210433][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1468.210452][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.250504][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.250531][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.524545][ T1166] veth1_macvtap: left promiscuous mode [ 1468.524649][ T1166] veth0_macvtap: left promiscuous mode [ 1468.524929][ T1166] veth1_vlan: left promiscuous mode [ 1468.525104][ T1166] veth0_vlan: left promiscuous mode [ 1472.833784][T22811] Bluetooth: MGMT ver 1.23 [ 1472.833825][T22811] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 1473.766983][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1474.194765][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1478.725585][T22536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.725717][T22536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.725987][T22536] bridge_slave_0: entered allmulticast mode [ 1478.729029][T22536] bridge_slave_0: entered promiscuous mode [ 1478.731556][T22542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.731685][T22542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.731875][T22542] bridge_slave_1: entered allmulticast mode [ 1478.744370][T22542] bridge_slave_1: entered promiscuous mode [ 1478.758213][T22788] tipc: Started in network mode [ 1478.758241][T22788] tipc: Node identity 56c4ddd3a3eb, cluster identity 4711 [ 1478.758434][T22788] tipc: Enabled bearer , priority 0 [ 1478.774459][T22789] syzkaller0: entered promiscuous mode [ 1478.774486][T22789] syzkaller0: entered allmulticast mode [ 1478.778036][T22536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.778195][T22536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.778391][T22536] bridge_slave_1: entered allmulticast mode [ 1478.787209][T22536] bridge_slave_1: entered promiscuous mode [ 1480.045502][T22792] tipc: Resetting bearer [ 1481.756748][T22792] tipc: Disabling bearer [ 1483.224048][T15853] tipc: Node number set to 4113554899 [ 1483.354344][ T37] audit: type=1804 audit(1764148021.245:927): pid=22855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.5881" name="bus" dev="ramfs" ino=98544 res=1 errno=0 [ 1483.354399][ T37] audit: type=1804 audit(1764148021.245:928): pid=22855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.5881" name="bus" dev="ramfs" ino=98544 res=1 errno=0 [ 1484.735523][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1484.766005][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1484.767992][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1484.770019][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1484.771548][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1485.256085][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.256159][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.341398][T22866] lo speed is unknown, defaulting to 1000 [ 1485.827924][T22877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1486.801399][T22877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1486.814833][T22877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1486.822695][T22877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1486.823786][T22877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1486.838762][T22877] Bluetooth: hci3: command tx timeout [ 1487.504995][T22883] Bluetooth: hci0: command 0x0406 tx timeout [ 1487.505383][T22883] Bluetooth: hci7: command 0x0406 tx timeout [ 1489.660153][ T5808] Bluetooth: hci3: command tx timeout [ 1492.347103][ T5815] Bluetooth: hci3: command tx timeout [ 1493.575331][ T5815] Bluetooth: hci4: command tx timeout [ 1494.604924][ T5815] Bluetooth: hci3: command tx timeout [ 1495.673825][ T5815] Bluetooth: hci4: command tx timeout [ 1497.261809][T22935] syzkaller0: entered promiscuous mode [ 1497.261839][T22935] syzkaller0: entered allmulticast mode [ 1497.714081][ T5815] Bluetooth: hci4: command tx timeout [ 1497.765069][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5897'. [ 1498.875270][ T5815] Bluetooth: hci9: command 0x0406 tx timeout [ 1499.049698][T22872] lo speed is unknown, defaulting to 1000 [ 1499.966808][T17747] Bluetooth: hci4: command tx timeout [ 1501.614016][ T1142] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1501.765183][ T1142] usb 2-1: Using ep0 maxpacket: 16 [ 1501.767834][ T1142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.767851][ T1142] usb 2-1: config 0 has no interfaces? [ 1501.770771][ T1142] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1501.770787][ T1142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.770798][ T1142] usb 2-1: Product: syz [ 1501.770806][ T1142] usb 2-1: Manufacturer: syz [ 1501.770814][ T1142] usb 2-1: SerialNumber: syz [ 1501.773848][ T1142] usb 2-1: config 0 descriptor?? [ 1502.134846][T22866] chnl_net:caif_netlink_parms(): no params data found [ 1503.512605][ T1142] usb 2-1: USB disconnect, device number 13 [ 1504.711515][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.772891][T23013] binder: 23012:23013 ioctl c0306201 0 returned -14 [ 1518.249126][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.071658][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.290664][T22866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.290840][T22866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.291123][T22866] bridge_slave_0: entered allmulticast mode [ 1522.294346][T22866] bridge_slave_0: entered promiscuous mode [ 1522.588176][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.651709][T22866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.651880][T22866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.652162][T22866] bridge_slave_1: entered allmulticast mode [ 1523.184925][T22866] bridge_slave_1: entered promiscuous mode [ 1523.407319][T22872] chnl_net:caif_netlink_parms(): no params data found [ 1523.560733][T22866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.650770][T22866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.496796][T23102] random: crng reseeded on system resumption [ 1529.071482][T22866] team0: Port device team_slave_0 added [ 1530.185309][T22866] team0: Port device team_slave_1 added [ 1538.234580][T22872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.234715][T22872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.235002][T22872] bridge_slave_0: entered allmulticast mode [ 1538.237777][T22872] bridge_slave_0: entered promiscuous mode [ 1538.941979][T22866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.941997][T22866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.942023][T22866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.250210][T22872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.250362][T22872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.250590][T22872] bridge_slave_1: entered allmulticast mode [ 1539.253353][T22872] bridge_slave_1: entered promiscuous mode [ 1539.272345][T22866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.272362][T22866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.272387][T22866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.883161][ T1166] bridge_slave_1: left allmulticast mode [ 1545.883192][ T1166] bridge_slave_1: left promiscuous mode [ 1545.883446][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.965896][ T1166] bridge_slave_0: left allmulticast mode [ 1545.965926][ T1166] bridge_slave_0: left promiscuous mode [ 1545.966193][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.062786][ T1166] bridge_slave_1: left allmulticast mode [ 1546.062817][ T1166] bridge_slave_1: left promiscuous mode [ 1546.063100][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.135706][ T1166] bridge_slave_0: left allmulticast mode [ 1546.135737][ T1166] bridge_slave_0: left promiscuous mode [ 1546.136004][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.226563][ T1166] bridge_slave_1: left allmulticast mode [ 1546.226583][ T1166] bridge_slave_1: left promiscuous mode [ 1546.226732][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.305770][ T1166] bridge_slave_0: left allmulticast mode [ 1546.305800][ T1166] bridge_slave_0: left promiscuous mode [ 1546.306052][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.593437][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1546.611405][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1546.613118][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1546.616966][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1546.617884][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1546.705316][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.705380][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.674133][T17747] Bluetooth: hci1: command tx timeout [ 1548.757857][ T1166] bond0 (unregistering): Released all slaves [ 1549.033444][ T1166] bond0 (unregistering): Released all slaves [ 1550.505081][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1550.529731][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1550.531449][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1550.864155][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1550.958788][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1551.258160][T17747] Bluetooth: hci1: command tx timeout [ 1553.828126][T17747] Bluetooth: hci2: command tx timeout [ 1553.829018][ T5815] Bluetooth: hci1: command tx timeout [ 1556.191766][ T5815] Bluetooth: hci1: command tx timeout [ 1556.191803][ T5815] Bluetooth: hci2: command tx timeout [ 1558.220166][T17747] Bluetooth: hci2: command tx timeout [ 1559.999781][T23239] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1560.000133][T23239] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1560.002710][T23239] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1560.002941][T23239] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1560.003942][T23239] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1560.004147][T23239] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1560.004169][T23239] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1561.830724][T17747] Bluetooth: hci2: command tx timeout [ 1568.251088][T23267] input: syz0 as /devices/virtual/input/input54 [ 1568.803651][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1568.941676][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1568.974698][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1568.976715][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1568.977546][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1571.524040][T17747] Bluetooth: hci3: command tx timeout [ 1572.015968][T23284] nvme_fabrics: missing parameter 'transport=%s' [ 1572.016028][T23284] nvme_fabrics: missing parameter 'nqn=%s' [ 1573.672688][T17747] Bluetooth: hci3: command tx timeout [ 1575.816112][T17747] Bluetooth: hci3: command tx timeout [ 1577.881907][T17747] Bluetooth: hci3: command tx timeout [ 1578.159247][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.214976][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.248837][ T1166] bond0 (unregistering): Released all slaves [ 1579.010608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.158307][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.854404][T23328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1579.854471][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1579.854655][T23328] netlink: 'syz.1.5984': attribute type 13 has an invalid length. [ 1579.854692][T23328] netlink: 'syz.1.5984': attribute type 12 has an invalid length. [ 1580.254543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.451101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.561140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.713949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.786906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.867889][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.126952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.702623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.803059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.860663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.926381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.031483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.131049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.245677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.373130][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.448963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.553401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.559612][T15396] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1582.714390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.803997][T15396] usb 2-1: Using ep0 maxpacket: 8 [ 1582.806218][T15396] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1582.806244][T15396] usb 2-1: config 0 has no interface number 0 [ 1582.806345][T15396] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1582.806370][T15396] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1582.806396][T15396] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1582.806420][T15396] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1582.806445][T15396] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1582.806457][T15396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.809871][T15396] usb 2-1: config 0 descriptor?? [ 1582.821423][T15396] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1582.966390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.210677][T23173] lo speed is unknown, defaulting to 1000 [ 1585.667911][T23269] lo speed is unknown, defaulting to 1000 [ 1585.671878][ T44] usb 2-1: USB disconnect, device number 14 [ 1585.681527][T23198] lo speed is unknown, defaulting to 1000 [ 1586.571349][T23354] Process accounting resumed [ 1586.726788][ T44] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1586.805757][T23356] tipc: Invalid UDP bearer configuration [ 1586.805806][T23356] tipc: Enabling of bearer rejected, failed to enable media [ 1587.444116][ T1166] hsr_slave_0: left promiscuous mode [ 1587.464678][ T1166] hsr_slave_1: left promiscuous mode [ 1587.465716][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.465741][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.506724][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.506751][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.861133][ T1166] veth1_macvtap: left promiscuous mode [ 1587.861243][ T1166] veth0_macvtap: left promiscuous mode [ 1587.861537][ T1166] veth1_vlan: left promiscuous mode [ 1587.861725][ T1166] veth0_vlan: left promiscuous mode [ 1588.607373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.685093][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.942249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.406524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.570883][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.733855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.797866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.085843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.700445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.716865][ T37] audit: type=1326 audit(1764148128.645:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23379 comm="syz.0.5997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b288f749 code=0x0 [ 1591.343600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.639360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.803735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.007709][T23392] 9pnet_fd: Insufficient options for proto=fd [ 1593.335846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.474510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.646234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.507465][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.636549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.732317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.524772][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1599.854788][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1604.024281][T23173] chnl_net:caif_netlink_parms(): no params data found [ 1604.111882][T23269] chnl_net:caif_netlink_parms(): no params data found [ 1604.297354][T23198] chnl_net:caif_netlink_parms(): no params data found [ 1605.099632][T23173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.099847][T23173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.100071][T23173] bridge_slave_0: entered allmulticast mode [ 1605.102911][T23173] bridge_slave_0: entered promiscuous mode [ 1605.248061][T23173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.248214][T23173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.248775][T23173] bridge_slave_1: entered allmulticast mode [ 1605.251941][T23173] bridge_slave_1: entered promiscuous mode [ 1605.404924][T23269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.405024][T23269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.405169][T23269] bridge_slave_0: entered allmulticast mode [ 1605.406750][T23269] bridge_slave_0: entered promiscuous mode [ 1605.556687][T23269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.556776][T23269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.556944][T23269] bridge_slave_1: entered allmulticast mode [ 1605.558538][T23269] bridge_slave_1: entered promiscuous mode [ 1605.665056][T23198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.665209][T23198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.665422][T23198] bridge_slave_0: entered allmulticast mode [ 1605.667331][T23198] bridge_slave_0: entered promiscuous mode [ 1605.799235][T23173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.803223][T23198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.803357][T23198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.803521][T23198] bridge_slave_1: entered allmulticast mode [ 1605.806641][T23198] bridge_slave_1: entered promiscuous mode [ 1606.009370][T23173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.088360][T23269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.317616][T23269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.469657][T23198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.579925][T23173] team0: Port device team_slave_0 added [ 1606.583006][T23198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.656831][T23173] team0: Port device team_slave_1 added [ 1606.776778][T23269] team0: Port device team_slave_0 added [ 1607.056586][T23269] team0: Port device team_slave_1 added [ 1607.307062][T23198] team0: Port device team_slave_0 added [ 1607.484973][T23198] team0: Port device team_slave_1 added [ 1607.723337][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1607.738439][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1607.751983][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1607.768862][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1607.774738][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1607.981151][T23269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.981168][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.981193][T23269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.052695][T23269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.052712][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.052739][T23269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.122311][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.122384][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.341552][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1608.352735][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1608.356059][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1608.357189][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1608.357900][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1608.740749][T23269] hsr_slave_0: entered promiscuous mode [ 1608.742311][T23269] hsr_slave_1: entered promiscuous mode [ 1608.743447][T23269] debugfs: 'hsr0' already exists in 'hsr' [ 1608.743471][T23269] Cannot create hsr debugfs directory [ 1608.755736][T23443] lo speed is unknown, defaulting to 1000 [ 1608.974982][T23446] lo speed is unknown, defaulting to 1000 [ 1609.794247][T17747] Bluetooth: hci0: command tx timeout [ 1610.061501][ T1166] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.363311][T23269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.434243][T17747] Bluetooth: hci1: command tx timeout [ 1610.629267][ T1166] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.868405][T23269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.096996][ T1166] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.328263][T23269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.380231][T23443] chnl_net:caif_netlink_parms(): no params data found [ 1611.536475][ T1166] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.786523][T23269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.874268][T17747] Bluetooth: hci0: command tx timeout [ 1611.905356][T23446] chnl_net:caif_netlink_parms(): no params data found [ 1612.321162][T23443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.321291][T23443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.321846][T23443] bridge_slave_0: entered allmulticast mode [ 1612.323585][T23443] bridge_slave_0: entered promiscuous mode [ 1612.385065][T23443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.385260][T23443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.385726][T23443] bridge_slave_1: entered allmulticast mode [ 1612.388041][T23443] bridge_slave_1: entered promiscuous mode [ 1612.514152][T17747] Bluetooth: hci1: command tx timeout [ 1612.746684][T23446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.747950][T23446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.748188][T23446] bridge_slave_0: entered allmulticast mode [ 1612.751131][T23446] bridge_slave_0: entered promiscuous mode [ 1612.768225][T23443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.808217][T23446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.808349][T23446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.808538][T23446] bridge_slave_1: entered allmulticast mode [ 1612.811008][T23446] bridge_slave_1: entered promiscuous mode [ 1612.816400][T23443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.181067][T23446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.186892][T23443] team0: Port device team_slave_0 added [ 1613.188422][T23269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1613.231124][T23446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.246306][T23443] team0: Port device team_slave_1 added [ 1613.246972][ T1166] bridge_slave_1: left allmulticast mode [ 1613.246996][ T1166] bridge_slave_1: left promiscuous mode [ 1613.247276][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.315081][ T1166] bridge_slave_0: left allmulticast mode [ 1613.315102][ T1166] bridge_slave_0: left promiscuous mode [ 1613.315297][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.408258][ T1166] bridge_slave_1: left allmulticast mode [ 1613.408280][ T1166] bridge_slave_1: left promiscuous mode [ 1613.408440][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.465241][ T1166] bridge_slave_0: left allmulticast mode [ 1613.465261][ T1166] bridge_slave_0: left promiscuous mode [ 1613.465433][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.536590][ T1166] bridge_slave_1: left allmulticast mode [ 1613.536611][ T1166] bridge_slave_1: left promiscuous mode [ 1613.536764][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.604952][ T1166] bridge_slave_0: left allmulticast mode [ 1613.604975][ T1166] bridge_slave_0: left promiscuous mode [ 1613.605135][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.676804][ T1166] bridge_slave_1: left allmulticast mode [ 1613.676825][ T1166] bridge_slave_1: left promiscuous mode [ 1613.676986][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.746641][ T1166] bridge_slave_0: left allmulticast mode [ 1613.746671][ T1166] bridge_slave_0: left promiscuous mode [ 1613.746906][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.816971][ T1166] bridge_slave_1: left allmulticast mode [ 1613.816994][ T1166] bridge_slave_1: left promiscuous mode [ 1613.817153][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.895555][ T1166] bridge_slave_0: left allmulticast mode [ 1613.895592][ T1166] bridge_slave_0: left promiscuous mode [ 1613.895830][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.954312][T17747] Bluetooth: hci0: command tx timeout [ 1614.334820][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.414895][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.477334][ T1166] bond0 (unregistering): Released all slaves [ 1614.594522][T17747] Bluetooth: hci1: command tx timeout [ 1614.644925][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.724789][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.786509][ T1166] bond0 (unregistering): Released all slaves [ 1614.899016][ T1166] bond0 (unregistering): Released all slaves [ 1615.115102][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.234978][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.296539][ T1166] bond0 (unregistering): Released all slaves [ 1616.084086][T17747] Bluetooth: hci0: command tx timeout [ 1616.674581][T17747] Bluetooth: hci1: command tx timeout [ 1617.664607][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.745553][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.766722][ T1166] bond0 (unregistering): Released all slaves [ 1617.804875][T23269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1618.481359][T23269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1618.825693][T23269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1618.906174][T23446] team0: Port device team_slave_0 added [ 1618.906550][ T1166] tipc: Left network mode [ 1618.907742][T23443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.907755][T23443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.907779][T23443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.911585][T23446] team0: Port device team_slave_1 added [ 1618.912510][T23443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.912519][T23443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.912534][T23443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.616335][T23446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.616354][T23446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.616380][T23446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.620103][T23446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.620115][T23446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.620129][T23446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.161602][T23443] hsr_slave_0: entered promiscuous mode [ 1620.162485][T23443] hsr_slave_1: entered promiscuous mode [ 1620.163100][T23443] debugfs: 'hsr0' already exists in 'hsr' [ 1620.163116][T23443] Cannot create hsr debugfs directory [ 1620.598415][T23446] hsr_slave_0: entered promiscuous mode [ 1620.599333][T23446] hsr_slave_1: entered promiscuous mode [ 1620.599951][T23446] debugfs: 'hsr0' already exists in 'hsr' [ 1620.599967][T23446] Cannot create hsr debugfs directory [ 1620.881113][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.919522][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.074509][ T1166] hsr_slave_0: left promiscuous mode [ 1621.114282][ T1166] hsr_slave_1: left promiscuous mode [ 1621.115349][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1621.115374][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.155651][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1621.155680][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.280710][ T1166] veth1_macvtap: left promiscuous mode [ 1621.280827][ T1166] veth0_macvtap: left promiscuous mode [ 1621.281054][ T1166] veth1_vlan: left promiscuous mode [ 1621.281157][ T1166] veth0_vlan: left promiscuous mode [ 1621.735201][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1621.924627][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1622.579619][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1622.754987][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1623.497275][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1623.754808][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1625.282192][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1625.302972][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1625.353112][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1625.361914][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1625.362660][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1627.215541][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1627.484219][ T5815] Bluetooth: hci2: command tx timeout [ 1627.544722][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1629.595837][ T5815] Bluetooth: hci2: command tx timeout [ 1631.636766][ T5815] Bluetooth: hci2: command tx timeout [ 1631.890569][T23467] lo speed is unknown, defaulting to 1000 [ 1632.867635][T23467] chnl_net:caif_netlink_parms(): no params data found [ 1633.363022][T23467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.363217][T23467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.363426][T23467] bridge_slave_0: entered allmulticast mode [ 1633.366635][T23467] bridge_slave_0: entered promiscuous mode [ 1633.370475][T23467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.370656][T23467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.370843][T23467] bridge_slave_1: entered allmulticast mode [ 1633.373327][T23467] bridge_slave_1: entered promiscuous mode [ 1633.714939][ T5815] Bluetooth: hci2: command tx timeout [ 1633.817801][T23467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.820735][T23467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.210701][T23467] team0: Port device team_slave_0 added [ 1634.213143][T23467] team0: Port device team_slave_1 added [ 1634.575080][T23467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.575091][T23467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.575106][T23467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1634.576769][T23467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1634.576782][T23467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.576796][T23467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.060375][T23467] hsr_slave_0: entered promiscuous mode [ 1635.061444][T23467] hsr_slave_1: entered promiscuous mode [ 1635.062121][T23467] debugfs: 'hsr0' already exists in 'hsr' [ 1635.062137][T23467] Cannot create hsr debugfs directory [ 1635.789366][T23443] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1635.822514][T23443] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1635.888207][T23443] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1636.030159][T23443] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1636.162329][T23446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1636.241583][T23446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1636.632592][T23446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1636.648223][T23446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1637.759805][ T1166] IPVS: stop unused estimator thread 0... [ 1637.792391][T23443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.840515][T23443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.944945][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.945073][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.123678][T15455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.131668][T15455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.136270][T23446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.141926][ T1166] bridge_slave_1: left allmulticast mode [ 1638.141952][ T1166] bridge_slave_1: left promiscuous mode [ 1638.148841][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.245279][ T1166] bridge_slave_0: left allmulticast mode [ 1638.245300][ T1166] bridge_slave_0: left promiscuous mode [ 1638.245464][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.848746][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.964752][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.026371][ T1166] bond0 (unregistering): Released all slaves [ 1639.146719][T23467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1639.222034][T23467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1639.297523][T23467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1639.373531][T23467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1639.400509][T23446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.534197][ T1166] hsr_slave_0: left promiscuous mode [ 1639.574395][ T1166] hsr_slave_1: left promiscuous mode [ 1639.578404][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.595076][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.355036][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1640.565401][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1641.421725][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.421853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.440087][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.440214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.770959][T23467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.823018][T23467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.838186][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.838443][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.922343][T22228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.922490][T22228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.965173][T23443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.156290][T23446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.393370][T23446] veth0_vlan: entered promiscuous mode [ 1642.442060][T23446] veth1_vlan: entered promiscuous mode [ 1642.769458][T23443] veth0_vlan: entered promiscuous mode [ 1642.826689][T23446] veth0_macvtap: entered promiscuous mode [ 1642.843101][T23443] veth1_vlan: entered promiscuous mode [ 1642.851604][T23446] veth1_macvtap: entered promiscuous mode [ 1642.911643][T23467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.913519][T23446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.940964][T23446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.961988][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.968933][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.981678][T23443] veth0_macvtap: entered promiscuous mode [ 1642.983420][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.992841][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.012346][T23443] veth1_macvtap: entered promiscuous mode [ 1643.231015][T23443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.294174][T23443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.302374][T23467] veth0_vlan: entered promiscuous mode [ 1643.355733][T22228] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.358044][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.358064][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.358378][T22228] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.365886][T22228] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.370561][T22228] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.371216][T23467] veth1_vlan: entered promiscuous mode [ 1643.590621][T22228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.590639][T22228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.728311][T23467] veth0_macvtap: entered promiscuous mode [ 1643.730945][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.730962][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.745478][T23467] veth1_macvtap: entered promiscuous mode [ 1643.808536][T15455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.808566][T15455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.862924][T23467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.919643][T23467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.951548][T15455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.285040][T15455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.312791][T15455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.420176][T23521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.974126][T23517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1645.010085][T15455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.847893][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.847914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.103968][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1649.290601][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1649.886254][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.886286][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.886321][ T44] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1649.886343][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.097255][ T44] usb 4-1: config 0 descriptor?? [ 1650.112369][ T44] usbhid 4-1:0.0: can't add hid device: -22 [ 1650.112486][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1651.187719][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.187741][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.013025][T23555] Process accounting resumed [ 1654.467037][T17747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1654.467065][T17747] CPU: 0 UID: 0 PID: 17747 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1654.467091][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1654.467106][T17747] Workqueue: hci0 hci_rx_work [ 1654.467139][T17747] Call Trace: [ 1654.467148][T17747] [ 1654.467159][T17747] dump_stack_lvl+0x189/0x250 [ 1654.467200][T17747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1654.467231][T[ 1654.467231][T17747] ? __pfx__printk+0x10/0x10 [ 1654.467260][T17747] ? __rcu_read_unlock+0x84/0xe0 [ 1654.467325][T17747] ? kernfs_path_from_node+0x2c/0x280 [ 1654.467349][T17747] ? kernfs_path_from_node+0x243/0x280 [ 1654.467370][T17747] ? kernfs_path_from_node+0x2c/0x280 [ 1654.467394][T17747] sysfs_create_dir_ns+0x259/0x280 [ 1654.467418][T17747] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1654.467457][T17747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1654.467484][T17747] ? rt_spin_unlock+0x161/0x200 [ 1654.467510][T17747] kobject_add_internal+0x5a5/0xb50 [ 1654.467544][T17747] kobject_add+0x155/0x220 [ 1654.467571][T17747] ? __pfx_kobject_add+0x10/0x10 [ 1654.467598][T17747] ? get_device_parent+0x370/0x3a0 [ 1654.467633][T17747] device_add+0x408/0xb50 [ 1654.467665][T17747] hci_conn_add_sysfs+0xd5/0x1e0 [ 1654.467692][T17747] le_conn_complete_evt+0xf39/0x1500 [ 1654.467739][T17747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1654.467771][T17747] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1654.467804][T17747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1654.467839][T17747] ? skb_pull_data+0xfb/0x200 [ 1654.467876][T17747] hci_le_conn_complete_evt+0x187/0x450 [ 1654.467918][T17747] hci_event_packet+0x78f/0x1200 [ 1654.467947][T17747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1654.467979][T17747] ? __pfx_hci_event_packet+0x10/0x10 [ 1654.468014][T17747] ? hci_send_to_monitor+0xe2/0x570 [ 1654.468044][T17747] hci_rx_work+0x46a/0xe80 [ 1654.468076][T17747] ? process_scheduled_works+0x9ef/0x17b0 [ 1654.468105][T17747] process_scheduled_works+0xae1/0x17b0 [ 1654.468165][T17747] ? __pfx_process_scheduled_works+0x10/0x10 [ 1654.468212][T17747] worker_thread+0x8a0/0xda0 [ 1654.468242][T17747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1654.468282][T17747] ? __kthread_parkme+0x7b/0x200 [ 1654.468320][T17747] kthread+0x711/0x8a0 [ 1654.468354][T17747] ? __pfx_worker_thread+0x10/0x10 [ 1654.468378][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.468404][T17747] ? rt_spin_unlock+0x150/0x200 [ 1654.468443][T17747] ? rt_spin_unlock+0x161/0x200 [ 1654.468465][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.468496][T17747] ret_from_fork+0x4bc/0x870 [ 1654.468525][T17747] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.468560][T17747] ? __switch_to_asm+0x39/0x70 [ 1654.468581][T17747] ? __switch_to_asm+0x33/0x70 [ 1654.468599][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.468631][T17747] ret_from_fork_asm+0x1a/0x30 [ 1654.468673][T17747] [ 1654.470753][T17747] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1654.470877][T17747] Bluetooth: hci0: failed to register connection device [ 1654.569725][T17747] ================================================================== [ 1654.569743][T17747] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 1654.569784][T17747] Read of size 8 at addr ffff8880212fd500 by task kworker/u9:1/17747 [ 1654.569803][T17747] [ 1654.569815][T17747] CPU: 0 UID: 0 PID: 17747 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1654.569841][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1654.569856][T17747] Workqueue: hci0 hci_rx_work [ 1654.569881][T17747] Call Trace: [ 1654.569889][T17747] [ 1654.569901][T17747] dump_stack_lvl+0x189/0x250 [ 1654.569932][T17747] ? __kasan_check_byte+0x12/0x40 [ 1654.569978][T17747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1654.570008][T17747] ? lock_release+0x4b/0x3e0 [ 1654.570040][T17747] ? __virt_addr_valid+0x4a5/0x5c0 [ 1654.570072][T17747] print_report+0xca/0x240 [ 1654.570099][T17747] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1654.570127][T17747] kasan_report+0x118/0x150 [ 1654.570156][T17747] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1654.570190][T17747] l2cap_connect_cfm+0x6e4/0x1040 [ 1654.570224][T17747] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1654.570255][T17747] ? mutex_lock_nested+0x154/0x1d0 [ 1654.570278][T17747] ? hci_connect_cfm+0x2c/0x140 [ 1654.570304][T17747] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1654.570333][T17747] hci_connect_cfm+0x95/0x140 [ 1654.570360][T17747] le_conn_complete_evt+0xfb8/0x1500 [ 1654.570395][T17747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1654.570423][T17747] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1654.570459][T17747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1654.570491][T17747] ? skb_pull_data+0xfb/0x200 [ 1654.570521][T17747] hci_le_conn_complete_evt+0x187/0x450 [ 1654.570551][T17747] hci_event_packet+0x78f/0x1200 [ 1654.570576][T17747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1654.570603][T17747] ? __pfx_hci_event_packet+0x10/0x10 [ 1654.570629][T17747] ? hci_send_to_monitor+0xe2/0x570 [ 1654.570659][T17747] hci_rx_work+0x46a/0xe80 [ 1654.570683][T17747] ? process_scheduled_works+0x9ef/0x17b0 [ 1654.570707][T17747] process_scheduled_works+0xae1/0x17b0 [ 1654.570747][T17747] ? __pfx_process_scheduled_works+0x10/0x10 [ 1654.570779][T17747] worker_thread+0x8a0/0xda0 [ 1654.570805][T17747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1654.570838][T17747] ? __kthread_parkme+0x7b/0x200 [ 1654.570867][T17747] kthread+0x711/0x8a0 [ 1654.570896][T17747] ? __pfx_worker_thread+0x10/0x10 [ 1654.570919][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.570944][T17747] ? rt_spin_unlock+0x150/0x200 [ 1654.570970][T17747] ? rt_spin_unlock+0x161/0x200 [ 1654.570991][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.571019][T17747] ret_from_fork+0x4bc/0x870 [ 1654.571043][T17747] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.571070][T17747] ? __switch_to_asm+0x39/0x70 [ 1654.571089][T17747] ? __switch_to_asm+0x33/0x70 [ 1654.571107][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.571135][T17747] ret_from_fork_asm+0x1a/0x30 [ 1654.571163][T17747] [ 1654.571171][T17747] [ 1654.571182][T17747] Allocated by task 17747: [ 1654.571192][T17747] kasan_save_track+0x3e/0x80 [ 1654.571215][T17747] __kasan_kmalloc+0x93/0xb0 [ 1654.571239][T17747] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 1654.571262][T17747] l2cap_chan_create+0x50/0x780 [ 1654.571279][T17747] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 1654.571352][T17747] l2cap_connect_cfm+0x37a/0x1040 [ 1654.571379][T17747] hci_connect_cfm+0x95/0x140 [ 1654.571402][T17747] le_conn_complete_evt+0xfb8/0x1500 [ 1654.571433][T17747] hci_le_conn_complete_evt+0x187/0x450 [ 1654.571457][T17747] hci_event_packet+0x78f/0x1200 [ 1654.571476][T17747] hci_rx_work+0x46a/0xe80 [ 1654.571495][T17747] process_scheduled_works+0xae1/0x17b0 [ 1654.571517][T17747] worker_thread+0x8a0/0xda0 [ 1654.571538][T17747] kthread+0x711/0x8a0 [ 1654.571562][T17747] ret_from_fork+0x4bc/0x870 [ 1654.571581][T17747] ret_from_fork_asm+0x1a/0x30 [ 1654.571600][T17747] [ 1654.571605][T17747] Freed by task 23570: [ 1654.571615][T17747] kasan_save_track+0x3e/0x80 [ 1654.571636][T17747] __kasan_save_free_info+0x46/0x50 [ 1654.571654][T17747] __kasan_slab_free+0x5c/0x80 [ 1654.571676][T17747] kfree+0x197/0x950 [ 1654.571695][T17747] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 1654.571712][T17747] l2cap_sock_release+0x6a/0x230 [ 1654.571738][T17747] sock_close+0xc3/0x240 [ 1654.571822][T17747] __fput+0x45b/0xa80 [ 1654.571839][T17747] task_work_run+0x1d4/0x260 [ 1654.571855][T17747] get_signal+0x11c4/0x1310 [ 1654.571874][T17747] arch_do_signal_or_restart+0xa0/0x790 [ 1654.571893][T17747] exit_to_user_mode_loop+0x72/0x130 [ 1654.571916][T17747] do_syscall_64+0x2bd/0xfa0 [ 1654.571942][T17747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.572004][T17747] [ 1654.572009][T17747] The buggy address belongs to the object at ffff8880212fd000 [ 1654.572009][T17747] which belongs to the cache kmalloc-2k of size 2048 [ 1654.572028][T17747] The buggy address is located 1280 bytes inside of [ 1654.572028][T17747] freed 2048-byte region [ffff8880212fd000, ffff8880212fd800) [ 1654.572050][T17747] [ 1654.572056][T17747] The buggy address belongs to the physical page: [ 1654.572071][T17747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x212f8 [ 1654.572090][T17747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1654.572107][T17747] flags: 0x80000000000040(head|node=0|zone=1) [ 1654.572124][T17747] page_type: f5(slab) [ 1654.572143][T17747] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1654.572161][T17747] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1654.572179][T17747] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1654.572196][T17747] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1654.572214][T17747] head: 0080000000000003 ffffea000084be01 00000000ffffffff 00000000ffffffff [ 1654.572251][T17747] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1654.572263][T17747] page dumped because: kasan: bad access detected [ 1654.572278][T17747] page_owner tracks the page as allocated [ 1654.572286][T17747] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3777003234, free_ts 0 [ 1654.572321][T17747] post_alloc_hook+0x234/0x290 [ 1654.572346][T17747] get_page_from_freelist+0x28c0/0x2960 [ 1654.572373][T17747] __alloc_frozen_pages_noprof+0x181/0x370 [ 1654.572400][T17747] alloc_pages_mpol+0xd1/0x380 [ 1654.572424][T17747] allocate_slab+0x96/0x350 [ 1654.572447][T17747] ___slab_alloc+0xb10/0x1400 [ 1654.572462][T17747] __slab_alloc+0xc6/0x1f0 [ 1654.572478][T17747] __kmalloc_cache_noprof+0xec/0x6c0 [ 1654.572501][T17747] acpi_ds_create_walk_state+0xf6/0x310 [ 1654.572592][T17747] acpi_ds_auto_serialize_method+0x1a8/0x3a0 [ 1654.572613][T17747] acpi_ds_init_one_object+0x177/0x390 [ 1654.572633][T17747] acpi_ns_walk_namespace+0x2ce/0x760 [ 1654.572707][T17747] acpi_ds_initialize_objects+0x205/0x6f0 [ 1654.572729][T17747] acpi_ns_load_table+0x25c/0x430 [ 1654.572748][T17747] acpi_tb_load_namespace+0x2ca/0x880 [ 1654.572796][T17747] acpi_load_tables+0x53/0xf0 [ 1654.572843][T17747] page_owner free stack trace missing [ 1654.572851][T17747] [ 1654.572856][T17747] Memory state around the buggy address: [ 1654.572868][T17747] ffff8880212fd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.572882][T17747] ffff8880212fd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.572896][T17747] >ffff8880212fd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.572907][T17747] ^ [ 1654.572917][T17747] ffff8880212fd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.572930][T17747] ffff8880212fd600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.572941][T17747] ================================================================== [ 1654.572962][T17747] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1654.572979][T17747] CPU: 0 UID: 0 PID: 17747 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1654.573003][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1654.573018][T17747] Workqueue: hci0 hci_rx_work [ 1654.573040][T17747] Call Trace: [ 1654.573048][T17747] [ 1654.573058][T17747] dump_stack_lvl+0x99/0x250 [ 1654.573088][T17747] ? __asan_memcpy+0x40/0x70 [ 1654.573110][T17747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1654.573138][T17747] ? __pfx__printk+0x10/0x10 [ 1654.573169][T17747] vpanic+0x237/0x6d0 [ 1654.573187][T17747] ? __pfx_vpanic+0x10/0x10 [ 1654.573211][T17747] panic+0xb9/0xc0 [ 1654.573228][T17747] ? __pfx_panic+0x10/0x10 [ 1654.573245][T17747] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1654.573276][T17747] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1654.573309][T17747] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1654.573338][T17747] check_panic_on_warn+0x89/0xb0 [ 1654.573358][T17747] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1654.573384][T17747] end_report+0x78/0x160 [ 1654.573410][T17747] kasan_report+0x129/0x150 [ 1654.573444][T17747] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1654.573476][T17747] l2cap_connect_cfm+0x6e4/0x1040 [ 1654.573511][T17747] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1654.573542][T17747] ? mutex_lock_nested+0x154/0x1d0 [ 1654.573564][T17747] ? hci_connect_cfm+0x2c/0x140 [ 1654.573588][T17747] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1654.573617][T17747] hci_connect_cfm+0x95/0x140 [ 1654.573643][T17747] le_conn_complete_evt+0xfb8/0x1500 [ 1654.573676][T17747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1654.573702][T17747] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1654.573729][T17747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1654.573758][T17747] ? skb_pull_data+0xfb/0x200 [ 1654.573790][T17747] hci_le_conn_complete_evt+0x187/0x450 [ 1654.573817][T17747] hci_event_packet+0x78f/0x1200 [ 1654.573840][T17747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1654.573867][T17747] ? __pfx_hci_event_packet+0x10/0x10 [ 1654.573894][T17747] ? hci_send_to_monitor+0xe2/0x570 [ 1654.573923][T17747] hci_rx_work+0x46a/0xe80 [ 1654.573949][T17747] ? process_scheduled_works+0x9ef/0x17b0 [ 1654.573975][T17747] process_scheduled_works+0xae1/0x17b0 [ 1654.574013][T17747] ? __pfx_process_scheduled_works+0x10/0x10 [ 1654.574045][T17747] worker_thread+0x8a0/0xda0 [ 1654.574070][T17747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1654.574103][T17747] ? __kthread_parkme+0x7b/0x200 [ 1654.574134][T17747] kthread+0x711/0x8a0 [ 1654.574163][T17747] ? __pfx_worker_thread+0x10/0x10 [ 1654.574186][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.574212][T17747] ? rt_spin_unlock+0x150/0x200 [ 1654.574237][T17747] ? rt_spin_unlock+0x161/0x200 [ 1654.574259][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.574287][T17747] ret_from_fork+0x4bc/0x870 [ 1654.574311][T17747] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.574337][T17747] ? __switch_to_asm+0x39/0x70 [ 1654.574356][T17747] ? __switch_to_asm+0x33/0x70 [ 1654.574375][T17747] ? __pfx_kthread+0x10/0x10 [ 1654.574403][T17747] ret_from_fork_asm+0x1a/0x30 [ 1654.574437][T17747] [ 1654.574824][T17747] Kernel Offset: disabled