last executing test programs: 16m26.336900657s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2400) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x6, 0x0, &(0x7f00000004c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r7, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) r8 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) 16m10.775317574s ago: executing program 32 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2400) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x6, 0x0, &(0x7f00000004c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r7, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) r8 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) 15m20.117968686s ago: executing program 4 (id=89): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) 15m19.031620241s ago: executing program 2 (id=91): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r4, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x1, 0x40) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x1}, 0x7bdf70d5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6}, 0x40}], 0x2, 0x40002042, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 15m14.609336423s ago: executing program 4 (id=93): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r4, &(0x7f0000001a40), 0x0, 0x40) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x1}, 0x7bdf70d5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6}, 0x40}], 0x2, 0x40002042, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 15m14.430630714s ago: executing program 2 (id=94): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000440)={'fscrypt:', @auto=[0x61, 0x33, 0x61, 0x63, 0x34, 0x37, 0x31, 0x63, 0x65, 0x39, 0x36, 0xcc499041b74aa537, 0x33, 0x30, 0x37, 0x33]}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0) r7 = getegid() keyctl$chown(0x4, r5, 0xee01, r7) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/17) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r8 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {}, {0x3, 0x4}, {0x0, 0x3}, {0x1000}, {0x0, 0x1000}, {0x200000}, {}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) 15m12.080624356s ago: executing program 2 (id=95): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4c, 0x0, 0x0, 0x5, &(0x7f00000000c0)={0x0, 0x989680}, 0x1, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x60100) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1fe) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x14) 15m12.030394373s ago: executing program 4 (id=96): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x4000885) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x201, 0x2, 0x10000}, 0x10) 15m11.572194025s ago: executing program 2 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) socket(0x28, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{0x0}], 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r7, 0x0, 0x0, 0x47, 0x0) pread64(r7, &(0x7f0000000300)=""/147, 0x93, 0xf4be) 15m10.214537801s ago: executing program 2 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 15m10.197103711s ago: executing program 4 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x7}, 0x18) socket(0x28, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200", 0x55}, {&(0x7f0000000040)}], 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/190, 0xbe}], 0x1, 0x47, 0x0) pread64(r8, &(0x7f0000000300)=""/147, 0x93, 0xf4be) 15m8.499653794s ago: executing program 4 (id=100): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r4, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x1, 0x40) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x1}, 0x7bdf70d5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6}, 0x40}], 0x2, 0x40002042, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 15m6.111543733s ago: executing program 4 (id=102): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 15m5.123823896s ago: executing program 2 (id=103): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r4, &(0x7f0000001a40), 0x0, 0x40) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x1}, 0x7bdf70d5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6}, 0x40}], 0x2, 0x40002042, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 14m50.416399741s ago: executing program 33 (id=102): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 14m49.282674581s ago: executing program 34 (id=104): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416", 0x7e}, {&(0x7f0000001400)="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", 0xfbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m49.164998113s ago: executing program 35 (id=103): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r4, &(0x7f0000001a40), 0x0, 0x40) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x1}, 0x7bdf70d5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6}, 0x40}], 0x2, 0x40002042, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 12m37.14400037s ago: executing program 8 (id=234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x64004880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004084}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) 12m32.158999814s ago: executing program 8 (id=239): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/kernel/oops_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) read$FUSE(r1, &(0x7f000000a3c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0xce, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r0, 0x0, 0x0) 12m29.57245867s ago: executing program 8 (id=246): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0x7, 0x5, 0x1, {0x0, 0x181, 0x2101, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xcea, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 12m28.428827172s ago: executing program 8 (id=248): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x169080) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) 12m27.676040249s ago: executing program 8 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) listen(r1, 0x8) accept4$inet(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 12m25.295699228s ago: executing program 8 (id=254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f00000000c0)=@tcp6=r2}, 0x1c) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 12m9.119695968s ago: executing program 36 (id=254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f00000000c0)=@tcp6=r2}, 0x1c) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 11m13.509344246s ago: executing program 3 (id=347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="b3eb21a5f90fe224ec293927d54e7986cb749ab6e79eeadb8d281e9c9f6baaec801b489a63a18dc5b8e122952238fa7383a6dc32891ee479a8337f76cf6da274fc444ae18942d3ba70170ebc032171348e0753c1", 0x54}, {&(0x7f0000000440)="632a39289910d35886db2f4805d13d142590994b88bb03c209f3676638183e79ef3794ca93b7cb7b87588a1202a437afd73b84d4a765", 0x36}], 0x2, 0x4, 0x9) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES16=r2], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000008}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x289e0ca5, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='qgroup_update_reserve\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 11m6.337228232s ago: executing program 3 (id=351): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004845}, 0x4814) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) write$FUSE_LK(r0, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x0, {{0xb78f, 0x14, 0x1}}}, 0x28) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r7 = eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r7, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r3, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r1) 11m2.550354145s ago: executing program 3 (id=355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 11m0.367783658s ago: executing program 3 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) 10m59.672107651s ago: executing program 3 (id=360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r3) 10m57.823894389s ago: executing program 6 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m57.822770454s ago: executing program 3 (id=363): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000010c0)={'\x00', &(0x7f0000001040)=@ethtool_sfeatures}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x44b2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="250a140f000b597c05933ad9fea80900000409000000000000000000"], 0x1c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m56.975961637s ago: executing program 6 (id=365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="b3eb21a5f90fe224ec293927d54e7986cb749ab6e79eeadb8d281e9c9f6baaec801b489a63a18dc5b8e122952238fa7383a6dc32891ee479a8337f76cf6da274fc444ae18942d3ba70170ebc032171348e0753c1", 0x54}, {&(0x7f0000000440)="632a39289910d35886db2f4805d13d142590994b88bb03c209f3676638183e79ef3794ca93b7cb7b87588a1202a437afd73b84d4a765", 0x36}], 0x2, 0x4, 0x9) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES16=r2], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000008}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(0xffffffffffffffff, 0x289e0ca5, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='qgroup_update_reserve\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 10m46.3952759s ago: executing program 6 (id=369): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004845}, 0x4814) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) write$FUSE_LK(r0, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x0, {{0xb78f, 0x14, 0x1}}}, 0x28) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r8 = eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000040)=r8, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r4, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="0200a29b40214271e7bee4b7cfcb5f9ed5f96636bc757cf118165526c62a44f528d200"], 0x11, 0x1) close(r1) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m39.254270916s ago: executing program 37 (id=363): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000010c0)={'\x00', &(0x7f0000001040)=@ethtool_sfeatures}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x44b2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="250a140f000b597c05933ad9fea80900000409000000000000000000"], 0x1c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m39.066859596s ago: executing program 6 (id=372): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) read(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x2, 0x6, 0xfffffffc, 'syz0\x00'}, 0x2, 0x40, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0, 0x25}) 10m38.580485579s ago: executing program 6 (id=374): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x10000000000000) 10m37.224057315s ago: executing program 6 (id=375): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416", 0x7e}, {&(0x7f0000001400)="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", 0xfbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x3, 0x11) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x2c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m21.912636811s ago: executing program 38 (id=375): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416", 0x7e}, {&(0x7f0000001400)="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", 0xfbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x3, 0x11) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x2c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9m39.274009732s ago: executing program 5 (id=439): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x1, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x4, 0x1000002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x400000, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x75, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0x2011, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x5, 0x46e9, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r5, 0x0, 0x8000002b) 9m37.560394767s ago: executing program 5 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 9m35.703659791s ago: executing program 5 (id=445): socket(0x840000000002, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21d4, 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) epoll_create1(0x80000) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 9m35.544653631s ago: executing program 5 (id=446): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 9m34.146192559s ago: executing program 5 (id=447): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9m33.828275535s ago: executing program 5 (id=450): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 9m17.943337382s ago: executing program 39 (id=450): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 6.305866973s ago: executing program 9 (id=274): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 5.917846459s ago: executing program 7 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8c4) 4.887426511s ago: executing program 9 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.724006662s ago: executing program 7 (id=1048): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000007580)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x100, 0xe, 0x6, 0x7, 0xffffffff, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) unlink(0x0) 4.697400016s ago: executing program 0 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/21], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 4.608711238s ago: executing program 7 (id=1050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000018400000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="50b5bc4200000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94) 3.551371737s ago: executing program 0 (id=1051): sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) r3 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x33, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) 3.516250595s ago: executing program 7 (id=1052): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90324fc600d00030009000100ff3582c137153e370248018002", 0x29}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 3.46136322s ago: executing program 9 (id=1053): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) 2.003485517s ago: executing program 0 (id=1054): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 2.002303236s ago: executing program 9 (id=1055): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.941532869s ago: executing program 7 (id=1056): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0xb, 0x47, "d92a93b67e73802022ee11f267d07da6576a93a305aa2faec5613c6525440abf11b02712ab57bfc94c10aad1686101cf84b6ff556502ac1e348b21b1a9aa2eb87eeb6aac00b6cf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0xd0a17bd4d462c303, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1e0, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000480)={0x40, 0xb, 0x2, "1e0a"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xc6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 1.603968185s ago: executing program 0 (id=1057): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000003c0)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0x10000}}, 0x120) 557.375219ms ago: executing program 7 (id=1058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 131.959499ms ago: executing program 0 (id=1059): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) fchmod(r0, 0x20049549e2a2d659) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): b 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.303279][ T9766] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.303291][ T9766] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 818.303316][ T9766] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 818.303328][ T9766] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.306394][ T9766] usb 8-1: config 0 descriptor?? [ 818.373306][T10065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 818.739044][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739086][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739112][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739139][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739166][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739191][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739219][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739245][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.739270][ T9766] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 818.820792][ T9766] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 818.935961][T10226] chnl_net:caif_netlink_parms(): no params data found [ 819.012730][ T5960] usb 8-1: USB disconnect, device number 19 [ 819.739659][T10226] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.739877][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.754948][T10226] bridge_slave_0: entered allmulticast mode [ 819.757594][T10226] bridge_slave_0: entered promiscuous mode [ 819.816332][T10226] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.816462][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.816678][T10226] bridge_slave_1: entered allmulticast mode [ 819.843418][T10226] bridge_slave_1: entered promiscuous mode [ 819.975965][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.106256][T10294] trusted_key: encrypted_key: insufficient parameters specified [ 820.847281][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.970379][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.089658][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.123407][T10226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.155125][T10226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.316550][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.412395][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.466743][T10226] team0: Port device team_slave_0 added [ 822.490800][T10226] team0: Port device team_slave_1 added [ 822.491353][T10063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 822.845140][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.956144][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.077832][T10063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 823.253881][T10063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 823.314885][T10308] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 823.314914][T10308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 823.315128][T10308] vhci_hcd vhci_hcd.0: Device attached [ 823.353699][T10226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.353750][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.353808][T10226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.365148][T10063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 823.592660][T10226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.592672][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.592687][T10226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.676931][ T5888] usb 48-1: SetAddress Request (43) to port 0 [ 823.676985][ T5888] usb 48-1: new SuperSpeed USB device number 43 using vhci_hcd [ 823.832725][T10309] vhci_hcd: connection reset by peer [ 823.833273][ T1472] vhci_hcd: stop threads [ 823.833288][ T1472] vhci_hcd: release socket [ 823.833357][ T1472] vhci_hcd: disconnect device [ 824.231857][T10226] hsr_slave_0: entered promiscuous mode [ 824.237068][T10226] hsr_slave_1: entered promiscuous mode [ 824.237825][T10226] debugfs: 'hsr0' already exists in 'hsr' [ 824.237914][T10226] Cannot create hsr debugfs directory [ 824.304222][T10125] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 824.483969][T10125] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 824.563209][T10065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.563464][T10125] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 824.706356][T10125] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 825.562975][T10065] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.792456][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.792651][ T7823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.151659][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.291708][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.291789][ T7823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.111417][T10125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.504656][T10125] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.756460][ T5888] usb 48-1: device descriptor read/8, error -110 [ 828.891817][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 828.896013][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 828.964141][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 828.986236][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 828.989038][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 829.099478][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.099700][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.149224][ T5888] usb usb48-port1: attempt power cycle [ 829.186210][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.206554][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.208332][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.209620][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.235241][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 829.734436][ T5888] usb usb48-port1: unable to enumerate USB device [ 829.999478][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.999704][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.161025][ T5800] Bluetooth: hci1: command tx timeout [ 831.314085][ T5800] Bluetooth: hci4: command tx timeout [ 831.416769][ T7263] bridge_slave_1: left allmulticast mode [ 831.416797][ T7263] bridge_slave_1: left promiscuous mode [ 831.417066][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.503011][ T7263] bridge_slave_0: left allmulticast mode [ 831.503031][ T7263] bridge_slave_0: left promiscuous mode [ 831.503189][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.029528][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.179336][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.341622][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.537324][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.723262][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.968797][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.232935][ T5800] Bluetooth: hci1: command tx timeout [ 833.343870][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.222868][ T5800] Bluetooth: hci4: command tx timeout [ 834.223854][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.366721][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.713802][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.311022][ T5800] Bluetooth: hci1: command tx timeout [ 835.340802][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.646137][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.278860][ T5800] Bluetooth: hci4: command tx timeout [ 836.414302][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.429425][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 836.429442][ T37] audit: type=1326 audit(1760065220.781:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.7.730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e1c0eec9 code=0x0 [ 836.543056][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.194681][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.274797][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.343112][ T7263] bond0 (unregistering): Released all slaves [ 837.400352][ T5800] Bluetooth: hci1: command tx timeout [ 838.150551][ T7263] hsr_slave_0: left promiscuous mode [ 838.191436][ T7263] hsr_slave_1: left promiscuous mode [ 838.192093][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.248225][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.350554][ T5800] Bluetooth: hci4: command tx timeout [ 840.379977][T10442] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 840.380005][T10442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.405304][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 840.453969][T10442] vhci_hcd vhci_hcd.0: Device attached [ 840.780927][ T5939] usb 48-1: SetAddress Request (47) to port 0 [ 840.781011][ T5939] usb 48-1: new SuperSpeed USB device number 47 using vhci_hcd [ 840.821125][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 840.851401][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.952522][T10443] vhci_hcd: connection reset by peer [ 840.969470][ T6644] vhci_hcd: stop threads [ 840.969483][ T6644] vhci_hcd: release socket [ 840.969531][ T6644] vhci_hcd: disconnect device [ 841.069700][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.138854][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.222247][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.287582][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.352841][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.423219][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.608426][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.680853][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.221832][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.598120][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.742074][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.176987][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.817232][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.842018][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 843.860748][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 843.863817][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 843.865071][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 843.865854][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.089997][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.190345][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.7.736'. [ 844.621747][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.057068][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.642010][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.717143][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.742097][ T37] audit: type=1326 audit(1760065230.101:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10467 comm="syz.7.737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e1c0eec9 code=0x0 [ 845.871191][ T5939] usb 48-1: device descriptor read/8, error -110 [ 845.954158][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.961182][ T5117] Bluetooth: hci5: command tx timeout [ 846.265861][ T5939] usb usb48-port1: attempt power cycle [ 846.452410][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.557969][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.618250][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.726361][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.869985][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.881030][ T5939] usb usb48-port1: unable to enumerate USB device [ 847.149787][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.227166][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.835253][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.031409][ T5117] Bluetooth: hci5: command tx timeout [ 848.068558][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.312643][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.402558][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.440568][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.561790][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.817124][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.837529][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.914097][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.175227][ T5117] Bluetooth: hci5: command tx timeout [ 851.687442][T10369] chnl_net:caif_netlink_parms(): no params data found [ 851.782706][T10374] chnl_net:caif_netlink_parms(): no params data found [ 851.880519][ T5884] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 852.040305][ T5884] usb 8-1: Using ep0 maxpacket: 16 [ 852.046376][ T5884] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 852.046403][ T5884] usb 8-1: config 0 has no interface number 0 [ 852.074756][ T5884] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 852.074787][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.074807][ T5884] usb 8-1: Product: syz [ 852.074821][ T5884] usb 8-1: Manufacturer: syz [ 852.074836][ T5884] usb 8-1: SerialNumber: syz [ 852.119296][ T5884] usb 8-1: config 0 descriptor?? [ 852.128702][ T5884] hub 8-1:0.132: bad descriptor, ignoring hub [ 852.128741][ T5884] hub 8-1:0.132: probe with driver hub failed with error -5 [ 852.156457][ T5884] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input23 [ 852.190570][ T5117] Bluetooth: hci5: command tx timeout [ 852.326029][T10226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 852.437538][T10226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 852.750980][T10226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.979974][ T37] audit: type=1326 audit(1760065237.331:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.7.745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e1c0eec9 code=0x0 [ 853.080554][T10226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 853.288378][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.288453][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.288616][T10369] bridge_slave_0: entered allmulticast mode [ 853.316528][T10369] bridge_slave_0: entered promiscuous mode [ 853.358852][T10556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 853.535800][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.535874][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.536050][T10374] bridge_slave_0: entered allmulticast mode [ 853.537663][T10374] bridge_slave_0: entered promiscuous mode [ 853.539886][T10369] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.540003][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.540126][T10369] bridge_slave_1: entered allmulticast mode [ 853.592212][T10369] bridge_slave_1: entered promiscuous mode [ 853.724847][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.724921][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.725092][T10374] bridge_slave_1: entered allmulticast mode [ 853.726624][T10374] bridge_slave_1: entered promiscuous mode [ 855.138751][T10369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.996558][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.003375][T10369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.065214][T10456] chnl_net:caif_netlink_parms(): no params data found [ 856.156325][ T5888] usb 8-1: USB disconnect, device number 20 [ 856.288162][T10374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.578385][T10369] team0: Port device team_slave_0 added [ 857.777663][T10369] team0: Port device team_slave_1 added [ 857.844983][T10374] team0: Port device team_slave_0 added [ 858.452572][T10374] team0: Port device team_slave_1 added [ 858.672272][T10369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.672285][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.672300][T10369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.833502][T10369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.833514][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.833529][T10369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.845677][T10374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.845689][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.845704][T10374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.068785][T10374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.068796][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.068811][T10374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.076422][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.076679][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.076912][T10456] bridge_slave_0: entered allmulticast mode [ 859.078515][T10456] bridge_slave_0: entered promiscuous mode [ 859.181009][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.181097][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.181270][T10456] bridge_slave_1: entered allmulticast mode [ 859.183320][T10456] bridge_slave_1: entered promiscuous mode [ 860.109128][T10600] 9pnet_virtio: no channels available for device syz [ 860.994776][T10374] hsr_slave_0: entered promiscuous mode [ 860.995736][T10374] hsr_slave_1: entered promiscuous mode [ 860.996322][T10374] debugfs: 'hsr0' already exists in 'hsr' [ 860.996338][T10374] Cannot create hsr debugfs directory [ 861.004499][T10369] hsr_slave_0: entered promiscuous mode [ 861.005731][T10369] hsr_slave_1: entered promiscuous mode [ 861.006647][T10369] debugfs: 'hsr0' already exists in 'hsr' [ 861.006670][T10369] Cannot create hsr debugfs directory [ 861.025793][T10456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.074631][T10456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.100204][T10456] team0: Port device team_slave_0 added [ 866.212972][T10456] team0: Port device team_slave_1 added [ 866.727404][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.764240][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.350181][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.458686][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.528370][T10456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.528382][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.528396][T10456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.598379][T10456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.598397][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.598424][T10456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.908824][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.556703][T10456] hsr_slave_0: entered promiscuous mode [ 868.558098][T10456] hsr_slave_1: entered promiscuous mode [ 868.559068][T10456] debugfs: 'hsr0' already exists in 'hsr' [ 868.559092][T10456] Cannot create hsr debugfs directory [ 868.792844][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.072591][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.869193][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.895998][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 869.913686][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 869.915195][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 869.917642][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 869.918838][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 870.144590][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.147817][T10648] [U]  [ 870.147827][T10648] [U] K{‘ [ 870.147838][T10648] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 870.147863][T10648] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 870.147884][T10648] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 870.147923][T10648] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)޹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 870.147984][T10648] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 870.148009][T10648] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 870.148021][T10648] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 870.148047][T10648] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 870.148194][T10648] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 870.148223][T10648] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 870.148234][T10648] [U] 22½“Æ©Ðû©x?0;3u± [ 870.148277][T10648] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 870.148299][T10648] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 870.148314][T10648] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 870.148323][T10648] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 870.148341][T10648] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 870.148363][T10648] [U] ¹ ec [ 870.148369][T10648] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 870.204913][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.204982][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.353853][T10645] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8寥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 870.601278][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.313545][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.724388][T10659] trusted_key: encrypted_key: insufficient parameters specified [ 872.436079][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.485182][ T5117] Bluetooth: hci0: command tx timeout [ 872.594246][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.298123][T10665] No control pipe specified [ 873.404762][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.809530][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.099361][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.410778][ C0] vkms_vblank_simulate: vblank timer overrun [ 875.258003][ T5117] Bluetooth: hci0: command tx timeout [ 875.556393][T10642] chnl_net:caif_netlink_parms(): no params data found [ 876.234596][T10642] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.234816][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.235055][T10642] bridge_slave_0: entered allmulticast mode [ 876.266425][T10642] bridge_slave_0: entered promiscuous mode [ 876.271849][T10642] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.273878][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.274128][T10642] bridge_slave_1: entered allmulticast mode [ 876.278662][T10642] bridge_slave_1: entered promiscuous mode [ 877.312338][ T5117] Bluetooth: hci0: command tx timeout [ 878.388788][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.565918][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.598257][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.255160][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.327579][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.390813][ T5117] Bluetooth: hci0: command tx timeout [ 879.525655][T10642] team0: Port device team_slave_0 added [ 879.568211][T10642] team0: Port device team_slave_1 added [ 879.714907][ T7263] bridge_slave_1: left allmulticast mode [ 879.714987][ T7263] bridge_slave_1: left promiscuous mode [ 879.715630][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.135293][ T7263] bridge_slave_0: left allmulticast mode [ 880.135520][ T7263] bridge_slave_0: left promiscuous mode [ 880.139253][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.554885][ T7263] bridge_slave_1: left allmulticast mode [ 880.554916][ T7263] bridge_slave_1: left promiscuous mode [ 880.555146][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.642685][ T7263] bridge_slave_0: left allmulticast mode [ 880.642715][ T7263] bridge_slave_0: left promiscuous mode [ 880.642962][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.752816][ T7263] bridge_slave_1: left allmulticast mode [ 880.752847][ T7263] bridge_slave_1: left promiscuous mode [ 880.753087][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.820929][ T7263] bridge_slave_0: left allmulticast mode [ 880.820958][ T7263] bridge_slave_0: left promiscuous mode [ 880.821208][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.822839][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.773'. [ 881.498347][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.554151][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.624352][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.864910][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.249423][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.344452][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.398929][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.548987][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.671104][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.739468][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.969188][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.023291][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.090815][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.154026][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.172995][ T7263] bond0 (unregistering): Released all slaves [ 883.385571][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.603685][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.811344][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.871598][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.892988][ T7263] bond0 (unregistering): Released all slaves [ 885.691285][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.781145][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.852687][ T7263] bond0 (unregistering): Released all slaves [ 886.192976][T10703] veth3: entered promiscuous mode [ 886.399480][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.399493][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.399508][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.403648][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.403664][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.403688][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.579545][ T7775] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 886.740359][ T7775] usb 8-1: Using ep0 maxpacket: 16 [ 886.742564][ T7775] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 886.742590][ T7775] usb 8-1: config 0 has no interface number 0 [ 886.745332][ T7775] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 886.745361][ T7775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.745380][ T7775] usb 8-1: Product: syz [ 886.745392][ T7775] usb 8-1: Manufacturer: syz [ 886.745404][ T7775] usb 8-1: SerialNumber: syz [ 886.802446][ T7775] usb 8-1: config 0 descriptor?? [ 886.805785][ T7775] hub 8-1:0.132: bad descriptor, ignoring hub [ 886.805824][ T7775] hub 8-1:0.132: probe with driver hub failed with error -5 [ 886.829319][ T7775] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input24 [ 886.864250][T10642] hsr_slave_0: entered promiscuous mode [ 886.865135][T10642] hsr_slave_1: entered promiscuous mode [ 886.865708][T10642] debugfs: 'hsr0' already exists in 'hsr' [ 886.865728][T10642] Cannot create hsr debugfs directory [ 887.030530][ T7263] hsr_slave_0: left promiscuous mode [ 887.075353][ T7263] hsr_slave_1: left promiscuous mode [ 887.076334][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.118635][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.270807][ T7263] hsr_slave_0: left promiscuous mode [ 887.310923][ T7263] hsr_slave_1: left promiscuous mode [ 887.311899][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.361344][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.453993][ T9767] usb 8-1: USB disconnect, device number 21 [ 887.520347][ T7263] hsr_slave_0: left promiscuous mode [ 887.541011][ T7263] hsr_slave_1: left promiscuous mode [ 887.548496][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.581227][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.541292][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 888.901471][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 888.962231][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.969294][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.015820][ T9767] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 889.034543][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 889.036228][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 889.037306][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.182675][ T9767] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 889.182742][ T9767] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.185618][ T9767] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 889.185648][ T9767] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 889.185670][ T9767] usb 8-1: Manufacturer: syz [ 889.232639][ T9767] usb 8-1: config 0 descriptor?? [ 889.316811][ T9767] rc_core: IR keymap rc-hauppauge not found [ 889.316827][ T9767] Registered IR keymap rc-empty [ 889.318889][ T9767] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 889.345047][ T9767] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input25 [ 889.610038][ T9767] usb 8-1: USB disconnect, device number 22 [ 889.996426][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 889.999128][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 890.001777][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 890.004313][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 890.005512][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 890.552957][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.777'. [ 891.160746][ T5800] Bluetooth: hci2: command tx timeout [ 891.323851][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.501401][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.585105][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.749493][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.788841][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.832174][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.840374][ T9767] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 891.989625][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.000427][ T9767] usb 8-1: Using ep0 maxpacket: 16 [ 892.005466][ T9767] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 892.005493][ T9767] usb 8-1: config 0 has no interface number 0 [ 892.007898][ T9767] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 892.007919][ T9767] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.007930][ T9767] usb 8-1: Product: syz [ 892.007938][ T9767] usb 8-1: Manufacturer: syz [ 892.007945][ T9767] usb 8-1: SerialNumber: syz [ 892.030909][ T5800] Bluetooth: hci6: command tx timeout [ 892.067785][ T9767] usb 8-1: config 0 descriptor?? [ 892.105847][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.107112][ T9767] hub 8-1:0.132: bad descriptor, ignoring hub [ 892.107147][ T9767] hub 8-1:0.132: probe with driver hub failed with error -5 [ 892.110799][ T9767] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input26 [ 892.198526][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.271730][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.345237][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.536285][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.776005][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.880328][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.932072][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.221533][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.230943][ T5800] Bluetooth: hci2: command tx timeout [ 893.460900][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.578047][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 893.719276][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.803086][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.885520][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.964025][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 894.110640][ T5800] Bluetooth: hci6: command tx timeout [ 894.175264][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.017112][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.310920][ T5800] Bluetooth: hci2: command tx timeout [ 895.359774][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.626382][ C0] vkms_vblank_simulate: vblank timer overrun [ 896.191004][ T5800] Bluetooth: hci6: command tx timeout [ 896.194713][T10742] Falling back ldisc for ttyprintk. [ 896.748178][ T5960] usb 8-1: USB disconnect, device number 23 [ 897.390743][ T5800] Bluetooth: hci2: command tx timeout [ 898.271067][ T5800] Bluetooth: hci6: command tx timeout [ 898.532868][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 898.691163][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 901.314425][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.018822][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.145102][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.203176][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.466704][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.777927][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.817862][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.095849][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.187023][T10721] chnl_net:caif_netlink_parms(): no params data found [ 903.344735][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.445166][T10716] chnl_net:caif_netlink_parms(): no params data found [ 903.504029][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.788'. [ 903.561945][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.660565][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.898282][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.034798][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 904.037857][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.040850][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.062378][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.068075][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.155316][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.221925][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.382603][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.477161][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.572950][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.782852][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.305649][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.370161][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.420071][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.544055][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.588353][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.791'. [ 905.748686][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.748887][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.749086][T10721] bridge_slave_0: entered allmulticast mode [ 905.772997][T10721] bridge_slave_0: entered promiscuous mode [ 905.866608][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.866695][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.866822][T10721] bridge_slave_1: entered allmulticast mode [ 905.868420][T10721] bridge_slave_1: entered promiscuous mode [ 906.110345][ T5800] Bluetooth: hci1: command tx timeout [ 906.210423][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.260830][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.353945][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.354158][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.354391][T10716] bridge_slave_0: entered allmulticast mode [ 906.357409][T10716] bridge_slave_0: entered promiscuous mode [ 906.410038][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.412159][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.412283][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.412484][T10716] bridge_slave_1: entered allmulticast mode [ 906.427786][T10716] bridge_slave_1: entered promiscuous mode [ 906.614415][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.895588][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.980998][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.173258][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.695213][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.996162][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.997429][T10721] team0: Port device team_slave_0 added [ 908.018835][T10721] team0: Port device team_slave_1 added [ 908.190723][ T5800] Bluetooth: hci1: command tx timeout [ 909.603871][T10821] No control pipe specified [ 909.761936][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.879716][T10716] team0: Port device team_slave_0 added [ 909.900026][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.900043][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.900066][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.919405][T10716] team0: Port device team_slave_1 added [ 909.936362][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.936378][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.936402][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.270703][ T5800] Bluetooth: hci1: command tx timeout [ 910.394381][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.394395][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.394414][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.526851][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.526867][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.526893][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.849677][T10721] hsr_slave_0: entered promiscuous mode [ 910.861536][T10721] hsr_slave_1: entered promiscuous mode [ 911.417084][ T37] audit: type=1326 audit(1760065295.771:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.7.801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e1c0eec9 code=0x0 [ 911.631632][T10716] hsr_slave_0: entered promiscuous mode [ 911.633070][T10716] hsr_slave_1: entered promiscuous mode [ 911.634062][T10716] debugfs: 'hsr0' already exists in 'hsr' [ 911.634085][T10716] Cannot create hsr debugfs directory [ 911.837569][T10838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 912.317608][T10783] chnl_net:caif_netlink_parms(): no params data found [ 912.350523][ T5800] Bluetooth: hci1: command tx timeout [ 912.511612][T10642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.573280][T10642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.724956][T10642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.890760][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.802'. [ 914.884849][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.011928][T10642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 915.365232][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.365406][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.365608][T10783] bridge_slave_0: entered allmulticast mode [ 915.368355][T10783] bridge_slave_0: entered promiscuous mode [ 915.435551][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.435681][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.435901][T10783] bridge_slave_1: entered allmulticast mode [ 915.438561][T10783] bridge_slave_1: entered promiscuous mode [ 915.649857][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.956704][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.035634][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.244677][T10862] mkiss: ax0: crc mode is auto. [ 918.564028][ T7263] bridge_slave_1: left allmulticast mode [ 918.564094][ T7263] bridge_slave_1: left promiscuous mode [ 918.565452][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.721456][ T7263] bridge_slave_0: left allmulticast mode [ 918.721478][ T7263] bridge_slave_0: left promiscuous mode [ 918.721654][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.787112][ T7263] bridge_slave_1: left allmulticast mode [ 918.787133][ T7263] bridge_slave_1: left promiscuous mode [ 918.787285][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.851520][ T7263] bridge_slave_0: left allmulticast mode [ 918.851541][ T7263] bridge_slave_0: left promiscuous mode [ 918.851701][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.924190][ T7263] bridge_slave_1: left allmulticast mode [ 918.924211][ T7263] bridge_slave_1: left promiscuous mode [ 918.924429][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.992081][ T7263] bridge_slave_0: left allmulticast mode [ 918.992125][ T7263] bridge_slave_0: left promiscuous mode [ 918.992328][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.054756][ T7263] bridge_slave_1: left allmulticast mode [ 919.054777][ T7263] bridge_slave_1: left promiscuous mode [ 919.054934][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.111574][ T7263] bridge_slave_0: left allmulticast mode [ 919.111596][ T7263] bridge_slave_0: left promiscuous mode [ 919.111760][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.461604][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.544295][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.605164][ T7263] bond0 (unregistering): Released all slaves [ 919.880515][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.951377][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.022451][ T7263] bond0 (unregistering): Released all slaves [ 920.221508][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.301216][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.365563][ T7263] bond0 (unregistering): Released all slaves [ 921.021075][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.111419][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.172303][ T7263] bond0 (unregistering): Released all slaves [ 921.547319][T10783] team0: Port device team_slave_0 added [ 921.624813][T10783] team0: Port device team_slave_1 added [ 922.035624][T10873] trusted_key: encrypted_key: insufficient parameters specified [ 923.207808][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.207820][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.207833][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.246005][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.246016][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.246030][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.750693][ T7263] hsr_slave_0: left promiscuous mode [ 923.770807][ T7263] hsr_slave_1: left promiscuous mode [ 923.771812][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.811705][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.952827][ T7263] hsr_slave_0: left promiscuous mode [ 923.970592][ T7263] hsr_slave_1: left promiscuous mode [ 923.971922][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.011335][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.161917][ T7263] hsr_slave_0: left promiscuous mode [ 924.182322][ T7263] hsr_slave_1: left promiscuous mode [ 924.183811][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.221081][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.360449][ T7263] hsr_slave_0: left promiscuous mode [ 924.380851][ T7263] hsr_slave_1: left promiscuous mode [ 924.381808][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.431933][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.065276][T10884] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 925.065303][T10884] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 925.068067][T10884] vhci_hcd vhci_hcd.0: Device attached [ 925.403389][ T5888] usb 48-1: SetAddress Request (51) to port 0 [ 925.403448][ T5888] usb 48-1: new SuperSpeed USB device number 51 using vhci_hcd [ 925.471385][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 925.549420][T10885] vhci_hcd: connection reset by peer [ 925.557720][ T140] vhci_hcd: stop threads [ 925.557735][ T140] vhci_hcd: release socket [ 925.557780][ T140] vhci_hcd: disconnect device [ 925.703682][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 926.553609][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.810'. [ 927.153939][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 927.311086][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 928.441140][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 928.591147][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 929.701363][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 929.852879][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 930.086457][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.089746][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 930.123293][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 930.124414][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 930.127685][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 930.440864][ T5888] usb 48-1: device descriptor read/8, error -110 [ 930.653235][T10783] hsr_slave_0: entered promiscuous mode [ 930.654514][T10783] hsr_slave_1: entered promiscuous mode [ 930.655420][T10783] debugfs: 'hsr0' already exists in 'hsr' [ 930.655443][T10783] Cannot create hsr debugfs directory [ 930.760793][T10891] veth5: entered promiscuous mode [ 930.873182][ T5888] usb usb48-port1: attempt power cycle [ 931.084889][ T7775] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 931.237767][ T7775] usb 8-1: Using ep0 maxpacket: 16 [ 931.242027][ T7775] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 931.242053][ T7775] usb 8-1: config 0 has no interface number 0 [ 931.244489][ T7775] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 931.244517][ T7775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.244537][ T7775] usb 8-1: Product: syz [ 931.244551][ T7775] usb 8-1: Manufacturer: syz [ 931.244563][ T7775] usb 8-1: SerialNumber: syz [ 931.253026][ T7775] usb 8-1: config 0 descriptor?? [ 931.266069][ T7775] hub 8-1:0.132: bad descriptor, ignoring hub [ 931.266106][ T7775] hub 8-1:0.132: probe with driver hub failed with error -5 [ 931.283068][ T7775] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input27 [ 931.458711][ T5888] usb usb48-port1: unable to enumerate USB device [ 931.633918][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.634004][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.020906][ T7775] usb 8-1: USB disconnect, device number 24 [ 932.187666][T10721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 932.191842][ T5800] Bluetooth: hci4: command tx timeout [ 932.247095][T10721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 932.297776][T10721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 932.416697][T10721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 933.629371][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.813'. [ 933.656292][T10893] chnl_net:caif_netlink_parms(): no params data found [ 933.684467][T10716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 933.733117][T10716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 933.779249][T10716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 933.964150][T10716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 934.270660][ T5800] Bluetooth: hci4: command tx timeout [ 934.325869][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.326045][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.326257][T10893] bridge_slave_0: entered allmulticast mode [ 934.329025][T10893] bridge_slave_0: entered promiscuous mode [ 934.415387][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.416720][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.416935][T10893] bridge_slave_1: entered allmulticast mode [ 934.419697][T10893] bridge_slave_1: entered promiscuous mode [ 934.564199][T10783] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 934.698946][T10783] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 934.786156][T10893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.903146][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.815'. [ 935.171290][T10893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.378674][ T5800] Bluetooth: hci4: command tx timeout [ 936.710032][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.877308][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.918641][T10783] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 937.964237][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.182479][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.728085][T10783] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 938.981979][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.982637][ T5800] Bluetooth: hci4: command tx timeout [ 939.030793][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.109519][T10893] team0: Port device team_slave_0 added [ 939.161888][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.212345][T10893] team0: Port device team_slave_1 added [ 939.276489][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.543349][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.432914][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.618465][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.715424][T10893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.715437][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.715451][T10893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.729486][T10893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.729503][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.729529][T10893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.101101][T10893] hsr_slave_0: entered promiscuous mode [ 941.102676][T10893] hsr_slave_1: entered promiscuous mode [ 941.103728][T10893] debugfs: 'hsr0' already exists in 'hsr' [ 941.103755][T10893] Cannot create hsr debugfs directory [ 942.445218][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.932789][T10721] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.955795][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.498460][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.498557][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.569443][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.569525][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.881094][T10716] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.964883][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.966426][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.966508][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.226645][ T37] audit: type=1326 audit(1760065330.584:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11014 comm="syz.7.822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e1c0eec9 code=0x0 [ 945.342042][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.343488][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.439596][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.646830][T11021] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 945.793075][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.793217][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.894052][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.894298][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.369971][ T7263] bridge_slave_1: left allmulticast mode [ 946.370000][ T7263] bridge_slave_1: left promiscuous mode [ 946.370851][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.447025][ T7263] bridge_slave_0: left allmulticast mode [ 946.447045][ T7263] bridge_slave_0: left promiscuous mode [ 946.447235][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.447086][T11054] netlink: 'syz.7.826': attribute type 4 has an invalid length. [ 948.471044][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.571230][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.633249][ T7263] bond0 (unregistering): Released all slaves [ 952.408689][ T7263] hsr_slave_0: left promiscuous mode [ 952.452272][ T7263] hsr_slave_1: left promiscuous mode [ 952.453222][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.511437][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.781490][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.804675][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.806293][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.818752][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.830918][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 953.057491][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.828'. [ 954.013878][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.571152][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.634426][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.639443][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.655582][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.679976][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.687046][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.688346][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 954.884334][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.910433][ T5117] Bluetooth: hci0: command tx timeout [ 955.194287][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.262053][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.301275][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.665014][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 955.801186][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 955.846022][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.028841][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.148617][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.423030][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.501279][T10893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 956.750523][ T5117] Bluetooth: hci2: command tx timeout [ 956.934302][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.991591][ T5117] Bluetooth: hci0: command tx timeout [ 957.024095][T10893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 957.061754][T10893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 957.331190][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.363563][T10893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 957.496387][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.901018][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.993484][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.304875][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.715495][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.868459][ T5117] Bluetooth: hci2: command tx timeout [ 959.071241][ T5117] Bluetooth: hci0: command tx timeout [ 959.287588][ T37] audit: type=1326 audit(1760065344.624:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.7.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e1c0eec9 code=0x0 [ 959.432250][T11091] chnl_net:caif_netlink_parms(): no params data found [ 959.654842][T11075] chnl_net:caif_netlink_parms(): no params data found [ 959.693402][T11156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 960.911531][ T5117] Bluetooth: hci2: command tx timeout [ 961.168654][ T5117] Bluetooth: hci0: command tx timeout [ 961.846100][T11179] Falling back ldisc for ttyprintk. [ 962.019021][T10893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.211741][ C1] vkms_vblank_simulate: vblank timer overrun [ 962.426199][ C1] vkms_vblank_simulate: vblank timer overrun [ 962.477404][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.170968][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.198638][ T5117] Bluetooth: hci2: command tx timeout [ 963.483048][T11091] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.483230][T11091] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.483408][T11091] bridge_slave_0: entered allmulticast mode [ 963.484878][T11091] bridge_slave_0: entered promiscuous mode [ 963.518116][T11091] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.518247][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.518490][T11091] bridge_slave_1: entered allmulticast mode [ 963.532882][T11091] bridge_slave_1: entered promiscuous mode [ 963.999677][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.133796][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.133922][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.134114][T11075] bridge_slave_0: entered allmulticast mode [ 964.135757][T11075] bridge_slave_0: entered promiscuous mode [ 964.173023][T11091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.326113][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.516351][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.516444][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.516625][T11075] bridge_slave_1: entered allmulticast mode [ 964.547962][T11075] bridge_slave_1: entered promiscuous mode [ 964.641952][T11091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.162229][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.218975][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.229516][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.238721][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.258790][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.645179][T11075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.647132][T11091] team0: Port device team_slave_0 added [ 965.656740][T10893] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.662424][T11075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.665185][T11091] team0: Port device team_slave_1 added [ 966.122391][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.131049][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.144832][T11075] team0: Port device team_slave_0 added [ 966.155787][T11091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.155802][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.155823][T11091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.167829][T11075] team0: Port device team_slave_1 added [ 966.212413][T11091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.212424][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.212439][T11091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.503077][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.503218][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.516106][T11075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.516133][T11075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.516157][T11075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.589498][T11075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.589510][T11075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.589524][T11075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.818565][T11091] hsr_slave_0: entered promiscuous mode [ 966.819523][T11091] hsr_slave_1: entered promiscuous mode [ 966.830776][T11091] debugfs: 'hsr0' already exists in 'hsr' [ 966.830804][T11091] Cannot create hsr debugfs directory [ 967.189169][T11214] orangefs_mount: mount request failed with -4 [ 967.310843][ T5800] Bluetooth: hci1: command tx timeout [ 967.322310][T11075] hsr_slave_0: entered promiscuous mode [ 967.323597][T11075] hsr_slave_1: entered promiscuous mode [ 967.324440][T11075] debugfs: 'hsr0' already exists in 'hsr' [ 967.324465][T11075] Cannot create hsr debugfs directory [ 967.687592][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.990743][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.699950][ C1] vkms_vblank_simulate: vblank timer overrun [ 969.114199][T11205] chnl_net:caif_netlink_parms(): no params data found [ 969.401642][ T5117] Bluetooth: hci1: command tx timeout [ 969.481493][T11241] orangefs_mount: mount request failed with -4 [ 969.862213][T11205] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.862416][T11205] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.862673][T11205] bridge_slave_0: entered allmulticast mode [ 969.867650][T11205] bridge_slave_0: entered promiscuous mode [ 969.898550][T11205] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.898680][T11205] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.898938][T11205] bridge_slave_1: entered allmulticast mode [ 969.923563][T11205] bridge_slave_1: entered promiscuous mode [ 970.186329][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.198802][ T7263] bridge_slave_1: left allmulticast mode [ 970.198829][ T7263] bridge_slave_1: left promiscuous mode [ 970.199130][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.852053][ T7263] bridge_slave_0: left allmulticast mode [ 970.852083][ T7263] bridge_slave_0: left promiscuous mode [ 970.852337][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.932882][ T7263] bridge_slave_1: left allmulticast mode [ 970.932903][ T7263] bridge_slave_1: left promiscuous mode [ 970.933054][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.022106][ T7263] bridge_slave_0: left allmulticast mode [ 971.022135][ T7263] bridge_slave_0: left promiscuous mode [ 971.022295][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.470834][ T5117] Bluetooth: hci1: command tx timeout [ 972.738571][T11267] orangefs_mount: mount request failed with -4 [ 972.911395][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.972089][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.993564][ T7263] bond0 (unregistering): Released all slaves [ 973.550700][ T5117] Bluetooth: hci1: command tx timeout [ 974.721914][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.802380][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.823038][ T7263] bond0 (unregistering): Released all slaves [ 974.872863][T11205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.125464][T11205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.127343][T10893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.505480][T11205] team0: Port device team_slave_0 added [ 975.528447][T11205] team0: Port device team_slave_1 added [ 975.701711][ T7263] hsr_slave_0: left promiscuous mode [ 975.740738][ T7263] hsr_slave_1: left promiscuous mode [ 975.741836][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.774367][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.940346][ T7263] hsr_slave_0: left promiscuous mode [ 975.961689][ T7263] hsr_slave_1: left promiscuous mode [ 975.962335][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.012838][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.448251][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.510851][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.674174][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.561135][T11286] Falling back ldisc for ttyprintk. [ 978.675530][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.874233][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.980566][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.273864][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.731319][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 979.765929][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.972648][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.301454][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 980.444255][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.500391][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.575303][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.683042][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.792438][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.847043][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.958279][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.014457][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.073275][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.147741][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.480538][ T7775] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 981.650527][ T7775] usb 8-1: Using ep0 maxpacket: 16 [ 981.654775][ T7775] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 981.654802][ T7775] usb 8-1: config 0 has no interface number 0 [ 981.657186][ T7775] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 981.657205][ T7775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.657215][ T7775] usb 8-1: Product: syz [ 981.657223][ T7775] usb 8-1: Manufacturer: syz [ 981.657231][ T7775] usb 8-1: SerialNumber: syz [ 981.711235][ T7775] usb 8-1: config 0 descriptor?? [ 981.727044][ T7775] hub 8-1:0.132: bad descriptor, ignoring hub [ 981.727087][ T7775] hub 8-1:0.132: probe with driver hub failed with error -5 [ 981.747203][ T7775] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input28 [ 986.051237][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 986.322030][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 986.591005][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.791809][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.795994][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.864938][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.020048][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.178581][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.236130][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.297753][ T7775] usb 8-1: USB disconnect, device number 25 [ 988.494765][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.686856][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.741763][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.788657][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.715394][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.783438][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.956850][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.139083][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.180344][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.239055][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.517479][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.630348][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.836555][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.006547][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.105312][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.206361][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.270922][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.348488][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 991.355476][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 991.356802][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 991.357872][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 991.359056][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.393055][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.477697][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.664371][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.198817][T11339] Process accounting resumed [ 992.348442][T11205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.348454][T11205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.348468][T11205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.370294][T11205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.370312][T11205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.370337][T11205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.599272][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.894402][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.112463][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.112723][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.474240][ T5800] Bluetooth: hci5: command tx timeout [ 993.567353][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.568156][T11349] Falling back ldisc for ttyprintk. [ 993.638050][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.715642][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.753168][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.927723][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.874'. [ 994.004755][T11205] hsr_slave_0: entered promiscuous mode [ 994.005584][T11205] hsr_slave_1: entered promiscuous mode [ 994.066154][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.122892][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.526373][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.579771][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.715439][T11091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 994.762681][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.846493][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.876861][T11091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 995.016980][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.169919][T11091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 996.057101][ T5800] Bluetooth: hci5: command tx timeout [ 996.057423][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.138289][T11091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 996.227418][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.322911][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.495982][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.547829][T11342] chnl_net:caif_netlink_parms(): no params data found [ 996.665391][T11075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 997.080720][T11075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 997.453293][T11075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 997.500398][T11075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 997.514913][T11378] Process accounting resumed [ 998.149921][ T5800] Bluetooth: hci5: command tx timeout [ 998.864908][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.922314][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.923297][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.923633][T11342] bridge_slave_0: entered allmulticast mode [ 998.925566][T11342] bridge_slave_0: entered promiscuous mode [ 999.145347][T11342] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.145475][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.145673][T11342] bridge_slave_1: entered allmulticast mode [ 999.148609][T11342] bridge_slave_1: entered promiscuous mode [ 999.747378][T11401] syz.7.881(11401): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 999.769448][T11342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.794512][T11342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.941059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.078247][T11404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1000.078734][T11404] block device autoloading is deprecated and will be removed. [ 1000.190229][ T5800] Bluetooth: hci5: command tx timeout [ 1000.390621][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.567944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.779456][T11342] team0: Port device team_slave_0 added [ 1000.805042][T11342] team0: Port device team_slave_1 added [ 1002.329374][T11342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.335498][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.335536][T11342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.794097][T11342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.794114][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.794168][T11342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.367129][T11415] mkiss: ax0: crc mode is auto. [ 1003.841108][T11342] hsr_slave_0: entered promiscuous mode [ 1003.842404][T11342] hsr_slave_1: entered promiscuous mode [ 1003.843373][T11342] debugfs: 'hsr0' already exists in 'hsr' [ 1003.843397][T11342] Cannot create hsr debugfs directory [ 1003.846267][T11205] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1003.904860][T11205] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1003.969666][T11205] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1004.084116][T11205] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1004.319388][T11091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.403597][ T7263] bridge_slave_1: left allmulticast mode [ 1004.403626][ T7263] bridge_slave_1: left promiscuous mode [ 1004.403850][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.471685][ T7263] bridge_slave_0: left allmulticast mode [ 1004.471706][ T7263] bridge_slave_0: left promiscuous mode [ 1004.471940][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.570049][T11431] autofs: Bad value for 'fd' [ 1004.577785][ T7263] bridge_slave_1: left allmulticast mode [ 1004.577803][ T7263] bridge_slave_1: left promiscuous mode [ 1004.577948][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.662567][ T7263] bridge_slave_0: left allmulticast mode [ 1004.662587][ T7263] bridge_slave_0: left promiscuous mode [ 1004.662743][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.251196][T11445] syz.7.892 uses obsolete (PF_INET,SOCK_PACKET) [ 1008.591173][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.672259][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.693143][ T7263] bond0 (unregistering): Released all slaves [ 1010.423128][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.481201][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.502960][ T7263] bond0 (unregistering): Released all slaves [ 1011.352541][T11091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.681825][T11453] trusted_key: encrypted_key: insufficient parameters specified [ 1012.440497][ T7263] hsr_slave_0: left promiscuous mode [ 1012.511330][ T7263] hsr_slave_1: left promiscuous mode [ 1012.511980][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.551584][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.810335][ T7263] hsr_slave_0: left promiscuous mode [ 1012.850621][ T7263] hsr_slave_1: left promiscuous mode [ 1012.851323][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.892656][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.193328][T11462] CIFS mount error: No usable UNC path provided in device string! [ 1014.193328][T11462] [ 1014.193392][T11462] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1014.696726][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.704050][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.716154][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.717243][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.717976][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1015.151871][ T5117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1015.154963][ T5117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1015.156143][ T5117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1015.157163][ T5117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1015.158215][ T5117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1015.220918][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 1015.521118][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 1016.830602][ T5117] Bluetooth: hci4: command tx timeout [ 1017.250752][ T5117] Bluetooth: hci6: command tx timeout [ 1018.930562][ T5117] Bluetooth: hci4: command tx timeout [ 1019.241060][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 1019.319143][ T5117] Bluetooth: hci6: command tx timeout [ 1019.492552][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 1020.994107][ T5117] Bluetooth: hci4: command tx timeout [ 1021.398225][ T5117] Bluetooth: hci6: command tx timeout [ 1022.194842][T11470] autofs: Bad value for 'fd' [ 1023.583369][ T5117] Bluetooth: hci4: command tx timeout [ 1023.583404][ T5117] Bluetooth: hci6: command tx timeout [ 1025.138546][T11481] Falling back ldisc for ttyprintk. [ 1026.674386][T11466] chnl_net:caif_netlink_parms(): no params data found [ 1026.832791][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.848715][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.916584][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.918525][T11342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1026.921470][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.931024][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.969195][T11500] autofs: Unknown parameter '0x0000000000000000' [ 1027.002008][T11464] chnl_net:caif_netlink_parms(): no params data found [ 1027.131151][T11342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1027.239412][T11342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1027.287797][T11342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1027.656679][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.656801][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.656959][T11466] bridge_slave_0: entered allmulticast mode [ 1027.658744][T11466] bridge_slave_0: entered promiscuous mode [ 1027.769146][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.769245][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.769392][T11466] bridge_slave_1: entered allmulticast mode [ 1027.772507][T11466] bridge_slave_1: entered promiscuous mode [ 1027.887362][T11502] orangefs_mount: mount request failed with -4 [ 1027.965070][T11464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.965191][T11464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.965329][T11464] bridge_slave_0: entered allmulticast mode [ 1027.966799][T11464] bridge_slave_0: entered promiscuous mode [ 1028.067389][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.905'. [ 1028.078510][T11464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.078700][T11464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.078943][T11464] bridge_slave_1: entered allmulticast mode [ 1028.085092][T11464] bridge_slave_1: entered promiscuous mode [ 1028.118563][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.209062][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.342124][ T5800] Bluetooth: hci0: command tx timeout [ 1029.598155][T11464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.792743][T11464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.863179][T11466] team0: Port device team_slave_0 added [ 1029.870973][ T5863] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1030.030366][ T5863] usb 8-1: Using ep0 maxpacket: 16 [ 1030.035504][T11466] team0: Port device team_slave_1 added [ 1030.037874][ T5863] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1030.037901][ T5863] usb 8-1: config 0 has no interface number 0 [ 1030.066152][ T5863] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1030.066183][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.066204][ T5863] usb 8-1: Product: syz [ 1030.066219][ T5863] usb 8-1: Manufacturer: syz [ 1030.066233][ T5863] usb 8-1: SerialNumber: syz [ 1030.102647][ T5863] usb 8-1: config 0 descriptor?? [ 1030.117943][ T5863] hub 8-1:0.132: bad descriptor, ignoring hub [ 1030.117968][ T5863] hub 8-1:0.132: probe with driver hub failed with error -5 [ 1030.136922][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input29 [ 1030.366285][T11464] team0: Port device team_slave_0 added [ 1030.471643][T11464] team0: Port device team_slave_1 added [ 1030.696769][T11466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.696781][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.696796][T11466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.863228][T11466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.863240][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.863255][T11466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.996775][T11464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.996787][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.996802][T11464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.487213][ T5800] Bluetooth: hci0: command tx timeout [ 1031.661108][T11464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.661122][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.661144][T11464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.954119][T11536] autofs: Unknown parameter '0x0000000000000000' [ 1032.782403][T11466] hsr_slave_0: entered promiscuous mode [ 1032.786554][T11466] hsr_slave_1: entered promiscuous mode [ 1032.787633][T11466] debugfs: 'hsr0' already exists in 'hsr' [ 1032.787658][T11466] Cannot create hsr debugfs directory [ 1033.375152][T11464] hsr_slave_0: entered promiscuous mode [ 1033.376046][T11464] hsr_slave_1: entered promiscuous mode [ 1033.376595][T11464] debugfs: 'hsr0' already exists in 'hsr' [ 1033.376617][T11464] Cannot create hsr debugfs directory [ 1033.508162][T11497] chnl_net:caif_netlink_parms(): no params data found [ 1033.550744][ T5800] Bluetooth: hci0: command tx timeout [ 1033.841271][T11557] autofs: Unknown parameter '0x0000000000000000' [ 1034.378055][ T5863] usb 8-1: USB disconnect, device number 26 [ 1034.777007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.897126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.968509][T11497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.968739][T11497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.968927][T11497] bridge_slave_0: entered allmulticast mode [ 1034.973046][T11497] bridge_slave_0: entered promiscuous mode [ 1035.018899][T11497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.019011][T11497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.019245][T11497] bridge_slave_1: entered allmulticast mode [ 1035.026670][T11497] bridge_slave_1: entered promiscuous mode [ 1035.550736][ T5912] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1035.630494][ T5800] Bluetooth: hci0: command tx timeout [ 1035.658035][T11497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.703069][ T5912] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1035.703142][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.703157][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.703168][ T5912] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1035.704341][ T5912] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1035.704365][ T5912] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1035.704376][ T5912] usb 8-1: Manufacturer: syz [ 1035.707982][ T5912] usb 8-1: config 0 descriptor?? [ 1035.926472][T11497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.122987][ T5912] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 1036.146173][ T5912] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1036.254726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.325687][ T5863] usb 8-1: USB disconnect, device number 27 [ 1036.329615][T11497] team0: Port device team_slave_0 added [ 1036.346880][T11342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.357567][T11497] team0: Port device team_slave_1 added [ 1036.639036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.684530][T11497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.684542][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.684556][T11497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.774146][T11497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.774163][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.774187][T11497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.815682][T11342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.272113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.344796][T11497] hsr_slave_0: entered promiscuous mode [ 1037.345649][T11497] hsr_slave_1: entered promiscuous mode [ 1037.346197][T11497] debugfs: 'hsr0' already exists in 'hsr' [ 1037.346216][T11497] Cannot create hsr debugfs directory [ 1037.401586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.414205][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.418373][ T7456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.651602][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.651745][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.826626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.908661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.477524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.903186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.953369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.000901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.239886][T11630] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.943'. [ 1039.352506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.425624][T11634] bridge_slave_1: left allmulticast mode [ 1039.425653][T11634] bridge_slave_1: left promiscuous mode [ 1039.425911][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.501928][T11634] bridge_slave_0: left allmulticast mode [ 1039.501958][T11634] bridge_slave_0: left promiscuous mode [ 1039.502223][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.989964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.073632][T11342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.077312][ T7263] bridge_slave_1: left allmulticast mode [ 1041.077339][ T7263] bridge_slave_1: left promiscuous mode [ 1041.077624][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.169804][ T7263] bridge_slave_0: left allmulticast mode [ 1041.169832][ T7263] bridge_slave_0: left promiscuous mode [ 1041.182258][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.255082][ T7263] bridge_slave_1: left allmulticast mode [ 1041.255102][ T7263] bridge_slave_1: left promiscuous mode [ 1041.255251][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.331816][ T7263] bridge_slave_0: left allmulticast mode [ 1041.331844][ T7263] bridge_slave_0: left promiscuous mode [ 1041.332109][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.403110][ T7263] bridge_slave_1: left allmulticast mode [ 1041.403131][ T7263] bridge_slave_1: left promiscuous mode [ 1041.403278][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.493115][ T7263] bridge_slave_0: left allmulticast mode [ 1041.493144][ T7263] bridge_slave_0: left promiscuous mode [ 1041.493389][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.771661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.914550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.975986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.039188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.102409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.321239][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.421136][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.484007][ T7263] bond0 (unregistering): Released all slaves [ 1042.532449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.654039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.712848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.740385][ T7775] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1042.777681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.893604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.955189][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.955222][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 1024 [ 1042.955246][ T7775] usb 8-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 1042.955258][ T7775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.958822][ T7775] usb 8-1: config 0 descriptor?? [ 1042.959971][T11671] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1043.119444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.193059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.290314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.383154][ T7775] thrustmaster 0003:044F:B300.000E: unknown main item tag 0x0 [ 1043.383194][ T7775] thrustmaster 0003:044F:B300.000E: item fetching failed at offset 3/7 [ 1043.383971][ T7775] thrustmaster 0003:044F:B300.000E: parse failed [ 1043.384041][ T7775] thrustmaster 0003:044F:B300.000E: probe with driver thrustmaster failed with error -22 [ 1043.603326][ T7775] usb 8-1: USB disconnect, device number 28 [ 1044.290991][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.411465][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.477204][ T7263] bond0 (unregistering): Released all slaves [ 1045.102915][T10657] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1045.262976][T10657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.263000][T10657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.263012][T10657] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1045.263039][T10657] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1045.263052][T10657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.266125][T10657] usb 8-1: config 0 descriptor?? [ 1045.360806][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.442914][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.502576][ T7263] bond0 (unregistering): Released all slaves [ 1045.709756][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.709797][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.709823][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.709849][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.709872][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.709895][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.709922][T10657] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1045.833255][T10657] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1045.954349][ T7775] usb 8-1: USB disconnect, device number 29 [ 1046.078348][T11342] veth0_vlan: entered promiscuous mode [ 1046.121667][T11342] veth1_vlan: entered promiscuous mode [ 1046.471107][ T7263] hsr_slave_0: left promiscuous mode [ 1046.511328][ T7263] hsr_slave_1: left promiscuous mode [ 1046.512237][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.551633][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.750778][ T7263] hsr_slave_0: left promiscuous mode [ 1046.791020][ T7263] hsr_slave_1: left promiscuous mode [ 1046.791843][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.832728][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.040226][ T7263] hsr_slave_0: left promiscuous mode [ 1047.080572][ T7263] hsr_slave_1: left promiscuous mode [ 1047.081243][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.118146][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.705715][T11705] loop7: detected capacity change from 0 to 7 [ 1047.850921][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 1048.022556][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 1048.149290][T11560] Dev loop7: unable to read RDB block 7 [ 1048.149321][T11560] loop7: unable to read partition table [ 1048.149469][T11560] loop7: partition table beyond EOD, truncated [ 1049.371093][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 1049.524800][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 1051.850988][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 1051.970925][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 1052.647989][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1052.669203][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1052.672981][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1052.674031][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1052.674745][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.857053][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.974'. [ 1053.650953][T11730] capability: warning: `syz.7.977' uses deprecated v2 capabilities in a way that may be insecure [ 1054.015702][T11742] netlink: 176 bytes leftover after parsing attributes in process `syz.7.979'. [ 1054.515370][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.515454][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.631811][T11712] chnl_net:caif_netlink_parms(): no params data found [ 1054.705048][ T5912] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1054.750243][ T5117] Bluetooth: hci1: command tx timeout [ 1054.890692][ T5912] usb 8-1: Using ep0 maxpacket: 32 [ 1054.893059][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.893114][ T5912] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.893141][ T5912] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.893162][ T5912] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1054.893189][ T5912] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1054.893219][ T5912] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1054.893247][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.902661][ T5912] usb 8-1: config 0 descriptor?? [ 1055.359537][ T5912] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1055.359576][ T5912] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1055.359604][ T5912] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1055.359632][ T5912] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1055.359660][ T5912] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1055.375353][ T5912] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1055.375638][ T5912] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 1055.437129][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.437317][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.437546][T11712] bridge_slave_0: entered allmulticast mode [ 1055.461349][T11712] bridge_slave_0: entered promiscuous mode [ 1055.465461][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.465627][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.465811][T11712] bridge_slave_1: entered allmulticast mode [ 1055.468471][T11712] bridge_slave_1: entered promiscuous mode [ 1055.588010][ C1] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 1055.789894][T10654] usb 8-1: USB disconnect, device number 30 [ 1055.837454][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.874543][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.159833][T11712] team0: Port device team_slave_0 added [ 1056.185983][T11712] team0: Port device team_slave_1 added [ 1056.409565][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.409583][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.409607][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.437675][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.437692][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.437718][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.445497][T11466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1056.554526][T11466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1056.662237][T11466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1056.763611][T11466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1056.832407][ T5117] Bluetooth: hci1: command tx timeout [ 1057.348285][T11712] hsr_slave_0: entered promiscuous mode [ 1057.349100][T11712] hsr_slave_1: entered promiscuous mode [ 1057.911596][T11464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1058.033520][T11464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1058.075019][T11464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1058.189386][T11464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1058.568859][T11859] netlink: 128 bytes leftover after parsing attributes in process `syz.7.991'. [ 1058.784073][T11866] overlayfs: failed to clone upperpath [ 1058.874107][T11497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1058.910249][ T5117] Bluetooth: hci1: command tx timeout [ 1059.233509][T11497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1059.290908][T11497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1059.581945][T11497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1060.169132][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.227939][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.273551][T11464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.275216][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.275339][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.361554][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.361705][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.450670][T11464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.599397][ T7263] bridge_slave_1: left allmulticast mode [ 1060.599424][ T7263] bridge_slave_1: left promiscuous mode [ 1060.599658][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.702298][ T7263] bridge_slave_0: left allmulticast mode [ 1060.702328][ T7263] bridge_slave_0: left promiscuous mode [ 1060.702554][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.759471][T11918] netlink: 182 bytes leftover after parsing attributes in process `syz.7.1004'. [ 1060.990611][ T5117] Bluetooth: hci1: command tx timeout [ 1062.511454][ T7263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.600872][ T7263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.622749][ T7263] bond0 (unregistering): Released all slaves [ 1062.678021][T11497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.750452][T11922] netlink: 'syz.7.1006': attribute type 10 has an invalid length. [ 1062.750473][T11922] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1006'. [ 1062.815320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.815455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.817878][T11922] veth1: entered allmulticast mode [ 1062.897867][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.898012][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.926491][T11924] fuse: Bad value for 'fd' [ 1063.082040][ T7263] hsr_slave_0: left promiscuous mode [ 1063.121415][ T7263] hsr_slave_1: left promiscuous mode [ 1063.122352][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.145026][T11934] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1012'. [ 1063.145041][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1012'. [ 1063.181822][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.199414][T11936] overlayfs: failed to clone upperpath [ 1063.259988][ T7263] veth1_vlan: left promiscuous mode [ 1063.263309][ T7263] veth0_vlan: left promiscuous mode [ 1065.166743][ T7263] team0 (unregistering): Port device team_slave_1 removed [ 1065.430917][ T7263] team0 (unregistering): Port device team_slave_0 removed [ 1068.017982][T11949] netlink: 'syz.7.1019': attribute type 10 has an invalid length. [ 1068.018006][T11949] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1019'. [ 1068.078259][T11949] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1068.088147][T11497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.123885][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.124089][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.185025][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.209005][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.781183][T11466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.089317][T11976] netlink: 'syz.7.1024': attribute type 10 has an invalid length. [ 1069.438337][T11464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.493186][T11712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1069.615719][T11466] veth0_vlan: entered promiscuous mode [ 1069.616890][T11712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1069.751173][T11712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1069.842963][T11712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1069.928310][T11466] veth1_vlan: entered promiscuous mode [ 1070.074556][T11497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.231312][T11466] veth0_macvtap: entered promiscuous mode [ 1070.311173][T11466] veth1_macvtap: entered promiscuous mode [ 1070.593503][T11466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.692958][T11466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.754993][ T7263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.794879][T11712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.795213][ T7263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.798694][ T7263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.852171][ T7263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.987605][T11464] veth0_vlan: entered promiscuous mode [ 1071.121715][T11712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.147660][T11464] veth1_vlan: entered promiscuous mode [ 1071.298141][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.298301][ T7456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.347020][ T37] audit: type=1326 audit(1760065457.699:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e1c0eec9 code=0x7ffc0000 [ 1071.347308][ T37] audit: type=1326 audit(1760065457.699:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e1c0eec9 code=0x7ffc0000 [ 1071.400489][ T37] audit: type=1326 audit(1760065457.759:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e1c0eec9 code=0x7ffc0000 [ 1071.400791][ T37] audit: type=1326 audit(1760065457.759:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e1c0eec9 code=0x7ffc0000 [ 1071.416343][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.416511][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.542900][ T7456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.542922][ T7456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.770680][T11464] veth0_macvtap: entered promiscuous mode [ 1071.946182][ T7263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.946203][ T7263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.008992][T11464] veth1_macvtap: entered promiscuous mode [ 1072.125109][T11497] veth0_vlan: entered promiscuous mode [ 1072.236898][T11497] veth1_vlan: entered promiscuous mode [ 1072.263197][T11464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.339426][T11464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.444554][ T160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.449069][ T160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.449295][ T160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.449483][ T160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.666668][T11497] veth0_macvtap: entered promiscuous mode [ 1072.838431][T11497] veth1_macvtap: entered promiscuous mode [ 1073.057551][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.057571][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.095083][T11497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.112627][T11712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.177203][T11497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.224271][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.224293][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.260830][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.283174][ T7456] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.318213][ T7263] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.548268][ T7263] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.182995][T11712] veth0_vlan: entered promiscuous mode [ 1074.266375][T11712] veth1_vlan: entered promiscuous mode [ 1074.288284][ T7263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.288304][ T7263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.436687][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.436710][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.508658][T11712] veth0_macvtap: entered promiscuous mode [ 1076.533727][T11712] veth1_macvtap: entered promiscuous mode [ 1076.614172][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1076.629762][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1076.639086][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1076.647316][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1076.648332][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1076.692379][T11712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.334858][T12119] fuse: Bad value for 'fd' [ 1078.951592][ T5117] Bluetooth: hci2: command tx timeout [ 1079.380346][T12122] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1080.062259][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.990717][ T5117] Bluetooth: hci2: command tx timeout [ 1081.018352][T11712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.019388][T12133] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1052'. [ 1081.108253][ T7263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.129248][ T7263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.133661][ T7263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.201732][ T7263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.392425][T10654] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1082.458861][T10654] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1082.458906][T10654] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1082.483256][T10654] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1082.483285][T10654] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.483302][T10654] usb 10-1: Product: syz [ 1082.483315][T10654] usb 10-1: Manufacturer: syz [ 1082.483330][T10654] usb 10-1: SerialNumber: syz [ 1082.487634][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.559727][ T5888] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 1082.559763][ T5888] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 1082.559791][ T5888] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 1082.607546][T10654] usb 10-1: config 0 descriptor?? [ 1082.609224][T12140] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1082.609358][T12140] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1082.626885][ T5888] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1082.864169][T12140] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1082.864309][T12140] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1083.167653][ T5117] Bluetooth: hci2: command tx timeout [ 1083.613992][T12160] ------------[ cut here ]------------ [ 1083.614016][T12160] WARNING: CPU: 1 PID: 12160 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1083.614151][T12160] Modules linked in: [ 1083.614180][T12160] CPU: 1 UID: 0 PID: 12160 Comm: syz.0.1060 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1083.614269][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.614288][T12160] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1083.614350][T12160] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 f1 08 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1083.614403][T12160] RSP: 0018:ffffc900055678e0 EFLAGS: 00010287 [ 1083.614456][T12160] RAX: ffffffff81b7e509 RBX: 0000000000000000 RCX: 0000000000080000 [ 1083.614473][T12160] RDX: ffffc90020fc1000 RSI: 00000000000007f8 RDI: 00000000000007f9 [ 1083.614488][T12160] RBP: ffffc90005567a70 R08: 0000000000000000 R09: 0000000000000000 [ 1083.614503][T12160] R10: dffffc0000000000 R11: fffffbfff1deecaf R12: dffffc0000000000 [ 1083.614520][T12160] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8881432d2791 [ 1083.614535][T12160] FS: 00007fec493646c0(0000) GS:ffff888126ccb000(0000) knlGS:0000000000000000 [ 1083.614554][T12160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1083.614570][T12160] CR2: 000000110c307a59 CR3: 000000003da20000 CR4: 00000000003526f0 [ 1083.614588][T12160] Call Trace: [ 1083.614604][T12160] [ 1083.614655][T12160] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1083.614808][T12160] ? __pfx_cgroup_freeze+0x10/0x10 [ 1083.614835][T12160] ? irqentry_exit+0x74/0x90 [ 1083.614883][T12160] ? lockdep_hardirqs_on+0x9c/0x150 [ 1083.614919][T12160] ? cgroup_freeze_write+0x139/0x1c0 [ 1083.614959][T12160] cgroup_freeze_write+0x156/0x1c0 [ 1083.615003][T12160] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1083.615031][T12160] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1083.615062][T12160] ? cgroup_file_write+0x383/0x740 [ 1083.615091][T12160] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1083.615124][T12160] cgroup_file_write+0x39e/0x740 [ 1083.615159][T12160] ? __pfx_cgroup_file_write+0x10/0x10 [ 1083.615201][T12160] ? __pfx_cgroup_file_write+0x10/0x10 [ 1083.615226][T12160] kernfs_fop_write_iter+0x3ad/0x540 [ 1083.615287][T12160] vfs_write+0x5d2/0xb40 [ 1083.615333][T12160] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1083.615363][T12160] ? __pfx_vfs_write+0x10/0x10 [ 1083.615384][T12160] ? irqentry_exit+0x74/0x90 [ 1083.615434][T12160] ksys_write+0x14b/0x260 [ 1083.615462][T12160] ? __pfx_ksys_write+0x10/0x10 [ 1083.615499][T12160] do_syscall_64+0xfa/0xfa0 [ 1083.615550][T12160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.615589][T12160] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1083.615611][T12160] ? clear_bhb_loop+0x60/0xb0 [ 1083.615637][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.615659][T12160] RIP: 0033:0x7fec4b13eec9 [ 1083.615679][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.615698][T12160] RSP: 002b:00007fec49364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1083.615720][T12160] RAX: ffffffffffffffda RBX: 00007fec4b396180 RCX: 00007fec4b13eec9 [ 1083.615736][T12160] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000c [ 1083.615750][T12160] RBP: 00007fec4b1c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1083.615763][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.615777][T12160] R13: 00007fec4b396218 R14: 00007fec4b396180 R15: 00007fff1f1ff858 [ 1083.615815][T12160] [ 1083.615835][T12160] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1083.615851][T12160] CPU: 1 UID: 0 PID: 12160 Comm: syz.0.1060 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1083.615876][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.615889][T12160] Call Trace: [ 1083.615898][T12160] [ 1083.615907][T12160] dump_stack_lvl+0x99/0x250 [ 1083.615951][T12160] ? __asan_memcpy+0x40/0x70 [ 1083.615990][T12160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1083.616016][T12160] ? __pfx__printk+0x10/0x10 [ 1083.616057][T12160] vpanic+0x237/0x6d0 [ 1083.616084][T12160] ? __pfx_vpanic+0x10/0x10 [ 1083.616118][T12160] panic+0xb9/0xc0 [ 1083.616137][T12160] ? __pfx_panic+0x10/0x10 [ 1083.616176][T12160] __warn+0x31b/0x4b0 [ 1083.616195][T12160] ? cgroup_freeze+0x80a/0xf90 [ 1083.616224][T12160] ? cgroup_freeze+0x80a/0xf90 [ 1083.616247][T12160] report_bug+0x2be/0x4f0 [ 1083.616325][T12160] ? cgroup_freeze+0x80a/0xf90 [ 1083.616351][T12160] ? cgroup_freeze+0x80a/0xf90 [ 1083.616375][T12160] ? cgroup_freeze+0x80c/0xf90 [ 1083.616400][T12160] handle_bug+0x84/0x160 [ 1083.616428][T12160] exc_invalid_op+0x1a/0x50 [ 1083.616455][T12160] asm_exc_invalid_op+0x1a/0x20 [ 1083.616474][T12160] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1083.616499][T12160] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 f1 08 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1083.616517][T12160] RSP: 0018:ffffc900055678e0 EFLAGS: 00010287 [ 1083.616535][T12160] RAX: ffffffff81b7e509 RBX: 0000000000000000 RCX: 0000000000080000 [ 1083.616550][T12160] RDX: ffffc90020fc1000 RSI: 00000000000007f8 RDI: 00000000000007f9 [ 1083.616564][T12160] RBP: ffffc90005567a70 R08: 0000000000000000 R09: 0000000000000000 [ 1083.616578][T12160] R10: dffffc0000000000 R11: fffffbfff1deecaf R12: dffffc0000000000 [ 1083.616595][T12160] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8881432d2791 [ 1083.616619][T12160] ? cgroup_freeze+0x809/0xf90 [ 1083.616658][T12160] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1083.616686][T12160] ? __pfx_cgroup_freeze+0x10/0x10 [ 1083.616713][T12160] ? irqentry_exit+0x74/0x90 [ 1083.616736][T12160] ? lockdep_hardirqs_on+0x9c/0x150 [ 1083.616772][T12160] ? cgroup_freeze_write+0x139/0x1c0 [ 1083.616810][T12160] cgroup_freeze_write+0x156/0x1c0 [ 1083.616843][T12160] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1083.616870][T12160] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1083.616899][T12160] ? cgroup_file_write+0x383/0x740 [ 1083.616928][T12160] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1083.616961][T12160] cgroup_file_write+0x39e/0x740 [ 1083.617001][T12160] ? __pfx_cgroup_file_write+0x10/0x10 [ 1083.617044][T12160] ? __pfx_cgroup_file_write+0x10/0x10 [ 1083.617068][T12160] kernfs_fop_write_iter+0x3ad/0x540 [ 1083.617105][T12160] vfs_write+0x5d2/0xb40 [ 1083.617136][T12160] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1083.617164][T12160] ? __pfx_vfs_write+0x10/0x10 [ 1083.617186][T12160] ? irqentry_exit+0x74/0x90 [ 1083.617234][T12160] ksys_write+0x14b/0x260 [ 1083.617262][T12160] ? __pfx_ksys_write+0x10/0x10 [ 1083.617299][T12160] do_syscall_64+0xfa/0xfa0 [ 1083.617323][T12160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.617342][T12160] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1083.617363][T12160] ? clear_bhb_loop+0x60/0xb0 [ 1083.617389][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.617409][T12160] RIP: 0033:0x7fec4b13eec9 [ 1083.617426][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.617443][T12160] RSP: 002b:00007fec49364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1083.617463][T12160] RAX: ffffffffffffffda RBX: 00007fec4b396180 RCX: 00007fec4b13eec9 [ 1083.617479][T12160] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000c [ 1083.617493][T12160] RBP: 00007fec4b1c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1083.617506][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.617520][T12160] R13: 00007fec4b396218 R14: 00007fec4b396180 R15: 00007fff1f1ff858 [ 1083.617557][T12160] [ 1083.617819][T12160] Kernel Offset: disabled