last executing test programs: 24m7.940194998s ago: executing program 32 (id=10): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r6, &(0x7f0000000200)=""/123, 0x9e, 0xc8) r8 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r8, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 23m52.91643201s ago: executing program 33 (id=25): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x1015e, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@bridge_newneigh={0x38, 0x1c, 0x20, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x10, 0x122, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 21m50.675478541s ago: executing program 3 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) io_uring_setup(0x5f45, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x231}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) ioprio_get$pid(0x0, r1) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21m48.850343517s ago: executing program 3 (id=157): open_tree(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000087000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001740)="3429f18737b0e80859a22627dd8be9a77eeb8eda3cc765cf21d80f748b17c82dfc9ec5e2323a7fa53dc5efdbfabef8d27999251212b0e1957a476296c62504df98c6f19b295a249f3205ab1796c9237c6570e53bad7bd6f697baca034d1424ea2fccac56", 0x64}], 0x2}, 0x44004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 21m47.589116817s ago: executing program 3 (id=158): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0xc0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 21m44.843151666s ago: executing program 3 (id=161): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) write$P9_RSTATu(r0, 0x0, 0x230) timer_create(0x2, 0x0, &(0x7f00000008c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000900)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x86263f5effa8cce3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000"], 0x23c}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000d00)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r2) timer_delete(r2) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfe}, 0x18) r5 = epoll_create(0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xfffffffd}}]}}}]}, 0x78}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) 21m29.187249339s ago: executing program 34 (id=161): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) write$P9_RSTATu(r0, 0x0, 0x230) timer_create(0x2, 0x0, &(0x7f00000008c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000900)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x86263f5effa8cce3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000"], 0x23c}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000d00)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r2) timer_delete(r2) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfe}, 0x18) r5 = epoll_create(0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xfffffffd}}]}}}]}, 0x78}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) 20m11.112647999s ago: executing program 4 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 20m9.914954676s ago: executing program 4 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 20m8.546318921s ago: executing program 4 (id=248): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r7}, &(0x7f00000002c0)=0x8) 20m6.722541819s ago: executing program 4 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 20m5.638764519s ago: executing program 4 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0xd, 0x2000000000004}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x119083, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r2 = io_uring_setup(0x7a42, &(0x7f0000003400)={0x0, 0xde76, 0x2, 0x3, 0x3c3}) shutdown(r1, 0x1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x2200) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) 20m4.402571249s ago: executing program 4 (id=253): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) 19m48.310924822s ago: executing program 35 (id=253): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) 12m21.083849497s ago: executing program 5 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000000800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) 12m19.382376384s ago: executing program 5 (id=543): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x87}, {0x3c}, {0x6}]}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x4f, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x51) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) 12m8.901551642s ago: executing program 5 (id=552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r0, 0x0, 0x0, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 12m7.424967542s ago: executing program 5 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 11m56.864088788s ago: executing program 5 (id=567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x8000, 0x200480) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x642c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) close_range(r8, r9, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x100000000000000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864010101ac1414aa28508c98", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200009078"], 0x0) 11m52.617950251s ago: executing program 5 (id=570): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x772c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000004c0)=@ethtool_stats}) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0xff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, 0x0, 0x0, 0x2c000811) 11m35.973143157s ago: executing program 36 (id=570): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x772c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000004c0)=@ethtool_stats}) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0xff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, 0x0, 0x0, 0x2c000811) 9m36.525067121s ago: executing program 7 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000300)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x7a00}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xffffffff, 0x1ff, {}, {0xee00}, 0x7, 0x2}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 9m34.634552737s ago: executing program 7 (id=689): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) getresuid(&(0x7f0000000100), 0x0, &(0x7f0000000200)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 9m33.023438415s ago: executing program 7 (id=692): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x1005, 0x0, 0x0, 0x4}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/tcp6\x00') read$FUSE(r3, &(0x7f000001e400)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b40000000040900"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) mkdir(0x0, 0x181) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x81, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8936, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 9m29.153524296s ago: executing program 7 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x6, 0x2, 0x9, 0x2, 0x1}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xc35}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000080)={0x8800, r1}, 0x0) write(r2, &(0x7f00000000c0)="f6c3d703004adc253b56f732d12590ef0e3509c8b625ecd8ae99d291000003d570bc57dbfbcf4ea61093001c22c13f7cb6070b95ac48fbfad676b07263863ab4d6f110c948fa6cbafeeb2e1fdc336203813fb251f4da5c8fc7fc718845e611d0ec484d30b4456797fae30ea4e6409eab271fe27014", 0x75) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 9m26.7611909s ago: executing program 7 (id=697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 9m24.620813087s ago: executing program 7 (id=699): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f00000021c0)=""/102384, 0x18ff0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x4, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5153, 0xa204, 0x4, &(0x7f0000002180)={[0x5]}, 0x8) close(r7) 9m8.468894477s ago: executing program 37 (id=699): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f00000021c0)=""/102384, 0x18ff0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x4, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5153, 0xa204, 0x4, &(0x7f0000002180)={[0x5]}, 0x8) close(r7) 6m45.484634247s ago: executing program 8 (id=773): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x210000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB="117090302f33ff9e2d317ab0a101686899c29a5edacad9b0ad023d8a31b6433e6b9197e30c5eece087550e0ed7fda9a5cf10f7d30ad12ae2d468ee6c13a0e5196dee1ccd895382d7307f31c2e3255a235544a82433852aa07d5475"]) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x10488) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 6m43.111158955s ago: executing program 8 (id=775): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0xecf86c37d53049cc) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) capset(0x0, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x10000000, 0x0, 0x1}) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000700), 0x47d, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f0000000080)='\x00', 0x1, 0xd1, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r4, 0xffff90f7, {0x2a12, 0x80010000, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x3, 0x10, "fe78fc179fd1e1dab6a7bd64c6a4b4e00d9683dda3af9ea80000000000000000000000deff0000000000000000080000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x3]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r8) 6m41.196276415s ago: executing program 8 (id=776): r0 = socket$kcm(0xa, 0xd, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004503"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000004040), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, &(0x7f0000004080)) 6m36.784778752s ago: executing program 8 (id=780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="94", 0x1}], 0x1}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 6m32.532306659s ago: executing program 8 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r3, 0x20, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)}}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x406f413, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="9500000000000000000000000000000085100000feffffff950000020000000019e2476a20601584c099d8a8b57b492fe5d580ae97b41c4f1e0000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x3fe, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) 6m27.356001735s ago: executing program 8 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="24001000fe04000600000020ce45b02066392241"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timer_create(0x1, &(0x7f0000000100)={0x0, 0x37, 0x1, @tid=r0}, &(0x7f0000000180)) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x9a7, 0xcc7d, 0x3, 0x74, 0x5, 0x7f}, &(0x7f00000000c0)=0x9c) syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/37, 0x25) getdents(r6, 0xfffffffffffffffd, 0xbb) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006280)={0x2020}, 0x2020) 6m12.026766196s ago: executing program 38 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="24001000fe04000600000020ce45b02066392241"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timer_create(0x1, &(0x7f0000000100)={0x0, 0x37, 0x1, @tid=r0}, &(0x7f0000000180)) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x9a7, 0xcc7d, 0x3, 0x74, 0x5, 0x7f}, &(0x7f00000000c0)=0x9c) syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/37, 0x25) getdents(r6, 0xfffffffffffffffd, 0xbb) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006280)={0x2020}, 0x2020) 5m21.441131683s ago: executing program 9 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m22.680958794s ago: executing program 1 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x12) getrlimit(0x5, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x3, 0xa}, {0x2}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x94, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{}, {0xdde}, @broadcast}, 0x7, @default, 0x4482, @val, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0xffff}}, @val={0x6, 0x2, 0x1}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0x5, 0x21, 0xb}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda}]]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000018080)='\n', 0x1, 0xa2b0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x1000, 0xfffffffc, 0xffffffff}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0xd, 0x0, &(0x7f00000002c0)="826ff2a38932974ab361c2e527", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timerfd_create(0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0xffffffff, 0xe0002, 0xffffffffffffffff, 0x7243, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x32}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 4m20.873094464s ago: executing program 1 (id=900): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000000800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) 4m17.822714379s ago: executing program 1 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m14.600912653s ago: executing program 1 (id=904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "3ad019a29ba70539", "a169b9bf49aa2b664fa0c8c0da28e95a189d30f0cd3fd898f9ce494cfda03c6e", "d77a24b9", "7a3f3d975ef43ae5"}, 0x38) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x9, 0x1) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7fffffff, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), &(0x7f00000005c0)={0x0, 0xfb, 0x85, 0x0, 0x5, "9603efd172d5a7cd02a49e2e73a5876e", "3bf5855e6bbca974c0a57557b7b1990736915f8cf8d008ba6a5b2c495c612064bb1940fe512b3f69b77d54bb89b02c11b1d44c0c9de05d44a15aa720107df3eb3801ad38bd01589ea048b52f29aa46d9efed8438775473408d2666193f6dda9bad02ff211a1c62ec70e8f30d18b94b4b"}, 0x85, 0x2) symlinkat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0x9362, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40090}}], 0x1, 0x0) 4m12.425618039s ago: executing program 1 (id=906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x6, 0x2, 0x9, 0x2, 0x1}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xc35}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000080)={0x8800, r1}, 0x0) write(r2, &(0x7f00000000c0)="f6c3d703004adc253b56f732d12590ef0e3509c8b625ecd8ae99d291000003d570bc57dbfbcf4ea61093001c22c13f7cb6070b95ac48fbfad676b07263863ab4d6f110c948fa6cbafeeb2e1fdc336203813fb251f4da5c8fc7fc718845e611d0ec484d30b4456797fae30ea4e6409eab271fe27014", 0x75) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/comedi4\x00', 0x100400, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240c0081}, 0x20000000) setitimer(0x2, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) mlockall(0x7) writev(0xffffffffffffffff, 0x0, 0x0) 4m11.580091193s ago: executing program 1 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000080003", @ANYRES32=r3, @ANYBLOB], 0x5c}}, 0x4000840) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000ff000000000095"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xfffffffd, 0x0, 0x200}, 0x10}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x519, 0x1, [@m_police={0x838, 0x1c, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/199, 0xc7, 0x2, 0x39}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f00000034c0)={0x2020}, 0xcac) 3m56.345901143s ago: executing program 39 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000080003", @ANYRES32=r3, @ANYBLOB], 0x5c}}, 0x4000840) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000ff000000000095"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xfffffffd, 0x0, 0x200}, 0x10}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x519, 0x1, [@m_police={0x838, 0x1c, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/199, 0xc7, 0x2, 0x39}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f00000034c0)={0x2020}, 0xcac) 2m13.790471342s ago: executing program 3 (id=920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000006c0)={'syztnl2\x00', r1, 0x700, 0x40, 0x9, 0x6, {{0x44, 0x4, 0x2, 0x14, 0x110, 0x68, 0x0, 0x40, 0x3e, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_addr={0x44, 0x2c, 0x38, 0x1, 0x8, [{@multicast2, 0x4}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x79b}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x9}, {@remote, 0x9}]}, @timestamp_prespec={0x44, 0x24, 0x85, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101, 0x7fffffff}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x44, 0xa6, 0x3, 0xd, [{@rand_addr=0x64012100, 0x4}, {@empty, 0x4}, {@rand_addr=0x64010100, 0x8}, {@multicast1, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x565}, {@rand_addr=0x64010102, 0xb}, {@loopback, 0x80000000}]}, @timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010100, 0x1}, {@broadcast, 0xff1}]}, @timestamp_prespec={0x44, 0x4c, 0x42, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x6}, {@local}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@rand_addr=0x64010101}, {@multicast2}, {@rand_addr=0x640100fe, 0xa}, {@multicast2, 0xbeb5}, {@multicast1, 0x800}]}]}}}}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x80c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x38, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "730342", 0x2, 0x4, 0xfe, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], "999c"}}}}}, 0x0) listxattr(0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000000) close(r7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 2m7.805680614s ago: executing program 3 (id=945): socket(0x400000000010, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) epoll_create1(0x80000) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1m51.942107406s ago: executing program 40 (id=945): socket(0x400000000010, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) epoll_create1(0x80000) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1m27.54788668s ago: executing program 6 (id=984): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b400000000000000611490000000000024000000f0ffffff95000000000000004a233e01c58b0a19f0a4283d611a4eddca3dd936b157035e8a8df2f5972fdd56a7d2ebde3b59867556d4c9573aa1f8d10404fd7399b23d315df8188205ab07e75680679c0bbe0698a4c156df2f0771fa6abd601f39c22507f72bbdde67c200dc5d6d4dfefacb533d0852caf604dbc2d38535c8a74cd3bc4054510f6318746efbaae625388cefc1a39158d3df2de578467445223cab3f8756317a99f6144774df38ca3e146cf5f2c3065c8972e66236d69ba8b481b77ce69defe0c1a673f68851d1e74ee9aaa069ce98b5d9de27576fa8ab7107ee3f074b50e2b2763d7b1cd48fca5c82c54161ea791c8cd220dcf61ace8eadc8d822ec818e619eba82c53907c3b53439015fb700f1e9b486906aadfc19302ee71937cedbcb10f2cc9565c60f80ad9ff6c26ee3b76dec436dd84c4c66b3443ce03fcac8ee8f8c8d312f53777063c2ee499261a77abfd9a58f398b82d07daa6425f7d1874593443f4bb636d06cc2"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r6, &(0x7f00000000c0)="842a0a6540b74e950304000e0580a7b6070d63e286a5cefe", 0x5ac) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'team0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "a31f1a447670f779917edc6dce66972a5a839e69301a0a3a3690054ba4754f94", "9c78f519b34db80934d40525bf281c371eda8f26b5328028375935a71a92bd87", "cf7b3ffe284937c03c2309e4feb7bcb9beba4705ad8cf3dede8e563bbd2d0e91", "ccc0a6e235fd695e33534094ca30c9802d594bb49d52c0092629a9fd8411c63b", "8213c07a7075163b21b26ac6ca7dcedb04a80dcdb9e2dba854bf316f3638b5aa", "cf6b75557c8ad3f3867069fe", 0xfffffffe, 0x2, 0x5, 0x9589, 0x80}}) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00"], 0xf0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x14000800) 1m23.177677598s ago: executing program 6 (id=988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc}) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m19.1046974s ago: executing program 6 (id=991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0x8, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) close_range(r4, 0xffffffffffffffff, 0x400000000000000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m16.846417904s ago: executing program 6 (id=993): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fd", 0x4b}], 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x7f, &(0x7f0000000200)=""/127, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x2, 0x6}], 0x10, 0xbd9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='f2fs_fiemap\x00', r0}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0xa27f, 0x8a) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setreuid(0x0, 0xee00) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1m12.51579426s ago: executing program 6 (id=995): socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12f, 0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) 1m7.044204577s ago: executing program 6 (id=1001): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r2 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4080, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{}], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x5}], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'a', ' *:* ', 'rwm\x00'}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 50.79005931s ago: executing program 41 (id=1001): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r2 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4080, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{}], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x5}], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'a', ' *:* ', 'rwm\x00'}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 21.134546102s ago: executing program 0 (id=1032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@code={0x1, 0x94, {"66baf80cb83053c480ef66bafc0ced66baf80cb8122ca188ef66bafc0c66b855ec66ef0f01c3670f21948fa91002b300000000f0219c7467000000c74424000a000000c744240200000000c7442406000000000f011c240fc79d2c000000b99a020000b8d8000000ba000000000f3066baf80cb880319e81ef66bafc0c66b8be0066ef"}}, @uexit={0x0, 0x18, 0x6d1768b}, @code={0x1, 0x53, {"67420f1c02660f3882950b00000080c90d0f01c20f200366baf80cb80a55298def66bafc0c66edf080619fa3430f06440f20c0350a000000440f22c066440fc77741"}}, @uexit={0x0, 0x18, 0xf2a}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x52, {"3647dd90020000000f01d14a0fc76a1db805000000b9000000000f01c1673e410f01cfc4a17d29f6660f38388600380000c4e27d39fa460f01c9f746009bf40000"}}, @code={0x1, 0x5c, {"360f204166bad00466edb8010000000f01c1c4011cc2e90766baf80cb8ea231e8eef66bafc0cb000eec481f97fbe68cf000067440f30c4416812ed26f0f790794a16c1400fc7b600800000"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x55, {"c4627d0eb8b1000000430f9066606766460fd628460fbf76a96726660f3882916b8900002e0f01c96467450f9782fa000000400f01df430f005e0dc4814deb91b205baf9"}}, @code={0x1, 0x42, {"f30f1b3766bad004b00deec461e5d4fa260f2080410f01343a0f01df260f062e0f0130c461e55f1d00000000c462fd3113"}}, @uexit={0x0, 0x18, 0x1000000000000000}, @code={0x1, 0x7e, {"c74424009a000000c744240204000000ff1c24440f20c03505000000440f22c03e2e0feb28c744240000000000c74424020a000000c7442406000000000f011424c442793042836566460fc7323640d35b0c66bad10466b80c0066ef66ba4200b0f7ee66baa000b80e000000ef"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x8000}, @code={0x1, 0x54, {"b9a30a00000f320f1ee445f4450f7875f13e0f0fe0a7c4e22991ac5201000000652e66420f38811b3666410f38358a06000000c441e8c29f000000000bf30fc7746843"}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0x1, 0x4e, {"470f01c444f48f486097658d3036660f3a08ea0065450f01c366b81d000f00d066baf80cb8d194a784ef66bafc0cb000ee36400fae210f9078060f20c0"}}, @code={0x1, 0x4f, {"c4227d5ab43d3bb400000f01cbc44119f5d0460f01f0b9800000c00f3235000800000f300f01cbb9840500000f32660f3835557146da3366b821000f00d8"}}, @code={0x1, 0x74, {"66b821010f00d066b80b000f00d0f466baf80cb874c15085ef66bafc0ced673ef2460f598901000000b9ec0b0000b80ff5f437bab79f8e5b0f300f20e035000001000f22e00f23adc74424002b010000c744240200000100ff2c24b8010000000f01c1"}}, @code={0x1, 0x64, {"66bad10466ed0f01df0f011e400f20dfedc74424001acd0000c744240259ff0000c7442406000000000f01142466baf80cb86c689885ef66bafc0ced470fa319f30f0966baf80cb876d1498def66bafc0c66ed"}}, @uexit={0x0, 0x18, 0xdcc4}, @uexit={0x0, 0x18, 0x67}, @code={0x1, 0x6e, {"0f01c426660f017ebb400f06c744240072000000c7442402ff000000ff2c2466440fc7b6008000002e2e2664410f3066b838010f00d8c481a456d448b805000100000000000f23d80f21f835800000600f23f8643e460fc7b79de315e6"}}], 0x5d1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@dellink={0x3c, 0x11, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x11000}, [@IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_PROP_LIST={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}]}, 0x3c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 18.13361415s ago: executing program 0 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000ec0836101f2400000000000000000000000080463142f746fea55e514e739f71d1aaf1d0214d53b348552cfa48a500c10d36d30da5505afbbfc32a32863e42dab07200000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd25, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}}, 0xf8}}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, 0x0, 0x0) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000240)) syz_emit_vhci(0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) 15.507024671s ago: executing program 0 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x8b) ioctl$sock_TIOCOUTQ(r8, 0x5411, 0x0) 10.218145441s ago: executing program 2 (id=1038): r0 = getpid() ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000010000000017006c03005f613000"], 0x0, 0x2d, 0x0, 0x1, 0x80000000}, 0x28) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x59}) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) r2 = syz_io_uring_setup(0x1f68, &(0x7f0000000740)={0x0, 0x0, 0x10100, 0xbff7fffd, 0x182}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000300)={0xa, 0x4}, 0xc) write$UHID_CREATE2(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='7'], 0x118) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r7, 0x5, 0x70bd2f, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffee}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000a040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r9 = syz_io_uring_setup(0x2e2c, &(0x7f0000001580)={0x0, 0x5d0b}, &(0x7f0000001600), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="448d060721b9e6bb51f2f6f205fd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TCSETS(r5, 0x5402, 0x0) 9.533425335s ago: executing program 0 (id=1039): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x40, 0x2, 0xca}, &(0x7f0000000300)=0x0, 0x0) unlink(0x0) syz_clone3(&(0x7f0000000540)={0x100000, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280), {0x2e}, 0x0, 0x0, &(0x7f00000003c0)=""/47, 0x0}, 0x58) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) connect$802154_dgram(r2, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) r6 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r6, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 8.209636432s ago: executing program 2 (id=1040): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) write$input_event(r0, 0x0, 0x0) 6.305358649s ago: executing program 2 (id=1041): setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000018c0)) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x6, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61c7b2986eb5e52829e7cb839300"}}) fcntl$setownex(r1, 0xf, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) r4 = socket$kcm(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r5, 0x1, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001640), 0x121040, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000001680)) close(r4) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.373825856s ago: executing program 0 (id=1042): unshare(0x2040400) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xdbc, 0xc5f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) epoll_create(0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x1c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x9, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e0000002"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55}, 0x20) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) getpgid(0x0) 3.438447565s ago: executing program 0 (id=1043): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x8) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x5) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000d0601020000000000000000050000070500010007000000050005000500000011000300686173683a69702c706f7274000000001300030068610002000000000000666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x8000000000000000, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) 3.39590541s ago: executing program 2 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x3136564e}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x5) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.541859024s ago: executing program 2 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 0s ago: executing program 2 (id=1045): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) kernel console output (not intermixed with test programs): etooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1074.417709][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1074.484611][ T991] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1074.629562][T10177] hsr_slave_0: entered promiscuous mode [ 1074.631326][T10177] hsr_slave_1: entered promiscuous mode [ 1074.632532][T10177] debugfs: 'hsr0' already exists in 'hsr' [ 1074.632560][T10177] Cannot create hsr debugfs directory [ 1074.637780][ T991] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1074.637811][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.744191][ T991] usb 3-1: config 0 descriptor?? [ 1075.119879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1075.171605][ T991] ath6kl: Unsupported hardware version: 0x0 [ 1075.218591][ T991] ath6kl: Failed to init ath6kl core: -22 [ 1075.219627][ T991] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1075.286619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1075.337648][T10160] hsr_slave_0: entered promiscuous mode [ 1075.339429][T10160] hsr_slave_1: entered promiscuous mode [ 1075.340640][T10160] debugfs: 'hsr0' already exists in 'hsr' [ 1075.340668][T10160] Cannot create hsr debugfs directory [ 1076.484578][ T59] Bluetooth: hci0: command tx timeout [ 1077.295768][ T7928] usb 3-1: USB disconnect, device number 9 [ 1077.683991][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.954401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.957940][ T59] Bluetooth: hci0: command tx timeout [ 1079.456499][ T1424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.243400][ T1424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.986815][ T59] Bluetooth: hci0: command tx timeout [ 1081.009430][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1081.028363][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1081.030080][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1081.034053][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1081.114697][T10390] kAFS: No cell specified [ 1081.672295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.796626][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1081.891647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.058464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.293025][ T1424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.465432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.740731][ T1424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.045893][ T5843] Bluetooth: hci0: command tx timeout [ 1083.122470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.647046][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1083.664161][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1083.680470][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1083.696864][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1083.742301][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1083.795993][T10370] chnl_net:caif_netlink_parms(): no params data found [ 1083.851123][ T5843] Bluetooth: hci1: command tx timeout [ 1084.993934][ T1424] bridge_slave_1: left allmulticast mode [ 1084.993975][ T1424] bridge_slave_1: left promiscuous mode [ 1084.994285][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.088351][ T1424] bridge_slave_0: left allmulticast mode [ 1085.088388][ T1424] bridge_slave_0: left promiscuous mode [ 1085.088703][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.151633][ T1424] bridge_slave_1: left allmulticast mode [ 1085.151671][ T1424] bridge_slave_1: left promiscuous mode [ 1085.151953][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.216783][ T1424] bridge_slave_0: left allmulticast mode [ 1085.216820][ T1424] bridge_slave_0: left promiscuous mode [ 1085.217146][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.288891][ T1424] bridge_slave_1: left allmulticast mode [ 1085.288931][ T1424] bridge_slave_1: left promiscuous mode [ 1085.289235][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.356510][ T1424] bridge_slave_0: left allmulticast mode [ 1085.356548][ T1424] bridge_slave_0: left promiscuous mode [ 1085.356891][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.436788][ T1424] bridge_slave_1: left allmulticast mode [ 1085.436834][ T1424] bridge_slave_1: left promiscuous mode [ 1085.437124][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.506538][ T1424] bridge_slave_0: left allmulticast mode [ 1085.506578][ T1424] bridge_slave_0: left promiscuous mode [ 1085.506888][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.580359][ T1424] bridge_slave_1: left allmulticast mode [ 1085.580398][ T1424] bridge_slave_1: left promiscuous mode [ 1085.580689][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.656557][ T1424] bridge_slave_0: left allmulticast mode [ 1085.656595][ T1424] bridge_slave_0: left promiscuous mode [ 1085.656917][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.728253][ T1424] bridge_slave_1: left allmulticast mode [ 1085.728279][ T1424] bridge_slave_1: left promiscuous mode [ 1085.728453][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.788148][ T1424] bridge_slave_0: left allmulticast mode [ 1085.788185][ T1424] bridge_slave_0: left promiscuous mode [ 1085.788505][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.844740][ T5843] Bluetooth: hci4: command tx timeout [ 1085.927634][ T5843] Bluetooth: hci1: command tx timeout [ 1086.214720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.415727][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.496120][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.559210][ T1424] bond0 (unregistering): Released all slaves [ 1086.776492][ T1424] bond0 (unregistering): Released all slaves [ 1087.924565][ T5843] Bluetooth: hci4: command tx timeout [ 1088.007813][ T5843] Bluetooth: hci1: command tx timeout [ 1088.868315][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.927586][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.950151][ T1424] bond0 (unregistering): Released all slaves [ 1089.156985][ T1424] bond0 (unregistering): Released all slaves [ 1089.362159][ T1424] bond0 (unregistering): Released all slaves [ 1089.645610][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.757506][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.822092][ T1424] bond0 (unregistering): Released all slaves [ 1090.004873][ T5843] Bluetooth: hci4: command tx timeout [ 1090.067607][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.087694][ T5843] Bluetooth: hci1: command tx timeout [ 1090.147199][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.210722][ T1424] bond0 (unregistering): Released all slaves [ 1090.446878][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.555816][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.631758][ T1424] bond0 (unregistering): Released all slaves [ 1090.690024][T10370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.690200][T10370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.690471][T10370] bridge_slave_0: entered allmulticast mode [ 1090.693745][T10370] bridge_slave_0: entered promiscuous mode [ 1090.790651][T10370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.790822][T10370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.791040][T10370] bridge_slave_1: entered allmulticast mode [ 1090.794227][T10370] bridge_slave_1: entered promiscuous mode [ 1091.408742][T10370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.676825][T10370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.096134][ T5843] Bluetooth: hci4: command tx timeout [ 1092.596726][T10370] team0: Port device team_slave_0 added [ 1093.105107][T10370] team0: Port device team_slave_1 added [ 1093.178692][T10388] chnl_net:caif_netlink_parms(): no params data found [ 1093.902661][T10370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.902679][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.902706][T10370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.956361][T10217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1094.114803][T10370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.114821][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.114848][T10370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.147887][T10217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1094.253958][T10217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1094.313147][T10217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1094.852697][T10370] hsr_slave_0: entered promiscuous mode [ 1094.854256][T10370] hsr_slave_1: entered promiscuous mode [ 1094.856030][T10370] debugfs: 'hsr0' already exists in 'hsr' [ 1094.856057][T10370] Cannot create hsr debugfs directory [ 1094.875291][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.875438][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.875699][T10388] bridge_slave_0: entered allmulticast mode [ 1094.879406][T10388] bridge_slave_0: entered promiscuous mode [ 1094.900022][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.900171][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.900803][T10388] bridge_slave_1: entered allmulticast mode [ 1094.915315][T10388] bridge_slave_1: entered promiscuous mode [ 1095.296964][T10388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.460958][T10403] chnl_net:caif_netlink_parms(): no params data found [ 1095.477479][T10388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.745839][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.767420][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.936407][ T1424] hsr_slave_0: left promiscuous mode [ 1095.954729][ T1424] hsr_slave_1: left promiscuous mode [ 1095.955841][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.955873][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.015926][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.015961][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.045743][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.087495][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.191442][ T1424] veth1_macvtap: left promiscuous mode [ 1096.191588][ T1424] veth0_macvtap: left promiscuous mode [ 1096.191935][ T1424] veth1_vlan: left promiscuous mode [ 1096.192177][ T1424] veth0_vlan: left promiscuous mode [ 1096.927402][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1097.119344][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1100.231149][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1100.251758][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1100.272970][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1100.286182][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1100.287249][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1101.195167][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1101.505585][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1102.435750][ T59] Bluetooth: hci2: command tx timeout [ 1104.494455][ T59] Bluetooth: hci2: command tx timeout [ 1105.457234][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1105.655557][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1106.564720][ T59] Bluetooth: hci2: command tx timeout [ 1106.874832][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1107.614671][T10388] team0: Port device team_slave_0 added [ 1107.728203][T10388] team0: Port device team_slave_1 added [ 1108.377733][T10388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.377753][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.377782][T10388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.644655][ T59] Bluetooth: hci2: command tx timeout [ 1108.830110][T10388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.830129][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.830159][T10388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.847509][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.847722][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.847932][T10403] bridge_slave_0: entered allmulticast mode [ 1108.850986][T10403] bridge_slave_0: entered promiscuous mode [ 1108.891982][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.892147][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.892370][T10403] bridge_slave_1: entered allmulticast mode [ 1108.896922][T10403] bridge_slave_1: entered promiscuous mode [ 1109.482801][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.518699][T10388] hsr_slave_0: entered promiscuous mode [ 1109.520314][T10388] hsr_slave_1: entered promiscuous mode [ 1109.521831][T10388] debugfs: 'hsr0' already exists in 'hsr' [ 1109.521857][T10388] Cannot create hsr debugfs directory [ 1109.547364][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.039361][T10403] team0: Port device team_slave_0 added [ 1110.130002][T10403] team0: Port device team_slave_1 added [ 1110.627624][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.627644][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.627671][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.731801][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.731820][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.731851][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.753639][T10370] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1110.852804][T10370] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1110.923207][T10370] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1111.146546][T10370] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1111.417127][T10403] hsr_slave_0: entered promiscuous mode [ 1111.418812][T10403] hsr_slave_1: entered promiscuous mode [ 1111.419869][T10403] debugfs: 'hsr0' already exists in 'hsr' [ 1111.419895][T10403] Cannot create hsr debugfs directory [ 1112.128070][T10426] chnl_net:caif_netlink_parms(): no params data found [ 1113.546669][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.546906][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.547176][T10426] bridge_slave_0: entered allmulticast mode [ 1113.550284][T10426] bridge_slave_0: entered promiscuous mode [ 1113.589377][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.589564][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.589834][T10426] bridge_slave_1: entered allmulticast mode [ 1113.593085][T10426] bridge_slave_1: entered promiscuous mode [ 1114.121452][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.191220][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.543746][T10426] team0: Port device team_slave_0 added [ 1114.606333][T10426] team0: Port device team_slave_1 added [ 1115.145228][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.145250][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.145280][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.149911][T10403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1115.214623][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.214641][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.214669][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.215772][T10403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1115.341445][T10403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1115.430835][T10403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1115.913810][T10426] hsr_slave_0: entered promiscuous mode [ 1115.916126][T10426] hsr_slave_1: entered promiscuous mode [ 1115.917144][T10426] debugfs: 'hsr0' already exists in 'hsr' [ 1115.917169][T10426] Cannot create hsr debugfs directory [ 1116.173178][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.173265][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.226930][T10388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1116.300034][T10388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1116.394461][T10388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1116.521962][T10388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1116.663494][T10370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.428092][T10370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.558224][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.558494][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.854671][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.854841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.969371][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.991695][ T1424] bridge_slave_1: left allmulticast mode [ 1118.991730][ T1424] bridge_slave_1: left promiscuous mode [ 1118.992027][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.096470][ T1424] bridge_slave_0: left allmulticast mode [ 1119.096506][ T1424] bridge_slave_0: left promiscuous mode [ 1119.096820][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.217451][ T1424] bridge_slave_1: left allmulticast mode [ 1119.217542][ T1424] bridge_slave_1: left promiscuous mode [ 1119.217895][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.286418][ T1424] bridge_slave_0: left allmulticast mode [ 1119.286455][ T1424] bridge_slave_0: left promiscuous mode [ 1119.286741][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.380754][ T1424] bridge_slave_1: left allmulticast mode [ 1119.380790][ T1424] bridge_slave_1: left promiscuous mode [ 1119.381112][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.466428][ T1424] bridge_slave_0: left allmulticast mode [ 1119.466466][ T1424] bridge_slave_0: left promiscuous mode [ 1119.466818][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.125798][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.225480][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.299514][ T1424] bond0 (unregistering): Released all slaves [ 1120.625871][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.722438][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.792793][ T1424] bond0 (unregistering): Released all slaves [ 1121.105805][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.185484][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.254048][ T1424] bond0 (unregistering): Released all slaves [ 1121.687790][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.757303][T10426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1121.836382][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.836714][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.862093][T10388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.862534][T10426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1121.926987][T10426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1122.003037][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.003309][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.004066][T10426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.424698][ T1424] hsr_slave_0: left promiscuous mode [ 1122.446924][ T1424] hsr_slave_1: left promiscuous mode [ 1122.448088][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.495957][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.640578][ T1424] hsr_slave_0: left promiscuous mode [ 1122.675364][ T1424] hsr_slave_1: left promiscuous mode [ 1122.676641][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.715698][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.834957][ T1424] hsr_slave_0: left promiscuous mode [ 1122.874963][ T1424] hsr_slave_1: left promiscuous mode [ 1122.876006][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.909326][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.839506][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1124.035953][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1125.725551][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1125.888362][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1127.368989][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1127.565625][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1128.382381][T10388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.498599][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.498785][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.621931][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.624830][ T8629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.839840][T10370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.503050][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.689145][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.783801][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.784627][ T8626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.891956][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.894662][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.177654][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.600869][T10388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.790776][T10370] veth0_vlan: entered promiscuous mode [ 1130.842947][T10370] veth1_vlan: entered promiscuous mode [ 1131.348154][T10370] veth0_macvtap: entered promiscuous mode [ 1131.434779][T10370] veth1_macvtap: entered promiscuous mode [ 1131.871967][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.897508][T10370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.977135][T10370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.124550][ T6400] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.174236][ T6400] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.228104][ T6400] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.248500][ T6400] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.456390][T10403] veth0_vlan: entered promiscuous mode [ 1132.898114][T10403] veth1_vlan: entered promiscuous mode [ 1133.157631][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.157652][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.160886][T10426] veth0_vlan: entered promiscuous mode [ 1133.268247][T10388] veth0_vlan: entered promiscuous mode [ 1133.409324][T10426] veth1_vlan: entered promiscuous mode [ 1133.440362][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.440387][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.481873][T10388] veth1_vlan: entered promiscuous mode [ 1133.590095][T10403] veth0_macvtap: entered promiscuous mode [ 1133.648977][T10403] veth1_macvtap: entered promiscuous mode [ 1133.716826][T10426] veth0_macvtap: entered promiscuous mode [ 1133.792408][T10426] veth1_macvtap: entered promiscuous mode [ 1133.815040][T10388] veth0_macvtap: entered promiscuous mode [ 1133.838374][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.882508][T10388] veth1_macvtap: entered promiscuous mode [ 1133.947951][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.992182][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.049587][ T8154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.053960][ T8154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.079829][ T8154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.091251][ T8154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.094071][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.207445][T10388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.317476][ T6202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.326915][ T6202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.371246][T10388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.371333][ T6202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.480024][ T8626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.761757][ T6202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.802191][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.856816][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.914508][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.016578][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1135.034987][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1135.070210][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1135.072442][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1135.073325][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.410023][ T1424] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.483353][ T8625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.483377][ T8625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.911248][ T1424] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.076627][ T6202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.076651][ T6202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.204670][ T59] Bluetooth: hci0: command tx timeout [ 1137.350437][ T1424] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.568379][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.568402][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.836043][ T1424] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.984683][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.984707][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.107193][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.107216][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.582666][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.582692][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.769564][T10606] netlink: 72 bytes leftover after parsing attributes in process `syz.2.743'. [ 1139.284869][ T59] Bluetooth: hci0: command tx timeout [ 1142.907500][ T59] Bluetooth: hci0: command tx timeout [ 1143.613158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.300729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.456944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.789116][T10618] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1144.790233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.862498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.027241][ T1424] bridge_slave_1: left allmulticast mode [ 1145.027280][ T1424] bridge_slave_1: left promiscuous mode [ 1145.027589][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.044578][ T59] Bluetooth: hci0: command tx timeout [ 1145.949361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.168008][ T1424] bridge_slave_0: left allmulticast mode [ 1146.168048][ T1424] bridge_slave_0: left promiscuous mode [ 1146.168390][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.502073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.688505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.601975][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 1150.051265][T10647] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1150.114282][ T5843] Bluetooth: hci0: command 0x0405 tx timeout [ 1150.616669][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1150.635979][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1150.638767][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1150.640328][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1150.641380][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.741346][T10662] Bluetooth: MGMT ver 1.23 [ 1153.741375][T10662] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 1153.764487][ T59] Bluetooth: hci1: command tx timeout [ 1154.859519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.648061][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1155.958011][ T59] Bluetooth: hci1: command tx timeout [ 1156.963624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.679896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.174692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.505399][ T59] Bluetooth: hci1: command tx timeout [ 1158.763391][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.942506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.129970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.465577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.564092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.594561][ T5843] Bluetooth: hci1: command tx timeout [ 1161.125635][T10700] rdma_op ffff888065890a70 conn xmit_rdma 0000000000000000 [ 1162.422978][T10698] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 1167.600016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1167.648773][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.559263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.627324][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.810393][ T1424] bond0 (unregistering): Released all slaves [ 1168.915940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.087719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.705112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.486976][T10729] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1173.827830][T10737] tmpfs: Unsupported parameter 'huge' [ 1178.200476][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.200565][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.131497][T10561] chnl_net:caif_netlink_parms(): no params data found [ 1182.661035][T10779] tmpfs: Unsupported parameter 'huge' [ 1184.396495][T10784] misc userio: No port type given on /dev/userio [ 1185.661506][T10791] Invalid logical block size (-28425) [ 1192.545033][T10817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.553594][T10817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.707658][T10561] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1195.145093][ T1424] hsr_slave_0: left promiscuous mode [ 1196.394616][ T1424] hsr_slave_1: left promiscuous mode [ 1196.401642][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.401918][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.595147][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.595186][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.035367][ T1424] veth1_macvtap: left promiscuous mode [ 1198.035517][ T1424] veth0_macvtap: left promiscuous mode [ 1198.035850][ T1424] veth1_vlan: left promiscuous mode [ 1198.036093][ T1424] veth0_vlan: left promiscuous mode [ 1200.211154][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1200.226400][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1200.237866][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1200.257745][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1200.261012][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1200.567814][T10858] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.567833][T10858] binder: 10854:10858 ioctl 4018620d 200000000040 returned -16 [ 1200.750961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.116916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.164208][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.236165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.236434][ T59] Bluetooth: hci0: command tx timeout [ 1203.444765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.510604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.935945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.790105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.997210][T10870] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1204.998531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.294451][ T5843] Bluetooth: hci0: command tx timeout [ 1205.560027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.628309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.701679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.769771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.834212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1205.987854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.052760][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.122460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.430162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.996903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.243492][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.318009][T10880] overlayfs: upper fs does not support tmpfile. [ 1207.368882][ T5843] Bluetooth: hci0: command tx timeout [ 1207.591950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.736067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.791837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1208.233547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1208.783648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.367499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.444526][ T59] Bluetooth: hci0: command tx timeout [ 1209.445608][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1209.487572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.541904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.593483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.676035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.755289][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1209.796768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.850029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.917523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.963969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.026903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.065600][T10884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1210.085624][T10884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1210.088951][T10884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1210.096075][T10884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1210.097716][T10884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1210.357104][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.419913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.482132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.529471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1211.009666][T10897] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1211.264799][T10884] Bluetooth: hci4: command 0x0406 tx timeout [ 1212.354239][ T5843] Bluetooth: hci5: command tx timeout [ 1214.446156][ T5843] Bluetooth: hci5: command tx timeout [ 1216.484614][ T5843] Bluetooth: hci5: command tx timeout [ 1216.695909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.702595][T10907] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 1216.702613][T10907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.800'. [ 1216.702622][T10907] netlink: 'syz.1.800': attribute type 2 has an invalid length. [ 1216.702629][T10907] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 1216.702636][T10907] netlink: 2 bytes leftover after parsing attributes in process `syz.1.800'. [ 1216.814186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.903884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.079421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.213272][T10884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1217.229996][T10884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1217.232173][T10884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1217.233625][T10884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1217.256110][T10884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1217.335768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.467328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.552252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.660008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.829676][T10893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 1217.829706][T10893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.796'. [ 1217.829718][T10893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 1217.945490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.452970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.527966][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.647515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.140023][T10884] Bluetooth: hci5: command tx timeout [ 1219.373495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.428369][T10884] Bluetooth: hci6: command tx timeout [ 1219.600312][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.604541][ T31] IPVS: starting estimator thread 0... [ 1219.783429][T10927] IPVS: using max 6 ests per chain, 14400 per kthread [ 1220.186415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.403866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.430425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.603488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.685504][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.076473][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.446698][T10884] Bluetooth: hci6: command tx timeout [ 1222.297034][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 1224.107796][T10884] Bluetooth: hci6: command tx timeout [ 1224.850174][T10967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1226.183240][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 1226.183287][ T5843] Bluetooth: hci6: command tx timeout [ 1226.684562][T10983] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.684692][T10983] binder: 10981:10983 ioctl 4018620d 200000000040 returned -16 [ 1227.005680][T10852] chnl_net:caif_netlink_parms(): no params data found [ 1227.593112][T10992] usb usb8: usbfs: process 10992 (syz.2.816) did not claim interface 0 before use [ 1228.000037][T10994] gfs2: Unexpected value for 'acl' [ 1228.031730][T10994] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1228.845509][T10988] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1228.957187][T10995] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1229.189487][T10913] chnl_net:caif_netlink_parms(): no params data found [ 1229.746622][ T5912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1230.208573][T10886] chnl_net:caif_netlink_parms(): no params data found [ 1230.214502][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 1230.217763][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.217807][ T5912] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1230.217828][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.223200][ T5912] usb 3-1: config 0 descriptor?? [ 1230.243488][ T5912] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1230.950270][ T1424] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.285764][T11006] block nbd1: shutting down sockets [ 1232.132519][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 1233.094833][ T8086] usb 3-1: USB disconnect, device number 10 [ 1234.250608][ T1424] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.859442][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.859614][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.859976][T10852] bridge_slave_0: entered allmulticast mode [ 1234.864618][T10852] bridge_slave_0: entered promiscuous mode [ 1234.927736][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.927909][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.928180][T10852] bridge_slave_1: entered allmulticast mode [ 1234.962247][T10852] bridge_slave_1: entered promiscuous mode [ 1236.189458][ T1424] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.542416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.766033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.381284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.828771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.911104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.261295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.269760][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.269845][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.520309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.662189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.834898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.896990][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.948630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.254939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.527327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.266513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.527579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.322058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.502956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.584224][ T1424] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.645557][T10913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.645730][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.646210][T10913] bridge_slave_0: entered allmulticast mode [ 1242.653185][T10913] bridge_slave_0: entered promiscuous mode [ 1242.696950][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.756230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.764785][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.764957][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.765222][T10886] bridge_slave_0: entered allmulticast mode [ 1242.768046][T10886] bridge_slave_0: entered promiscuous mode [ 1242.810608][T10913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.810792][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.811063][T10913] bridge_slave_1: entered allmulticast mode [ 1242.838529][T10913] bridge_slave_1: entered promiscuous mode [ 1242.847206][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.880232][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.880391][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.880661][T10886] bridge_slave_1: entered allmulticast mode [ 1242.927454][T10886] bridge_slave_1: entered promiscuous mode [ 1243.257806][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.389405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.793878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.958070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.310042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.611787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.624335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.683912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.848521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.223623][T11103] futex_wake_op: syz.2.837 tries to shift op by 144; fix this program [ 1247.540681][T10913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.544227][T10852] team0: Port device team_slave_0 added [ 1248.574178][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.599430][T10913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.625359][T10852] team0: Port device team_slave_1 added [ 1248.643038][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.055126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1250.533371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1250.669962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.228867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.478808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.833317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.973635][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.227610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.629363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.000923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.228293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.648060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1254.322735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.077010][T11149] befs: (nbd1): No write support. Marking filesystem read-only [ 1255.181587][T11149] block nbd1: Attempted send on invalid socket [ 1255.182779][T11149] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.281571][T11149] befs: (nbd1): unable to read superblock [ 1255.538230][T10913] team0: Port device team_slave_0 added [ 1255.567210][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.567230][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.567256][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.576409][T10886] team0: Port device team_slave_0 added [ 1255.889029][T10913] team0: Port device team_slave_1 added [ 1255.897821][T10886] team0: Port device team_slave_1 added [ 1255.984523][T10884] Bluetooth: hci2: command 0x0406 tx timeout [ 1259.666835][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1259.687451][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1259.689739][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1261.764458][T10884] Bluetooth: hci1: Opcode 0x0c23 failed: -110 [ 1263.067725][T10913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.067746][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.067777][T10913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.071410][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1263.071441][ T59] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1263.071713][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1265.926410][T11167] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1266.236820][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.236839][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.236867][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.238583][T10913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.238598][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.238624][T10913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.555541][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.555561][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.555592][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.468301][T11188] sp0: Synchronizing with TNC [ 1267.479573][ T37] audit: type=1326 audit(1756505231.641:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479632][ T37] audit: type=1326 audit(1756505231.651:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479677][ T37] audit: type=1326 audit(1756505231.661:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479721][ T37] audit: type=1326 audit(1756505231.661:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479762][ T37] audit: type=1326 audit(1756505231.671:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479805][ T37] audit: type=1326 audit(1756505231.671:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479848][ T37] audit: type=1326 audit(1756505231.791:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479891][ T37] audit: type=1326 audit(1756505231.791:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479935][ T37] audit: type=1326 audit(1756505231.831:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1267.479979][ T37] audit: type=1326 audit(1756505231.871:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f5aebe9 code=0x7ffc0000 [ 1268.212078][ T1424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.416332][T10913] hsr_slave_0: entered promiscuous mode [ 1268.431355][T10913] hsr_slave_1: entered promiscuous mode [ 1268.734905][ T1424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.837329][T10884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1268.849532][T10884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.857642][T10884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.868212][T10884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.870390][T10884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1269.249953][ T1424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.822630][ T1424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.018462][ T59] Bluetooth: hci0: command tx timeout [ 1271.070774][T11201] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1271.070846][T11201] CIFS mount error: No usable UNC path provided in device string! [ 1271.070846][T11201] [ 1271.071118][T11201] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1272.152180][T10884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1272.168953][T10884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1272.175956][T10884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1272.183623][T10884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1272.188416][T10884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1273.044544][ T59] Bluetooth: hci0: command tx timeout [ 1274.324548][ T59] Bluetooth: hci1: command tx timeout [ 1275.129968][ T59] Bluetooth: hci0: command tx timeout [ 1276.404650][ T59] Bluetooth: hci1: command tx timeout [ 1277.208627][ T59] Bluetooth: hci0: command tx timeout [ 1277.466676][T11231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1277.470689][T11231] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1278.501083][ T59] Bluetooth: hci1: command tx timeout [ 1280.581183][ T59] Bluetooth: hci1: command tx timeout [ 1280.736189][T10884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1280.741742][T10884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1280.751134][T10884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1280.765309][T10884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1280.781394][T10884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1281.831520][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.302463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.821032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.843956][T11242] block device autoloading is deprecated and will be removed. [ 1282.884833][ T59] Bluetooth: hci4: command tx timeout [ 1282.940054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.126902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.328784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.516158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.868135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.047876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.588969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.757145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.964621][ T59] Bluetooth: hci4: command tx timeout [ 1285.053908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.904326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.308248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.355942][ T1424] bridge_slave_1: left allmulticast mode [ 1286.356067][ T1424] bridge_slave_1: left promiscuous mode [ 1286.356282][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.930241][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.156080][ T59] Bluetooth: hci4: command tx timeout [ 1287.481524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.701622][ T1424] bridge_slave_0: left allmulticast mode [ 1287.701659][ T1424] bridge_slave_0: left promiscuous mode [ 1287.701951][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.772851][ T1424] bridge_slave_1: left allmulticast mode [ 1287.772887][ T1424] bridge_slave_1: left promiscuous mode [ 1287.773177][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.848112][T11265] syz.1.868 uses obsolete (PF_INET,SOCK_PACKET) [ 1287.858009][ T1424] bridge_slave_0: left allmulticast mode [ 1287.858044][ T1424] bridge_slave_0: left promiscuous mode [ 1287.858373][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.510426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.880491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.064094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.097395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.253682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.396953][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.427403][ T59] Bluetooth: hci4: command tx timeout [ 1289.498092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.096311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.325599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.718184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.758836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.849772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.031715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.176618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.932008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.187028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.254649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.322208][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.386045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.596433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.310670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.568118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.739140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.888952][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.654490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.745221][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.785554][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.831242][ T1424] bond0 (unregistering): Released all slaves [ 1294.932943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.003441][ T1424] bond0 (unregistering): Released all slaves [ 1295.054034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.112405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.186832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.249944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.354058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.440060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.498789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.559493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.628996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.690864][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.757412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.827210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.899948][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.959257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.116086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.169817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.228749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.019616][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.087626][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.114092][ T1424] bond0 (unregistering): Released all slaves [ 1297.185136][T11282] : entered promiscuous mode [ 1301.679501][T11306] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1302.011744][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.011831][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.531701][T11191] chnl_net:caif_netlink_parms(): no params data found [ 1314.489012][T10884] Bluetooth: hci4: command 0x0405 tx timeout [ 1315.718085][T11343] CIFS mount error: No usable UNC path provided in device string! [ 1315.718085][T11343] [ 1315.718944][T11343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1316.002111][T11349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.599584][T11356] tipc: Started in network mode [ 1318.599617][T11356] tipc: Node identity ac14140f, cluster identity 4711 [ 1318.603586][T11356] tipc: New replicast peer: 255.255.255.255 [ 1318.609509][T11356] tipc: Enabled bearer , priority 10 [ 1319.623100][ T31] tipc: Node number set to 2886997007 [ 1321.518245][T11378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.549944][T11414] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1326.453027][T11411] capability: warning: `syz.1.898' uses 32-bit capabilities (legacy support in use) [ 1328.472130][T11191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.472406][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.472703][T11191] bridge_slave_0: entered allmulticast mode [ 1328.506062][T11191] bridge_slave_0: entered promiscuous mode [ 1328.563239][T11191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.563409][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.563662][T11191] bridge_slave_1: entered allmulticast mode [ 1328.587470][T11191] bridge_slave_1: entered promiscuous mode [ 1328.622245][T11208] chnl_net:caif_netlink_parms(): no params data found [ 1328.736734][T11425] delete_channel: no stack [ 1329.073362][T11233] chnl_net:caif_netlink_parms(): no params data found [ 1329.311149][ T1424] hsr_slave_0: left promiscuous mode [ 1329.366462][ T1424] hsr_slave_1: left promiscuous mode [ 1329.368590][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.368623][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.424385][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.424610][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.594939][ T1424] hsr_slave_0: left promiscuous mode [ 1329.634755][ T1424] hsr_slave_1: left promiscuous mode [ 1329.636966][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.637000][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.685778][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.685816][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.233169][ T1424] veth1_macvtap: left promiscuous mode [ 1330.233317][ T1424] veth0_macvtap: left promiscuous mode [ 1330.233657][ T1424] veth1_vlan: left promiscuous mode [ 1330.233889][ T1424] veth0_vlan: left promiscuous mode [ 1331.516062][ T1424] veth1_macvtap: left promiscuous mode [ 1331.516205][ T1424] veth0_macvtap: left promiscuous mode [ 1331.516550][ T1424] veth1_vlan: left promiscuous mode [ 1331.519423][ T1424] veth0_vlan: left promiscuous mode [ 1331.591380][T10884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1331.602664][T10884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1331.610285][T10884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1331.612049][T10884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1331.613348][T10884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1333.787588][ T59] Bluetooth: hci0: command tx timeout [ 1334.976553][T10884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1334.983718][T10884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1335.001835][T10884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1335.018803][T10884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1335.023947][T10884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1335.850017][ T59] Bluetooth: hci0: command tx timeout [ 1337.124707][ T59] Bluetooth: hci5: command tx timeout [ 1337.924594][ T59] Bluetooth: hci0: command tx timeout [ 1338.016283][T11469] binder: BINDER_SET_CONTEXT_MGR already set [ 1338.016405][T11469] binder: 11465:11469 ioctl 4018620d 200000000040 returned -16 [ 1338.678734][T10884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1338.729124][T10884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1338.744570][T10884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1338.748090][T10884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1338.749523][T10884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1339.214319][ T59] Bluetooth: hci5: command tx timeout [ 1340.024605][ T59] Bluetooth: hci0: command tx timeout [ 1340.804836][ T59] Bluetooth: hci6: command tx timeout [ 1342.143613][ T59] Bluetooth: hci5: command tx timeout [ 1342.897979][ T59] Bluetooth: hci6: command tx timeout [ 1343.268737][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1343.635377][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1344.184387][ T59] Bluetooth: hci5: command tx timeout [ 1344.964402][ T59] Bluetooth: hci6: command tx timeout [ 1346.026116][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1346.026169][ T37] audit: type=1804 audit(1756505310.651:31): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.914" name="/newroot/432/file1" dev="fuse" ino=1 res=1 errno=0 [ 1346.026458][ T37] audit: type=1800 audit(1756505310.661:32): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.914" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1346.026820][ T37] audit: type=1800 audit(1756505310.661:33): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.914" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1347.044396][ T59] Bluetooth: hci6: command tx timeout [ 1348.181686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.284556][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.349568][T11507] hub 8-0:1.0: USB hub found [ 1348.356479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.399611][T11507] hub 8-0:1.0: 1 port detected [ 1348.402763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.535305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.609930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.818695][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.921854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.259203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.292337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.416482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.188767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.352159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.411278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.496868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.614109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.670847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.734675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.775218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.902166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.938600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.982603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.076105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.160013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.397506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.432429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.555014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.583846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.664883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.783499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.018195][T11519] loop2: detected capacity change from 0 to 7 [ 1352.026298][T11519] loop2: [ 1352.026329][T11519] loop2: partition table partially beyond EOD, truncated [ 1352.165904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.427052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.765391][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1352.769010][T10884] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1352.840225][T10884] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1352.842180][T10884] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1352.844073][T10884] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1352.854789][T10884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1352.992442][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.992479][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.992521][ T5926] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1352.992545][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.087140][ T5926] usb 3-1: config 0 descriptor?? [ 1354.305759][ T5926] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 1354.305835][ T5926] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 1354.305853][ T5926] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 1354.305913][ T5926] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 1354.306033][ T5926] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 1354.354887][ T5926] usb 3-1: USB disconnect, device number 11 [ 1354.887706][T10884] Bluetooth: hci7: command tx timeout [ 1356.978667][T10884] Bluetooth: hci7: command tx timeout [ 1358.918584][T11541] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1359.046269][T10884] Bluetooth: hci7: command tx timeout [ 1360.469831][ T59] Bluetooth: hci0: command 0x080f tx timeout [ 1361.319314][ T59] Bluetooth: hci7: command tx timeout [ 1361.934007][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.934114][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.032472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.205195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.297167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.362646][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.464634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.514388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.629218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.752777][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.248456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.290915][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1364.330092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.850708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.345249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.502331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.024660][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1366.282057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.627236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.793024][T11579] trusted_key: syz.2.931 sent an empty control message without MSG_MORE. [ 1367.304811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.671664][ C0] vkms_vblank_simulate: vblank timer overrun [ 1373.389109][T11595] vivid-005: kernel_thread() failed [ 1374.815111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.212245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.253280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.036161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.759033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.803513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.858009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.909071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1376.980844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1377.041547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1377.977153][T11468] netlink: 800 bytes leftover after parsing attributes in process `syz.1.908'. [ 1377.977178][T11468] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.908'. [ 1378.412072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.712038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.809660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.981080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.096988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.182872][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.208579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.512103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.626146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.675022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.807424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.157823][T11454] chnl_net:caif_netlink_parms(): no params data found [ 1381.307547][T11474] chnl_net:caif_netlink_parms(): no params data found [ 1381.333327][T11440] chnl_net:caif_netlink_parms(): no params data found [ 1381.739714][T11527] chnl_net:caif_netlink_parms(): no params data found [ 1382.390524][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.390774][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.391039][T11454] bridge_slave_0: entered allmulticast mode [ 1382.417977][T11454] bridge_slave_0: entered promiscuous mode [ 1382.620062][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.620232][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.620539][T11454] bridge_slave_1: entered allmulticast mode [ 1382.646251][T11454] bridge_slave_1: entered promiscuous mode [ 1382.957430][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.957623][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.957886][T11474] bridge_slave_0: entered allmulticast mode [ 1382.961231][T11474] bridge_slave_0: entered promiscuous mode [ 1382.994462][T11440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.994624][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.994934][T11440] bridge_slave_0: entered allmulticast mode [ 1382.998986][T11440] bridge_slave_0: entered promiscuous mode [ 1383.154553][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.154715][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.155032][T11474] bridge_slave_1: entered allmulticast mode [ 1383.158361][T11474] bridge_slave_1: entered promiscuous mode [ 1383.268224][T11440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.268445][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.268696][T11440] bridge_slave_1: entered allmulticast mode [ 1383.272220][T11440] bridge_slave_1: entered promiscuous mode [ 1383.288972][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.573010][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.754589][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.754754][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.755076][T11527] bridge_slave_0: entered allmulticast mode [ 1383.760204][T11527] bridge_slave_0: entered promiscuous mode [ 1383.974017][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.986396][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.986564][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.986868][T11527] bridge_slave_1: entered allmulticast mode [ 1383.990780][T11527] bridge_slave_1: entered promiscuous mode [ 1384.007360][T11440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.171489][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.185507][T11440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.189714][T11454] team0: Port device team_slave_0 added [ 1384.488790][T11454] team0: Port device team_slave_1 added [ 1384.498194][T11527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.024861][T11527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.030306][T11474] team0: Port device team_slave_0 added [ 1385.033493][T11440] team0: Port device team_slave_0 added [ 1385.439449][T11440] team0: Port device team_slave_1 added [ 1385.452994][T11474] team0: Port device team_slave_1 added [ 1385.538173][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.538193][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.538224][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.875828][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.875847][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.875878][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.881675][T11527] team0: Port device team_slave_0 added [ 1386.248126][T11527] team0: Port device team_slave_1 added [ 1386.249845][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.249860][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.249889][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.317652][T11440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.317670][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.317701][T11440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.562224][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.562244][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.562273][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.564025][T11440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.564040][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.564068][T11440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.035443][ T1424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.104195][T11527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.104756][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.104784][T11527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.231491][T11527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.231505][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.231521][T11527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.244427][T11454] hsr_slave_0: entered promiscuous mode [ 1387.245818][T11454] hsr_slave_1: entered promiscuous mode [ 1387.246744][T11454] debugfs: 'hsr0' already exists in 'hsr' [ 1387.246768][T11454] Cannot create hsr debugfs directory [ 1387.622262][ T1424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.955643][T11474] hsr_slave_0: entered promiscuous mode [ 1387.957336][T11474] hsr_slave_1: entered promiscuous mode [ 1387.958442][T11474] debugfs: 'hsr0' already exists in 'hsr' [ 1387.958469][T11474] Cannot create hsr debugfs directory [ 1387.995586][T11440] hsr_slave_0: entered promiscuous mode [ 1387.997382][T11440] hsr_slave_1: entered promiscuous mode [ 1387.999506][T11440] debugfs: 'hsr0' already exists in 'hsr' [ 1387.999535][T11440] Cannot create hsr debugfs directory [ 1388.281568][ T1424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.022838][ T1424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.075956][T11527] hsr_slave_0: entered promiscuous mode [ 1389.077651][T11527] hsr_slave_1: entered promiscuous mode [ 1389.078770][T11527] debugfs: 'hsr0' already exists in 'hsr' [ 1389.078797][T11527] Cannot create hsr debugfs directory [ 1391.231530][ T1424] bridge_slave_1: left allmulticast mode [ 1391.231567][ T1424] bridge_slave_1: left promiscuous mode [ 1391.231868][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.308398][T10884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1391.323641][T10884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1391.326699][T10884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1391.327849][T10884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1391.331413][T10884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1391.342195][ T1424] bridge_slave_0: left allmulticast mode [ 1391.342228][ T1424] bridge_slave_0: left promiscuous mode [ 1391.342516][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.453438][ T1424] bridge_slave_1: left allmulticast mode [ 1391.453476][ T1424] bridge_slave_1: left promiscuous mode [ 1391.453824][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.507956][ T1424] bridge_slave_0: left allmulticast mode [ 1391.507994][ T1424] bridge_slave_0: left promiscuous mode [ 1391.508332][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.579835][ T1424] bridge_slave_1: left allmulticast mode [ 1391.579873][ T1424] bridge_slave_1: left promiscuous mode [ 1391.580218][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.639241][ T1424] bridge_slave_0: left allmulticast mode [ 1391.639277][ T1424] bridge_slave_0: left promiscuous mode [ 1391.639607][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.700094][ T1424] bridge_slave_1: left allmulticast mode [ 1391.700134][ T1424] bridge_slave_1: left promiscuous mode [ 1391.700441][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.756701][ T1424] bridge_slave_0: left allmulticast mode [ 1391.756743][ T1424] bridge_slave_0: left promiscuous mode [ 1391.757055][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.849399][ T1424] bridge_slave_1: left allmulticast mode [ 1391.849434][ T1424] bridge_slave_1: left promiscuous mode [ 1391.849674][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.926961][ T1424] bridge_slave_0: left allmulticast mode [ 1391.926999][ T1424] bridge_slave_0: left promiscuous mode [ 1391.927306][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.457879][ T1424] bond0 (unregistering): Released all slaves [ 1393.444659][ T59] Bluetooth: hci0: command tx timeout [ 1394.665665][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.726784][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.767545][ T1424] bond0 (unregistering): Released all slaves [ 1395.015424][ T1424] bond0 (unregistering): Released all slaves [ 1395.209677][ T1424] bond0 (unregistering): Released all slaves [ 1395.524373][ T59] Bluetooth: hci0: command tx timeout [ 1395.565364][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.675954][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.754997][ T1424] bond0 (unregistering): Released all slaves [ 1395.907212][T10884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1395.958636][T10884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1395.961684][T10884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1395.963134][T10884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1395.979044][T10884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1396.195580][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.315373][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.415390][ T1424] bond0 (unregistering): Released all slaves [ 1396.633259][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1396.649744][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1396.652955][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1396.669419][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1396.670247][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1396.865654][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.945759][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.009485][ T1424] bond0 (unregistering): Released all slaves [ 1397.504691][ T1424] : left promiscuous mode [ 1397.614419][T10884] Bluetooth: hci0: command tx timeout [ 1398.087633][T10884] Bluetooth: hci1: command tx timeout [ 1398.844415][T10884] Bluetooth: hci2: command tx timeout [ 1399.684942][ T59] Bluetooth: hci0: command tx timeout [ 1400.167706][T10884] Bluetooth: hci1: command tx timeout [ 1400.895026][T10884] Bluetooth: hci2: command tx timeout [ 1402.251187][T10884] Bluetooth: hci1: command tx timeout [ 1402.594566][ T1424] hsr_slave_0: left promiscuous mode [ 1402.627795][ T1424] hsr_slave_1: left promiscuous mode [ 1402.628875][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.628907][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.667718][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.667755][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.854099][ T1424] hsr_slave_0: left promiscuous mode [ 1402.864714][ T1424] hsr_slave_1: left promiscuous mode [ 1402.865425][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.926751][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.947480][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.964605][T10884] Bluetooth: hci2: command tx timeout [ 1402.985854][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.006417][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.142011][ T1424] veth1_macvtap: left promiscuous mode [ 1403.142157][ T1424] veth0_macvtap: left promiscuous mode [ 1403.142500][ T1424] veth1_vlan: left promiscuous mode [ 1403.142740][ T1424] veth0_vlan: left promiscuous mode [ 1404.347883][T10884] Bluetooth: hci1: command tx timeout [ 1405.044711][T10884] Bluetooth: hci2: command tx timeout [ 1406.625649][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1406.935889][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1411.637043][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1411.835215][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1412.392487][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1412.460404][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1412.466432][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1412.485052][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1412.498496][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1413.075516][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1413.255547][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1414.285290][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1414.455437][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1414.580057][ T59] Bluetooth: hci4: command tx timeout [ 1415.153412][T11645] chnl_net:caif_netlink_parms(): no params data found [ 1415.171364][T11641] chnl_net:caif_netlink_parms(): no params data found [ 1415.188260][T11638] chnl_net:caif_netlink_parms(): no params data found [ 1416.644666][ T59] Bluetooth: hci4: command tx timeout [ 1417.057122][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.057393][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.057620][T11645] bridge_slave_0: entered allmulticast mode [ 1417.062278][T11645] bridge_slave_0: entered promiscuous mode [ 1417.102564][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.102731][T11641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.102969][T11641] bridge_slave_0: entered allmulticast mode [ 1417.107985][T11641] bridge_slave_0: entered promiscuous mode [ 1417.425259][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.425455][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.425735][T11638] bridge_slave_0: entered allmulticast mode [ 1417.429062][T11638] bridge_slave_0: entered promiscuous mode [ 1417.432164][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.432328][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.432544][T11645] bridge_slave_1: entered allmulticast mode [ 1417.458529][T11645] bridge_slave_1: entered promiscuous mode [ 1417.482456][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.482639][T11641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.482922][T11641] bridge_slave_1: entered allmulticast mode [ 1417.489561][T11641] bridge_slave_1: entered promiscuous mode [ 1417.514902][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.515050][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.515331][T11638] bridge_slave_1: entered allmulticast mode [ 1417.526278][T11638] bridge_slave_1: entered promiscuous mode [ 1418.311793][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.332305][T11641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.352431][T11638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.361679][T11641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.381363][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.396703][T11638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.724603][ T59] Bluetooth: hci4: command tx timeout [ 1419.257825][T11641] team0: Port device team_slave_0 added [ 1419.265871][T11645] team0: Port device team_slave_0 added [ 1419.277768][T11638] team0: Port device team_slave_0 added [ 1419.282396][T11641] team0: Port device team_slave_1 added [ 1419.288462][T11645] team0: Port device team_slave_1 added [ 1419.291681][T11638] team0: Port device team_slave_1 added [ 1420.187769][T11641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.187789][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.187819][T11641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.190752][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.190767][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.190795][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.193648][T11638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.193661][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.193689][T11638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.232978][T11641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.232995][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.233020][T11641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.236164][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.236177][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.236202][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.237876][T11638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.237887][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.237910][T11638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.805177][ T59] Bluetooth: hci4: command tx timeout [ 1421.280221][T11641] hsr_slave_0: entered promiscuous mode [ 1421.281840][T11641] hsr_slave_1: entered promiscuous mode [ 1421.328422][T11645] hsr_slave_0: entered promiscuous mode [ 1421.330060][T11645] hsr_slave_1: entered promiscuous mode [ 1421.331109][T11645] debugfs: 'hsr0' already exists in 'hsr' [ 1421.331134][T11645] Cannot create hsr debugfs directory [ 1421.365689][T11638] hsr_slave_0: entered promiscuous mode [ 1421.367303][T11638] hsr_slave_1: entered promiscuous mode [ 1421.368401][T11638] debugfs: 'hsr0' already exists in 'hsr' [ 1421.368427][T11638] Cannot create hsr debugfs directory [ 1421.369060][T11658] chnl_net:caif_netlink_parms(): no params data found [ 1422.665800][T11658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.666015][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.666796][T11658] bridge_slave_0: entered allmulticast mode [ 1422.670168][T11658] bridge_slave_0: entered promiscuous mode [ 1422.774762][T11658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.774927][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.775168][T11658] bridge_slave_1: entered allmulticast mode [ 1422.778878][T11658] bridge_slave_1: entered promiscuous mode [ 1423.387856][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.387947][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.424105][T11658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.508690][T11658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.898492][T11658] team0: Port device team_slave_0 added [ 1423.960475][T11658] team0: Port device team_slave_1 added [ 1424.096092][ T1424] IPVS: stop unused estimator thread 0... [ 1424.210223][T11658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.210244][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.210273][T11658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.249398][T11658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.249416][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.249441][T11658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.462793][T11641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1424.735902][T11641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1424.869069][T11658] hsr_slave_0: entered promiscuous mode [ 1424.869999][T11658] hsr_slave_1: entered promiscuous mode [ 1424.870600][T11658] debugfs: 'hsr0' already exists in 'hsr' [ 1424.870618][T11658] Cannot create hsr debugfs directory [ 1424.871215][T11641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1425.073241][T11641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1427.009654][T11645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1427.076276][T11645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1427.123292][T11645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1427.267979][T11645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1427.617091][T11638] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1427.679800][ T1424] bridge_slave_1: left allmulticast mode [ 1427.679867][ T1424] bridge_slave_1: left promiscuous mode [ 1427.680065][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.746298][ T1424] bridge_slave_0: left allmulticast mode [ 1427.746337][ T1424] bridge_slave_0: left promiscuous mode [ 1427.746670][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.820938][ T1424] bridge_slave_1: left allmulticast mode [ 1427.820977][ T1424] bridge_slave_1: left promiscuous mode [ 1427.821271][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.886824][ T1424] bridge_slave_0: left allmulticast mode [ 1427.886862][ T1424] bridge_slave_0: left promiscuous mode [ 1427.887161][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.949804][ T1424] bridge_slave_1: left allmulticast mode [ 1427.949842][ T1424] bridge_slave_1: left promiscuous mode [ 1427.950136][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.016604][ T1424] bridge_slave_0: left allmulticast mode [ 1428.016654][ T1424] bridge_slave_0: left promiscuous mode [ 1428.016963][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.122160][ T1424] bridge_slave_1: left allmulticast mode [ 1428.122200][ T1424] bridge_slave_1: left promiscuous mode [ 1428.122496][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.187887][ T1424] bridge_slave_0: left allmulticast mode [ 1428.187925][ T1424] bridge_slave_0: left promiscuous mode [ 1428.188231][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.625413][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.705589][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.774697][ T1424] bond0 (unregistering): Released all slaves [ 1429.116810][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.195406][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.259133][ T1424] bond0 (unregistering): Released all slaves [ 1429.585408][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.675534][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.749102][ T1424] bond0 (unregistering): Released all slaves [ 1430.045346][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.145410][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.224088][ T1424] bond0 (unregistering): Released all slaves [ 1430.285562][T11638] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1430.617564][T11638] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1430.726519][T11638] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1430.970132][T11641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.311227][T11641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.664652][ T1424] hsr_slave_0: left promiscuous mode [ 1431.684655][ T1424] hsr_slave_1: left promiscuous mode [ 1431.685745][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.746339][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.924797][ T1424] hsr_slave_0: left promiscuous mode [ 1431.964633][ T1424] hsr_slave_1: left promiscuous mode [ 1431.968012][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.995640][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.154754][ T1424] hsr_slave_0: left promiscuous mode [ 1432.177487][ T1424] hsr_slave_1: left promiscuous mode [ 1432.178549][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.230021][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.314675][ T1424] hsr_slave_0: left promiscuous mode [ 1432.334547][ T1424] hsr_slave_1: left promiscuous mode [ 1432.335592][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.385544][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.396858][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1433.575559][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1435.145520][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1435.326828][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1436.915762][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1437.115595][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1438.555545][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1438.785228][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1439.793588][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.793841][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.869199][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.869476][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.503677][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.515998][T11658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1440.596855][T11658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1440.682544][T11658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1440.775721][T11658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1440.896090][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.902960][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.028774][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.032865][T10740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.137906][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.138109][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.212499][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.343990][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.346943][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.425031][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.425230][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.149517][T11641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.341315][T11658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.598357][T11658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.642933][T10885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.643737][T10885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.691041][T10885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.691307][T10885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.342464][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.761784][T11638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.857142][T11645] veth0_vlan: entered promiscuous mode [ 1444.055039][T11645] veth1_vlan: entered promiscuous mode [ 1444.069703][T11641] veth0_vlan: entered promiscuous mode [ 1444.245475][T11641] veth1_vlan: entered promiscuous mode [ 1444.541406][T11658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.706035][T11645] veth0_macvtap: entered promiscuous mode [ 1444.775437][T11645] veth1_macvtap: entered promiscuous mode [ 1444.928014][T11641] veth0_macvtap: entered promiscuous mode [ 1445.008088][T11641] veth1_macvtap: entered promiscuous mode [ 1445.057947][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.119858][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.223706][T10669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.230718][T11658] veth0_vlan: entered promiscuous mode [ 1445.246804][T10669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.251551][T11641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.271724][T10669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.277837][T10669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.321661][T11641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.347121][T11638] veth0_vlan: entered promiscuous mode [ 1445.358425][T11658] veth1_vlan: entered promiscuous mode [ 1445.469964][T10885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.502573][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.552497][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.575170][T11638] veth1_vlan: entered promiscuous mode [ 1445.591511][ T8625] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.170662][ T6516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.170684][ T6516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.316627][T11658] veth0_macvtap: entered promiscuous mode [ 1446.421456][T11658] veth1_macvtap: entered promiscuous mode [ 1446.450112][ T1424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.450136][ T1424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.507539][T11638] veth0_macvtap: entered promiscuous mode [ 1446.596635][T11638] veth1_macvtap: entered promiscuous mode [ 1446.611129][ T6516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.611151][ T6516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.662316][T11658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.712428][T11658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.869493][T10669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.942016][T11638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.943040][T10669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.992474][T10669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.008734][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.008757][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.010473][T10669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.168659][T11638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.844611][ T6516] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.847788][ T6516] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.849624][ T6516] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.937549][ T6516] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.669806][T10669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.669831][T10669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.205855][T11824] mmap: syz.2.938 (11824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1452.465616][T11822] Can't find ip_set type ha [ 1453.345068][T10669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.345090][T10669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.716260][T11866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'. [ 1468.714518][T11899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.952'. [ 1471.011815][T10884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1471.040906][T10884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1471.054609][T10884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1471.088923][T10884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1471.114832][T10884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1472.565901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.148247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.496534][T11916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.519670][ T59] Bluetooth: hci0: command tx timeout [ 1473.531572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.795811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.878594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.978003][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.551199][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.580168][ T59] Bluetooth: hci0: command tx timeout [ 1476.881128][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.958'. [ 1477.729107][ T59] Bluetooth: hci0: command tx timeout [ 1479.595509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.633320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.764949][ T59] Bluetooth: hci0: command tx timeout [ 1479.909434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1480.965761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.117381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.939933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.232338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.421016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.707564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.933947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.463327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.787002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1484.240465][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.539184][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.539272][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.181238][T10884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1486.206204][T10884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1486.208665][T10884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1486.210081][T10884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1486.237029][T10884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1489.355887][ T59] Bluetooth: hci1: failed to read key size for handle 201 [ 1489.997033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1490.004758][ T59] Bluetooth: hci5: command tx timeout [ 1490.179481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1490.486377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1491.112086][T12008] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1491.425037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1491.460870][T10667] Bluetooth: hci4: Frame reassembly failed (-84) [ 1491.765940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.049140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.084651][T10884] Bluetooth: hci5: command tx timeout [ 1492.144905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.523701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.711726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.992208][ C1] vkms_vblank_simulate: vblank timer overrun [ 1493.260881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.236434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.270932][ T59] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1494.295717][ T59] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1494.302976][ T59] Bluetooth: hci1: Injecting HCI hardware error event [ 1494.307994][ T59] Bluetooth: hci5: command tx timeout [ 1494.439750][T12021] smb3: Unexpected value for 'rdma' [ 1494.963312][ T8629] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.092596][T10884] Bluetooth: hci1: command 0x0406 tx timeout [ 1496.404920][T10884] Bluetooth: hci5: command tx timeout [ 1496.722641][ T5843] Bluetooth: hci1: hardware error 0x00 [ 1498.714736][ T8629] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.220234][T12051] netlink: 'syz.6.983': attribute type 11 has an invalid length. [ 1499.220286][T12051] netlink: 224 bytes leftover after parsing attributes in process `syz.6.983'. [ 1500.644506][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1503.835806][ T8629] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.119977][T12098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'. [ 1512.690615][ T8629] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.735279][ T991] IPVS: starting estimator thread 0... [ 1513.047515][T12106] IPVS: using max 6 ests per chain, 14400 per kthread [ 1515.249366][T11977] chnl_net:caif_netlink_parms(): no params data found [ 1515.693297][T12142] binder: 12131:12142 ioctl 4018620d 0 returned -22 [ 1515.703760][T12142] binder: 12131:12142 ioctl c0306201 0 returned -14 [ 1517.972546][ T8629] bridge_slave_1: left allmulticast mode [ 1517.972588][ T8629] bridge_slave_1: left promiscuous mode [ 1517.973098][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.336123][ T8629] bridge_slave_0: left allmulticast mode [ 1519.336159][ T8629] bridge_slave_0: left promiscuous mode [ 1519.336468][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.997223][T10884] Bluetooth: hci2: command 0x0406 tx timeout [ 1527.465830][T12175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1527.517363][T12175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1527.519901][T12175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1527.557080][T12175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1527.563413][T12175] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1530.471720][T12175] Bluetooth: hci0: command tx timeout [ 1532.484583][T12175] Bluetooth: hci0: command tx timeout [ 1534.327391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.360967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.564338][T12175] Bluetooth: hci0: command tx timeout [ 1534.636071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.334054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.611982][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.691655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.934377][T12215] overlayfs: missing 'lowerdir' [ 1536.768049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.804369][T12175] Bluetooth: hci0: command tx timeout [ 1536.899850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.125981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.296285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.502791][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.611627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.682203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.771849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.341390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.701850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.178226][T10884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1539.227068][T10884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1539.244524][T10884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1539.291625][T10884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1539.293256][T10884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1540.818024][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 1541.019112][T10884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1541.032697][T10884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1541.081314][T10884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1541.083559][T10884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1541.100572][T10884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1542.326237][T10884] Bluetooth: hci4: command tx timeout [ 1543.615463][T10884] Bluetooth: hci6: command tx timeout [ 1544.417470][T10884] Bluetooth: hci4: command tx timeout [ 1544.472636][ T37] audit: type=1326 audit(1756505509.281:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12247 comm="syz.2.1018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f302f5aebe9 code=0x0 [ 1546.569150][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.569543][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.672889][T10884] Bluetooth: hci6: command tx timeout [ 1546.672931][T10884] Bluetooth: hci4: command tx timeout [ 1547.580591][ T8629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.770277][ T8629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.249477][ T8629] bond0 (unregistering): Released all slaves [ 1548.274825][T12227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.453993][T12227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.770039][T10884] Bluetooth: hci6: command tx timeout [ 1548.770084][T10884] Bluetooth: hci4: command tx timeout [ 1548.844773][T11977] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1548.911044][ T1511] kworker/u8:8 (1511) used greatest stack depth: 11592 bytes left [ 1550.488872][T12266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1550.490476][T12266] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1551.294116][T12175] Bluetooth: hci6: command tx timeout [ 1552.728980][ T8629] hsr_slave_0: left promiscuous mode [ 1552.834425][ T8629] hsr_slave_1: left promiscuous mode [ 1552.835511][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.835543][ T8629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.069601][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.069637][ T8629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.679285][ T1229] IPVS: starting estimator thread 0... [ 1553.768028][T12286] IPVS: using max 6 ests per chain, 14400 per kthread [ 1554.051462][ T8629] veth1_macvtap: left promiscuous mode [ 1554.051548][ T8629] veth0_macvtap: left promiscuous mode [ 1554.051737][ T8629] veth1_vlan: left promiscuous mode [ 1554.051865][ T8629] veth0_vlan: left promiscuous mode [ 1554.890983][T12292] ceph: No mds server is up or the cluster is laggy [ 1556.658296][T12175] Bluetooth: hci2: unexpected event for opcode 0x0062 [ 1560.633688][ T8629] team0 (unregistering): Port device team_slave_1 removed [ 1560.684340][T12175] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1560.684710][T12175] Bluetooth: hci2: Injecting HCI hardware error event [ 1560.691604][T10884] Bluetooth: hci2: hardware error 0x00 [ 1560.955727][ T8629] team0 (unregistering): Port device team_slave_0 removed [ 1562.964678][T10884] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1564.663320][T12352] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1566.327196][T12350] input: syz0 as /devices/virtual/input/input12 [ 1571.145535][T12375] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1034'. [ 1577.476910][T12225] chnl_net:caif_netlink_parms(): no params data found [ 1577.917704][T12236] chnl_net:caif_netlink_parms(): no params data found [ 1578.338182][T12175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1578.401091][T12175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1578.501295][T12175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1578.528679][T12175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1578.559486][T12175] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1583.608291][T12175] Bluetooth: hci1: command tx timeout [ 1584.076230][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 1585.720785][T12175] Bluetooth: hci1: command tx timeout [ 1586.070631][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.070792][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.071039][T12225] bridge_slave_0: entered allmulticast mode [ 1586.104575][T12225] bridge_slave_0: entered promiscuous mode [ 1586.327529][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.327710][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.327981][T12225] bridge_slave_1: entered allmulticast mode [ 1586.331603][T12225] bridge_slave_1: entered promiscuous mode [ 1588.039015][T12175] Bluetooth: hci1: command tx timeout [ 1588.290710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.424370][T12495] [ 1588.424385][T12495] ====================================================== [ 1588.424395][T12495] WARNING: possible circular locking dependency detected [ 1588.424405][T12495] syzkaller #0 Not tainted [ 1588.424418][T12495] ------------------------------------------------------ [ 1588.424427][T12495] syz.2.1045/12495 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1588.424462][T12495] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1588.424526][T12495] [ 1588.424526][T12495] but task is already holding lock: [ 1588.424533][T12495] ffff8880246403a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 1588.424581][T12495] [ 1588.424581][T12495] which lock already depends on the new lock. [ 1588.424581][T12495] [ 1588.424590][T12495] [ 1588.424590][T12495] the existing dependency chain (in reverse order) is: [ 1588.424598][T12495] [ 1588.424598][T12495] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 1588.424627][T12495] lock_acquire+0x120/0x360 [ 1588.424653][T12495] rt_spin_lock+0x88/0x2c0 [ 1588.424673][T12495] drm_crtc_vblank_on_config+0x2cd/0x860 [ 1588.424696][T12495] drm_crtc_vblank_on+0x88/0xc0 [ 1588.424716][T12495] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 1588.424739][T12495] vkms_atomic_commit_tail+0x69/0x210 [ 1588.424761][T12495] commit_tail+0x281/0x3a0 [ 1588.424782][T12495] drm_atomic_helper_commit+0xa6b/0xb10 [ 1588.424803][T12495] drm_atomic_commit+0x262/0x2c0 [ 1588.424822][T12495] drm_client_modeset_commit_atomic+0x620/0x760 [ 1588.424852][T12495] drm_client_modeset_commit_locked+0xce/0x4d0 [ 1588.424882][T12495] drm_client_modeset_commit+0x4a/0x70 [ 1588.424910][T12495] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 1588.424933][T12495] drm_fb_helper_set_par+0xaf/0x100 [ 1588.424954][T12495] fbcon_init+0x1255/0x2370 [ 1588.424979][T12495] visual_init+0x2ef/0x650 [ 1588.425002][T12495] do_bind_con_driver+0x890/0xf70 [ 1588.425027][T12495] do_take_over_console+0x899/0xa10 [ 1588.425053][T12495] do_fbcon_takeover+0x118/0x200 [ 1588.425077][T12495] fbcon_fb_registered+0x35e/0x610 [ 1588.425101][T12495] register_framebuffer+0x70f/0x890 [ 1588.425128][T12495] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 1588.425154][T12495] drm_fbdev_client_hotplug+0x16f/0x230 [ 1588.425177][T12495] drm_client_register+0x16f/0x210 [ 1588.425201][T12495] drm_fbdev_client_setup+0x19f/0x3f0 [ 1588.425224][T12495] drm_client_setup+0x10a/0x230 [ 1588.425245][T12495] vkms_init+0x3e0/0x4b0 [ 1588.425272][T12495] do_one_initcall+0x233/0x820 [ 1588.425290][T12495] do_initcall_level+0x104/0x190 [ 1588.425308][T12495] do_initcalls+0x59/0xa0 [ 1588.425326][T12495] kernel_init_freeable+0x334/0x4b0 [ 1588.425344][T12495] kernel_init+0x1d/0x1d0 [ 1588.425362][T12495] ret_from_fork+0x3fc/0x770 [ 1588.425386][T12495] ret_from_fork_asm+0x1a/0x30 [ 1588.425404][T12495] [ 1588.425404][T12495] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 1588.425432][T12495] lock_acquire+0x120/0x360 [ 1588.425465][T12495] rt_spin_lock+0x88/0x2c0 [ 1588.425484][T12495] vblank_disable_fn+0x72/0x190 [ 1588.425503][T12495] call_timer_fn+0x17b/0x5f0 [ 1588.425529][T12495] __run_timer_base+0x648/0x970 [ 1588.425550][T12495] run_timer_softirq+0xb7/0x180 [ 1588.425573][T12495] handle_softirqs+0x22c/0x710 [ 1588.425597][T12495] run_ktimerd+0xcf/0x190 [ 1588.425623][T12495] smpboot_thread_fn+0x542/0xa60 [ 1588.425648][T12495] kthread+0x711/0x8a0 [ 1588.425676][T12495] ret_from_fork+0x3fc/0x770 [ 1588.425700][T12495] ret_from_fork_asm+0x1a/0x30 [ 1588.425719][T12495] [ 1588.425719][T12495] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 1588.425749][T12495] lock_acquire+0x120/0x360 [ 1588.425773][T12495] call_timer_fn+0xdb/0x5f0 [ 1588.425797][T12495] __run_timer_base+0x648/0x970 [ 1588.425820][T12495] run_timer_softirq+0xb7/0x180 [ 1588.425843][T12495] handle_softirqs+0x22c/0x710 [ 1588.425866][T12495] run_ktimerd+0xcf/0x190 [ 1588.425892][T12495] smpboot_thread_fn+0x542/0xa60 [ 1588.425915][T12495] kthread+0x711/0x8a0 [ 1588.425942][T12495] ret_from_fork+0x3fc/0x770 [ 1588.425966][T12495] ret_from_fork_asm+0x1a/0x30 [ 1588.425984][T12495] [ 1588.425984][T12495] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 1588.426013][T12495] lock_acquire+0x120/0x360 [ 1588.426037][T12495] rt_spin_lock+0x88/0x2c0 [ 1588.426055][T12495] __run_timer_base+0x114/0x970 [ 1588.426077][T12495] run_timer_softirq+0x67/0x180 [ 1588.426100][T12495] handle_softirqs+0x22c/0x710 [ 1588.426123][T12495] run_ktimerd+0xcf/0x190 [ 1588.426149][T12495] smpboot_thread_fn+0x542/0xa60 [ 1588.426172][T12495] kthread+0x711/0x8a0 [ 1588.426197][T12495] ret_from_fork+0x3fc/0x770 [ 1588.426220][T12495] ret_from_fork_asm+0x1a/0x30 [ 1588.426239][T12495] [ 1588.426239][T12495] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 1588.426267][T12495] validate_chain+0xb9b/0x2140 [ 1588.426296][T12495] __lock_acquire+0xab9/0xd20 [ 1588.426321][T12495] reacquire_held_locks+0x127/0x1d0 [ 1588.426349][T12495] lock_release+0x1b4/0x3e0 [ 1588.426374][T12495] __local_bh_enable_ip+0x10c/0x270 [ 1588.426397][T12495] hrtimer_cancel+0x39/0x60 [ 1588.426424][T12495] drm_vblank_disable_and_save+0x1bc/0x380 [ 1588.426452][T12495] drm_crtc_vblank_off+0x22e/0x820 [ 1588.426474][T12495] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 1588.426498][T12495] vkms_atomic_commit_tail+0x51/0x210 [ 1588.426519][T12495] commit_tail+0x281/0x3a0 [ 1588.426539][T12495] drm_atomic_helper_commit+0xa6b/0xb10 [ 1588.426561][T12495] drm_atomic_commit+0x262/0x2c0 [ 1588.426579][T12495] drm_atomic_helper_set_config+0xe2/0x160 [ 1588.426603][T12495] drm_mode_setcrtc+0x9a4/0x1c50 [ 1588.426629][T12495] drm_ioctl_kernel+0x2d2/0x3a0 [ 1588.426654][T12495] drm_ioctl+0x685/0xb20 [ 1588.426679][T12495] __se_sys_ioctl+0xfc/0x170 [ 1588.426699][T12495] do_syscall_64+0xfa/0x3b0 [ 1588.426725][T12495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.426745][T12495] [ 1588.426745][T12495] other info that might help us debug this: [ 1588.426745][T12495] [ 1588.426752][T12495] Chain exists of: [ 1588.426752][T12495] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 1588.426752][T12495] [ 1588.426785][T12495] Possible unsafe locking scenario: [ 1588.426785][T12495] [ 1588.426792][T12495] CPU0 CPU1 [ 1588.426798][T12495] ---- ---- [ 1588.426804][T12495] lock(&dev->vblank_time_lock); [ 1588.426820][T12495] lock(&dev->vbl_lock); [ 1588.426835][T12495] lock(&dev->vblank_time_lock); [ 1588.426851][T12495] lock((softirq_ctrl.lock)); [ 1588.426865][T12495] [ 1588.426865][T12495] *** DEADLOCK *** [ 1588.426865][T12495] [ 1588.426871][T12495] 8 locks held by syz.2.1045/12495: [ 1588.426883][T12495] #0: ffffc90003e97b20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 1588.426941][T12495] #1: ffffc90003e97b48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 1588.426997][T12495] #2: ffff8880246404b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 1588.427048][T12495] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1588.427095][T12495] #4: ffff888024640420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 1588.427146][T12495] #5: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1588.427193][T12495] #6: ffff8880246403a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 1588.427243][T12495] #7: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1588.427292][T12495] [ 1588.427292][T12495] stack backtrace: [ 1588.427304][T12495] CPU: 1 UID: 0 PID: 12495 Comm: syz.2.1045 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1588.427329][T12495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1588.427343][T12495] Call Trace: [ 1588.427351][T12495] [ 1588.427361][T12495] dump_stack_lvl+0x189/0x250 [ 1588.427393][T12495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1588.427422][T12495] ? __pfx__printk+0x10/0x10 [ 1588.427454][T12495] ? print_lock_name+0xde/0x100 [ 1588.427477][T12495] print_circular_bug+0x2ee/0x310 [ 1588.427499][T12495] check_noncircular+0x134/0x160 [ 1588.427535][T12495] validate_chain+0xb9b/0x2140 [ 1588.427569][T12495] ? preempt_schedule+0xae/0xc0 [ 1588.427595][T12495] ? preempt_schedule_common+0x83/0xd0 [ 1588.427621][T12495] ? preempt_schedule+0xae/0xc0 [ 1588.427645][T12495] ? __pfx_preempt_schedule+0x10/0x10 [ 1588.427675][T12495] __lock_acquire+0xab9/0xd20 [ 1588.427705][T12495] reacquire_held_locks+0x127/0x1d0 [ 1588.427736][T12495] ? __local_bh_disable_ip+0x264/0x400 [ 1588.427765][T12495] lock_release+0x1b4/0x3e0 [ 1588.427791][T12495] ? __local_bh_enable_ip+0x100/0x270 [ 1588.427819][T12495] __local_bh_enable_ip+0x10c/0x270 [ 1588.427844][T12495] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1588.427872][T12495] ? rt_spin_unlock+0x65/0x80 [ 1588.427895][T12495] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 1588.427942][T12495] ? hrtimer_cancel_wait_running+0x142/0x180 [ 1588.427973][T12495] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 1588.428000][T12495] hrtimer_cancel+0x39/0x60 [ 1588.428035][T12495] drm_vblank_disable_and_save+0x1bc/0x380 [ 1588.428061][T12495] drm_crtc_vblank_off+0x22e/0x820 [ 1588.428087][T12495] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 1588.428119][T12495] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 1588.428147][T12495] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 1588.428180][T12495] vkms_atomic_commit_tail+0x51/0x210 [ 1588.428202][T12495] ? read_tsc+0x9/0x20 [ 1588.428225][T12495] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 1588.428249][T12495] commit_tail+0x281/0x3a0 [ 1588.428275][T12495] drm_atomic_helper_commit+0xa6b/0xb10 [ 1588.428303][T12495] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1588.428327][T12495] drm_atomic_commit+0x262/0x2c0 [ 1588.428349][T12495] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1588.428370][T12495] ? __pfx___drm_printfn_info+0x10/0x10 [ 1588.428405][T12495] ? drm_atomic_state_init+0x231/0x310 [ 1588.428446][T12495] drm_atomic_helper_set_config+0xe2/0x160 [ 1588.428474][T12495] drm_mode_setcrtc+0x9a4/0x1c50 [ 1588.428515][T12495] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1588.428547][T12495] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1588.428578][T12495] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1588.428614][T12495] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1588.428643][T12495] ? drm_ioctl_kernel+0x2af/0x3a0 [ 1588.428675][T12495] drm_ioctl_kernel+0x2d2/0x3a0 [ 1588.428703][T12495] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1588.428732][T12495] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1588.428765][T12495] drm_ioctl+0x685/0xb20 [ 1588.428790][T12495] ? smk_tskacc+0x2fc/0x370 [ 1588.428822][T12495] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1588.428853][T12495] ? __pfx_drm_ioctl+0x10/0x10 [ 1588.428886][T12495] ? __fget_files+0x2a/0x420 [ 1588.428916][T12495] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1588.428941][T12495] ? __pfx_drm_ioctl+0x10/0x10 [ 1588.428968][T12495] __se_sys_ioctl+0xfc/0x170 [ 1588.428992][T12495] do_syscall_64+0xfa/0x3b0 [ 1588.429020][T12495] ? lockdep_hardirqs_on+0x9c/0x150 [ 1588.429047][T12495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.429068][T12495] ? clear_bhb_loop+0x60/0xb0 [ 1588.429091][T12495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.429113][T12495] RIP: 0033:0x7f302f5aebe9 [ 1588.429132][T12495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.429151][T12495] RSP: 002b:00007f302d3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1588.429174][T12495] RAX: ffffffffffffffda RBX: 00007f302f7d6270 RCX: 00007f302f5aebe9 [ 1588.429190][T12495] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005 [ 1588.429203][T12495] RBP: 00007f302f631e19 R08: 0000000000000000 R09: 0000000000000000 [ 1588.429217][T12495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.429231][T12495] R13: 00007f302f7d6308 R14: 00007f302f7d6270 R15: 00007fff8b0db528 [ 1588.429254][T12495] [ 1589.214280][ T8115] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1589.414257][ T8115] usb 3-1: device descriptor read/64, error -71 [ 1589.804276][ T8115] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1590.084280][T12175] Bluetooth: hci1: command tx timeout [ 1590.275675][ T8629] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.052136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1591.178916][ T8629] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.836050][ T8629] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.080007][ T8629] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.481546][ T8629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.716434][ T8629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.756219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.825731][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.996277][ T8629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.215871][ T8629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.536678][ T8629] bridge_slave_1: left allmulticast mode [ 1593.536709][ T8629] bridge_slave_1: left promiscuous mode [ 1593.536882][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.615306][ T8629] bridge_slave_0: left allmulticast mode [ 1593.615337][ T8629] bridge_slave_0: left promiscuous mode [ 1593.615522][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.699520][ T8629] bridge_slave_1: left allmulticast mode [ 1593.699541][ T8629] bridge_slave_1: left promiscuous mode [ 1593.699649][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.755097][ T8629] bridge_slave_0: left allmulticast mode [ 1593.755149][ T8629] bridge_slave_0: left promiscuous mode [ 1593.755333][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.286577][ T8629] bond0 (unregistering): Released all slaves [ 1595.334888][ T8629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.416018][ T8629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.436689][ T8629] bond0 (unregistering): Released all slaves [ 1595.529316][ T8629] bond0 (unregistering): Released all slaves [ 1596.567086][ T8629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.626508][ T8629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.646600][ T8629] bond0 (unregistering): Released all slaves