last executing test programs: 2m38.636729287s ago: executing program 2 (id=3): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x3528, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x500, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x40005, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000114000000000000000000000bc7ab58d8d303752fb1949e8c45abc4396d994a7c12f3fa329dcfa936f1076508d8c2bd9e309e319020b7c8f162fc04683e5fe7ddf2332a3d2d0", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m37.901057762s ago: executing program 2 (id=11): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) 2m35.863807181s ago: executing program 2 (id=15): dup(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) 2m32.273371152s ago: executing program 2 (id=16): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket(0x2, 0x80805, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x81242, 0x1e4) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000001280)) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/127], 0x119) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 2m16.881608306s ago: executing program 32 (id=16): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket(0x2, 0x80805, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x81242, 0x1e4) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000001280)) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/127], 0x119) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 20.141552456s ago: executing program 4 (id=439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 17.8823041s ago: executing program 4 (id=442): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0x9}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x750, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x724, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x582e6f55, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xf7, 0x1, 0x1, 0x29c, 0x2, 0xf, 0x9, 0x7fff, 0x7fff, 0xfffffffa, 0x9, 0x5, 0x7fff, 0x6, 0x200, 0x4, 0x9, 0x4, 0xc09d, 0x8, 0x6, 0x9, 0x8001, 0x6, 0x6, 0x2, 0x8, 0xaa, 0x800, 0x9, 0x148, 0xf4, 0xe0, 0x429f454, 0x2, 0x6, 0x3, 0x3, 0x401, 0x100, 0x4c7f8c02, 0x13c, 0x6, 0x0, 0x0, 0x9, 0x3, 0x1, 0x3c63, 0x4, 0x1ff, 0x10, 0xffffffff, 0x6, 0x80000000, 0x2, 0x2, 0x7f, 0xfffffffe, 0x40, 0x10001, 0x9, 0xffffffff, 0x8, 0x6, 0x7, 0x0, 0x3, 0x6, 0x9, 0x3, 0x3, 0x8, 0x3373, 0xfff, 0x8, 0x7, 0xf, 0x5, 0x6, 0x1, 0x9, 0x5, 0x80000000, 0x8b9, 0xae5, 0x8, 0xfff, 0x5, 0x6, 0x4, 0x5, 0x7, 0x4, 0x10000, 0x1ff, 0x0, 0x0, 0x2, 0x2, 0x6, 0x4, 0x3, 0x1, 0x1, 0x0, 0x200, 0xfff, 0x9, 0x0, 0x4, 0x6, 0xbc2, 0x0, 0xfffffffa, 0x101, 0x6, 0x20000, 0x6, 0x100, 0x2, 0x9, 0x1, 0xfb2, 0x0, 0x4, 0x9, 0x5, 0x1ffc000, 0x2, 0x9, 0x97, 0x5, 0x10001, 0x500000, 0xa7f2, 0x8, 0x1, 0x7, 0xa5, 0x3, 0x8, 0x1ff, 0x1, 0x3, 0x28c, 0x19a, 0x81, 0x7, 0xffffffff, 0x3, 0x8000, 0x0, 0xfffffff0, 0x4, 0x7, 0x8, 0x5, 0xb820, 0x8ef, 0x7ff, 0x0, 0x10000, 0x8, 0x6, 0x600000, 0xe24d, 0x3, 0x8, 0x8, 0xfffffffb, 0x10, 0x1, 0xc, 0x3, 0x3, 0xfffffffb, 0x1de, 0x1, 0x3, 0x2, 0x7, 0x7, 0x80000000, 0x2, 0x8, 0xfffffffc, 0x6, 0x7f, 0x6, 0x8, 0x3, 0x8, 0x5, 0x4, 0xffff, 0x5314, 0x81, 0xb, 0x7, 0x9, 0x3, 0x8001, 0xa, 0xfffffff9, 0x7f, 0x7, 0x101, 0x2, 0x10, 0x80000000, 0x3, 0xc, 0x1, 0x6afa, 0x10, 0xecf, 0x8001, 0x4, 0xfffffffe, 0x6, 0x8, 0xaaf9, 0x1, 0x9, 0x10, 0x3, 0x7, 0x7, 0x4, 0xc33, 0x0, 0x687, 0x2, 0x9, 0xfffffffc, 0xf3, 0x5, 0x5, 0x16a, 0x7, 0x7, 0x0, 0x1, 0x4, 0x7, 0x0, 0xb, 0xb3, 0x8, 0x6, 0x2, 0x6, 0x4000]}]}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x750}}, 0x24040094) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4606, &(0x7f0000000080)={0x2}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={r7, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) 12.459834573s ago: executing program 4 (id=457): socket(0x2, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) recvmsg(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 10.944157685s ago: executing program 4 (id=461): syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000914c21047050102be06010203010902120001000010000909bef900860dc4eacd79cc82e15033662ce4e5dc59dd857baf4bedb527bf160000000000010001441500000000f8de7260576f49867e23942ecde821f50acfa281dae1de6b37266f8beb69db3e3311fd692f975ad184d3ecec78fa4d1d223572ec317cebecd7af6c3f3d5b144033dd89eb7de9e44b65d0e7ce05e161162bf0dd2d9078bb340100ea343f66b5f8"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x84}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x4049a0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae79b8cd3292ea44c7beef915d564c", 0x15) socket$kcm(0x2, 0x1, 0x2) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x20004000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x6, 0x0, 0x80, {0xeeef0000, 0x100000, 0x2}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015587265000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x911c00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x7) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dmm32at\x00', [0x3, 0x3, 0x525, 0x884e1, 0x2f, 0x2007, 0x7, 0x401, 0x80ffa, 0x7, 0x4, 0x8500, 0x1001, 0x1002004, 0x5, 0x8, 0xffffffa8, 0x7ffffffd, 0x1ff, 0xe08e, 0x10, 0x40000, 0x8, 0xe2df, 0x9, 0x9, 0x200, 0x3, 0x0, 0x9, 0x7fff]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 10.219980813s ago: executing program 0 (id=464): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) 9.819622919s ago: executing program 3 (id=468): socket$netlink(0x10, 0x3, 0x4) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) 8.811524002s ago: executing program 0 (id=471): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 8.631999135s ago: executing program 3 (id=473): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.463452616s ago: executing program 0 (id=475): r0 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x0, 0x0, 0x0, 0xfdfffffe, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000091) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 7.34275027s ago: executing program 0 (id=480): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) 6.348940166s ago: executing program 0 (id=483): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22040854}, 0x8858) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 4.484393623s ago: executing program 4 (id=486): socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 3.919539694s ago: executing program 3 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x10, 0x2, &(0x7f0000000200)="05fb"}, {0x1, 0x18, 0xa, &(0x7f0000000280)="68a6ca"}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xffff8001, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x3f, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) 3.116527178s ago: executing program 3 (id=493): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x38}}, 0x4048000) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000)=0x8, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.83541913s ago: executing program 3 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000114000000000000000000000bc7ab58d8d303752fb1949e8c45abc4396d994a7c12f3fa329dcfa936f1076508d8c2bd9e309e319020b7c8f162fc04683e5fe7ddf2332a3d2d0", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.740344524s ago: executing program 1 (id=498): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket(0x2, 0x80805, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x81242, 0x1e4) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, 0x0, &(0x7f0000001280)) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.631374465s ago: executing program 1 (id=499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.403963874s ago: executing program 1 (id=500): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.377478823s ago: executing program 3 (id=501): socket(0x2, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) recvmsg(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.258289134s ago: executing program 0 (id=502): add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xcc580) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r1, &(0x7f00000015c0), 0x0, 0x8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) 1.19441213s ago: executing program 1 (id=503): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) 820.420045ms ago: executing program 1 (id=504): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6020480) connect$llc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 810.9597ms ago: executing program 4 (id=505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) clock_gettime(0x6, &(0x7f0000000000)) openat$cgroup_type(r1, 0x0, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b00"/129], 0x120}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 1 (id=506): socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 81.304059][ T5786] cgroup: Unknown subsys name 'net' [ 81.543379][ T5786] cgroup: Unknown subsys name 'cpuset' [ 81.599168][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.529624][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.007449][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.015135][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.016117][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.020578][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.022004][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.025259][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.068531][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.073289][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.075865][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.076749][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.130101][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.135574][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.141363][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.144242][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.145044][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.197114][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.224733][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.229058][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.230114][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.232150][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.313467][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.317201][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.318928][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.320292][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.323591][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.894301][ T10] cfg80211: failed to load regulatory.db [ 87.277718][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 87.384809][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 87.479616][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 87.497621][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 87.554216][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 88.103575][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.105761][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.106263][ T5798] bridge_slave_0: entered allmulticast mode [ 88.108078][ T5798] bridge_slave_0: entered promiscuous mode [ 88.160793][ T5802] Bluetooth: hci1: command tx timeout [ 88.169778][ T5802] Bluetooth: hci0: command tx timeout [ 88.227949][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.228021][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.228179][ T5798] bridge_slave_1: entered allmulticast mode [ 88.233858][ T5798] bridge_slave_1: entered promiscuous mode [ 88.238910][ T5802] Bluetooth: hci2: command tx timeout [ 88.320107][ T5802] Bluetooth: hci3: command tx timeout [ 88.400604][ T5802] Bluetooth: hci4: command tx timeout [ 88.629340][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.629542][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.629713][ T5811] bridge_slave_0: entered allmulticast mode [ 88.631705][ T5811] bridge_slave_0: entered promiscuous mode [ 88.879574][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.879668][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.879813][ T5800] bridge_slave_0: entered allmulticast mode [ 88.881961][ T5800] bridge_slave_0: entered promiscuous mode [ 88.884175][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.884290][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.884444][ T5811] bridge_slave_1: entered allmulticast mode [ 88.886097][ T5811] bridge_slave_1: entered promiscuous mode [ 88.887985][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.888056][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.888164][ T5805] bridge_slave_0: entered allmulticast mode [ 88.893617][ T5805] bridge_slave_0: entered promiscuous mode [ 88.904045][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.020187][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.020321][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.020554][ T5800] bridge_slave_1: entered allmulticast mode [ 89.022490][ T5800] bridge_slave_1: entered promiscuous mode [ 89.129281][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.129384][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.129495][ T5805] bridge_slave_1: entered allmulticast mode [ 89.131804][ T5805] bridge_slave_1: entered promiscuous mode [ 89.137308][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.137701][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.137818][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.137931][ T5808] bridge_slave_0: entered allmulticast mode [ 89.179725][ T5808] bridge_slave_0: entered promiscuous mode [ 89.610753][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.610882][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.611061][ T5808] bridge_slave_1: entered allmulticast mode [ 89.614417][ T5808] bridge_slave_1: entered promiscuous mode [ 89.693023][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.933317][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.935933][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.940808][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.944634][ T5798] team0: Port device team_slave_0 added [ 90.111163][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.113193][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.115194][ T5798] team0: Port device team_slave_1 added [ 90.148557][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.238775][ T5806] Bluetooth: hci1: command tx timeout [ 90.239044][ T5802] Bluetooth: hci0: command tx timeout [ 90.318586][ T5802] Bluetooth: hci2: command tx timeout [ 90.398661][ T5802] Bluetooth: hci3: command tx timeout [ 90.417872][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.430514][ T5811] team0: Port device team_slave_0 added [ 90.478600][ T5802] Bluetooth: hci4: command tx timeout [ 90.692466][ T5811] team0: Port device team_slave_1 added [ 90.695404][ T5800] team0: Port device team_slave_0 added [ 90.911636][ T5805] team0: Port device team_slave_0 added [ 90.912934][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.912945][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.912958][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.061265][ T5800] team0: Port device team_slave_1 added [ 91.062922][ T5805] team0: Port device team_slave_1 added [ 91.063551][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.063562][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.063576][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.065377][ T5808] team0: Port device team_slave_0 added [ 91.268922][ T5808] team0: Port device team_slave_1 added [ 91.269593][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.269603][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.269616][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.460056][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.460071][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.460096][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.460950][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.460960][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.460973][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.461998][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.462010][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.462034][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.696689][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.696707][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.696732][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.700298][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.700314][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.700338][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.798017][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.798646][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.798679][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.861518][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.861531][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.861546][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.010456][ T5798] hsr_slave_0: entered promiscuous mode [ 92.011894][ T5798] hsr_slave_1: entered promiscuous mode [ 92.205801][ T5811] hsr_slave_0: entered promiscuous mode [ 92.206694][ T5811] hsr_slave_1: entered promiscuous mode [ 92.207378][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 92.207477][ T5811] Cannot create hsr debugfs directory [ 92.328512][ T5806] Bluetooth: hci1: command tx timeout [ 92.328619][ T5802] Bluetooth: hci0: command tx timeout [ 92.398701][ T5802] Bluetooth: hci2: command tx timeout [ 92.478757][ T5802] Bluetooth: hci3: command tx timeout [ 92.486643][ T5800] hsr_slave_0: entered promiscuous mode [ 92.487513][ T5800] hsr_slave_1: entered promiscuous mode [ 92.514076][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 92.514096][ T5800] Cannot create hsr debugfs directory [ 92.521734][ T5805] hsr_slave_0: entered promiscuous mode [ 92.523485][ T5805] hsr_slave_1: entered promiscuous mode [ 92.524726][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 92.524749][ T5805] Cannot create hsr debugfs directory [ 92.559666][ T5802] Bluetooth: hci4: command tx timeout [ 92.624311][ T5808] hsr_slave_0: entered promiscuous mode [ 92.625054][ T5808] hsr_slave_1: entered promiscuous mode [ 92.625617][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 92.625634][ T5808] Cannot create hsr debugfs directory [ 94.333527][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.370110][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.398600][ T5806] Bluetooth: hci1: command tx timeout [ 94.398650][ T5802] Bluetooth: hci0: command tx timeout [ 94.406894][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.470945][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.478570][ T5802] Bluetooth: hci2: command tx timeout [ 94.558365][ T5802] Bluetooth: hci3: command tx timeout [ 94.601114][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.633116][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.638941][ T5802] Bluetooth: hci4: command tx timeout [ 94.666799][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.727145][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.875566][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.921319][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.985527][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.034872][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.228840][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.274505][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.308071][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.373273][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.568205][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.607805][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.651712][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.653602][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.703922][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.812589][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.825063][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.865744][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.866821][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.939306][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.939415][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.981253][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.014733][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.014869][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.050102][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.090296][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.090433][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.189823][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.195167][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.240524][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.241402][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.285860][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.286002][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.347561][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.419105][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.422186][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.422399][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.504110][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.504276][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.641307][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.704094][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.705006][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.767354][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.769528][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.840622][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.057530][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.247015][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.281042][ T5798] veth0_vlan: entered promiscuous mode [ 97.333988][ T5798] veth1_vlan: entered promiscuous mode [ 97.500752][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.555866][ T5798] veth0_macvtap: entered promiscuous mode [ 97.582266][ T5800] veth0_vlan: entered promiscuous mode [ 97.584321][ T5798] veth1_macvtap: entered promiscuous mode [ 97.672653][ T5800] veth1_vlan: entered promiscuous mode [ 97.714429][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.754327][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.816318][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.831291][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.849305][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.870188][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.876176][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.876517][ T5811] veth0_vlan: entered promiscuous mode [ 98.001241][ T5800] veth0_macvtap: entered promiscuous mode [ 98.004813][ T5811] veth1_vlan: entered promiscuous mode [ 98.097116][ T5800] veth1_macvtap: entered promiscuous mode [ 98.175886][ T5805] veth0_vlan: entered promiscuous mode [ 98.238917][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.254049][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.254076][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.287590][ T5805] veth1_vlan: entered promiscuous mode [ 98.311324][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.361914][ T5811] veth0_macvtap: entered promiscuous mode [ 98.365199][ T5808] veth0_vlan: entered promiscuous mode [ 98.390186][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.390206][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.391987][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.393055][ T5811] veth1_macvtap: entered promiscuous mode [ 98.398153][ T3448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.444789][ T3448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.470452][ T3448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.495631][ T5808] veth1_vlan: entered promiscuous mode [ 98.603480][ T5805] veth0_macvtap: entered promiscuous mode [ 98.609785][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.656302][ T5805] veth1_macvtap: entered promiscuous mode [ 98.743382][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.845800][ T174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.885847][ T174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.959477][ T174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.991001][ T174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.010091][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.010113][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.048694][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.085168][ T5808] veth0_macvtap: entered promiscuous mode [ 99.194091][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.899840][ T5808] veth1_macvtap: entered promiscuous mode [ 99.924885][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.924904][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.942139][ T4152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.128608][ T4152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.196154][ T4152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.213652][ T4152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.967729][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.094095][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.094116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.115987][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.365567][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.738308][ T5930] random: crng reseeded on system resumption [ 102.491873][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.618431][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.668158][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.342572][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.342595][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.404211][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.478295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.576053][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.576074][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.843428][ T5941] fuse: Bad value for 'fd' [ 103.869149][ T5939] erofs (device nbd1): cannot find valid erofs superblock [ 104.772466][ T3239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.772489][ T3239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.080480][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.111379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.111400][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.243669][ T4152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.243692][ T4152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.282714][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 105.308935][ T31] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 105.308964][ T31] usb 1-1: config 0 has no interface number 0 [ 105.309037][ T31] usb 1-1: config 0 interface 89 has no altsetting 0 [ 105.362899][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 105.362935][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.362955][ T31] usb 1-1: Product: syz [ 105.362970][ T31] usb 1-1: Manufacturer: syz [ 105.362984][ T31] usb 1-1: SerialNumber: syz [ 105.491424][ T31] usb 1-1: config 0 descriptor?? [ 106.702027][ T5959] erofs (device nbd2): cannot find valid erofs superblock [ 107.595878][ T10] usb 1-1: USB disconnect, device number 2 [ 108.275424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.939826][ T5956] syz.3.4 (5956): drop_caches: 2 [ 113.818384][ T885] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 115.078278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.078520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.450602][ T6006] random: crng reseeded on system resumption [ 118.591714][ T885] usb 1-1: device descriptor read/all, error -71 [ 119.846160][ T5946] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 120.580236][ T6029] omfs: Invalid superblock (0) [ 121.173945][ T5946] usb 5-1: device descriptor read/all, error -71 [ 124.172624][ T6055] syz.3.30 (6055) used greatest stack depth: 18016 bytes left [ 124.418472][ T5950] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.598808][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 124.603191][ T5950] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 124.603225][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.603241][ T5950] usb 5-1: config 0 has no interface number 0 [ 124.603282][ T5950] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.413977][ T5950] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 125.414006][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.414023][ T5950] usb 5-1: Product: syz [ 125.433040][ T5950] usb 5-1: config 0 descriptor?? [ 125.471762][ T5950] usb 5-1: can't set config #0, error -71 [ 125.546515][ T5950] usb 5-1: USB disconnect, device number 4 [ 126.512846][ T6067] syz.4.33 (6067): drop_caches: 2 [ 126.970486][ T6077] erofs (device nbd3): cannot find valid erofs superblock [ 129.924440][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.949849][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.957057][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.958579][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.960182][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.049151][ T6000] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 130.214073][ T6000] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.281141][ T6000] usb 4-1: Dual-Role OTG device on HNP port [ 130.281920][ T6000] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 130.281947][ T6000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.281965][ T6000] usb 4-1: Product: syz [ 130.281979][ T6000] usb 4-1: Manufacturer: syz [ 130.281992][ T6000] usb 4-1: SerialNumber: syz [ 130.417374][ T6000] usb 4-1: config 0 descriptor?? [ 132.015794][ T5806] Bluetooth: hci5: command tx timeout [ 133.027152][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.027249][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.392067][ T10] usb 4-1: USB disconnect, device number 2 [ 134.084730][ T5806] Bluetooth: hci5: command tx timeout [ 136.050480][ T1165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.136455][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 136.159682][ T5806] Bluetooth: hci5: command tx timeout [ 138.196922][ T1165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.238342][ T5806] Bluetooth: hci5: command tx timeout [ 138.395652][ T6184] overlayfs: failed lookup in lower (newroot/11, name='file0', err=-40): overlapping layers [ 139.122612][ T1165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.867027][ T6194] syz.0.73 (6194): drop_caches: 2 [ 140.268027][ T1165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.611096][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.711129][ T6211] erofs (device nbd3): cannot find valid erofs superblock [ 140.794991][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.877664][ T6088] bridge_slave_0: entered allmulticast mode [ 141.401926][ T6088] bridge_slave_0: entered promiscuous mode [ 141.462351][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.462678][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.462919][ T6088] bridge_slave_1: entered allmulticast mode [ 141.494876][ T6088] bridge_slave_1: entered promiscuous mode [ 142.840149][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.037970][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.497710][ T6234] loop4: detected capacity change from 0 to 7 [ 143.517844][ T6234] Dev loop4: unable to read RDB block 7 [ 143.517889][ T6234] loop4: AHDI p1 p2 [ 143.517914][ T6234] loop4: partition table partially beyond EOD, truncated [ 143.520199][ T6234] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 143.696982][ T6088] team0: Port device team_slave_0 added [ 143.729724][ T6088] team0: Port device team_slave_1 added [ 144.929004][ T1165] bridge_slave_1: left allmulticast mode [ 144.929197][ T1165] bridge_slave_1: left promiscuous mode [ 144.932273][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.091585][ T1165] bridge_slave_0: left allmulticast mode [ 145.091615][ T1165] bridge_slave_0: left promiscuous mode [ 145.091868][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.957667][ T6341] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.122'. [ 155.017020][ T6373] syz.0.134 (6373): drop_caches: 2 [ 155.065076][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.221368][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.304693][ T1165] bond0 (unregistering): Released all slaves [ 155.386978][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.386990][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.387003][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.394173][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.394190][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.394213][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.345436][ T6088] hsr_slave_0: entered promiscuous mode [ 159.346771][ T6088] hsr_slave_1: entered promiscuous mode [ 159.380036][ T6088] debugfs: 'hsr0' already exists in 'hsr' [ 159.380065][ T6088] Cannot create hsr debugfs directory [ 162.076695][ T6453] syz.4.158 (6453): drop_caches: 2 [ 162.713289][ T1165] hsr_slave_0: left promiscuous mode [ 162.750327][ T1165] hsr_slave_1: left promiscuous mode [ 162.753848][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.754017][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.835381][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.835409][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.268811][ T1165] veth1_macvtap: left promiscuous mode [ 164.269117][ T1165] veth0_macvtap: left promiscuous mode [ 164.269427][ T1165] veth1_vlan: left promiscuous mode [ 164.311841][ T1165] veth0_vlan: left promiscuous mode [ 167.106772][ T6511] syz.4.179 (6511): drop_caches: 2 [ 169.521771][ T6544] syz.0.194 (6544): drop_caches: 2 [ 173.164991][ T6573] syz.3.203 (6573): drop_caches: 2 [ 177.584516][ T6635] syz.0.228 (6635): drop_caches: 2 [ 181.927027][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 182.549172][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 187.673434][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.680632][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.703171][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.710705][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.711744][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.716277][ T54] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 190.245368][ T5806] Bluetooth: hci4: command tx timeout [ 190.723882][ T54] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.738528][ T54] usb 5-1: Dual-Role OTG device on HNP port [ 190.738857][ T54] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 190.738880][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.738898][ T54] usb 5-1: Product: syz [ 190.738910][ T54] usb 5-1: Manufacturer: syz [ 190.738922][ T54] usb 5-1: SerialNumber: syz [ 191.648081][ T54] usb 5-1: config 0 descriptor?? [ 191.666128][ T54] usb 5-1: can't set config #0, error -71 [ 191.676377][ T54] usb 5-1: USB disconnect, device number 5 [ 192.764858][ T5802] Bluetooth: hci4: command tx timeout [ 194.811070][ T5802] Bluetooth: hci4: command tx timeout [ 195.149108][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.149178][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.869035][ T6840] loop4: detected capacity change from 0 to 7 [ 195.880487][ T6840] Dev loop4: unable to read RDB block 7 [ 195.880515][ T6840] loop4: AHDI p1 p2 [ 195.880543][ T6840] loop4: partition table partially beyond EOD, truncated [ 195.881124][ T6840] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 196.599693][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 196.695190][ T6844] syz.0.302 (6844): drop_caches: 2 [ 197.575446][ T5802] Bluetooth: hci4: command tx timeout [ 199.988369][ T6057] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 200.147382][ T6057] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.150132][ T6057] usb 5-1: Dual-Role OTG device on HNP port [ 200.150434][ T6057] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 200.150456][ T6057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.150474][ T6057] usb 5-1: Product: syz [ 200.150486][ T6057] usb 5-1: Manufacturer: syz [ 200.150499][ T6057] usb 5-1: SerialNumber: syz [ 200.274078][ T6057] usb 5-1: config 0 descriptor?? [ 206.237364][ T54] usb 5-1: USB disconnect, device number 6 [ 206.525466][ T6913] loop4: detected capacity change from 0 to 7 [ 206.529097][ T6913] Dev loop4: unable to read RDB block 7 [ 206.529124][ T6913] loop4: AHDI p1 p2 [ 206.529150][ T6913] loop4: partition table partially beyond EOD, truncated [ 206.529402][ T6913] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 206.852329][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 209.100878][ T6743] chnl_net:caif_netlink_parms(): no params data found [ 209.734227][ T1165] bridge_slave_1: left allmulticast mode [ 209.734254][ T1165] bridge_slave_1: left promiscuous mode [ 209.734490][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.329116][ T1165] bridge_slave_0: left allmulticast mode [ 210.329138][ T1165] bridge_slave_0: left promiscuous mode [ 210.329314][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.844926][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 211.847582][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 211.847708][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 211.847732][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 212.264420][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.420627][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.428322][ T6909] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 212.531205][ T1165] bond0 (unregistering): Released all slaves [ 212.592356][ T6909] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.595700][ T6909] usb 4-1: Dual-Role OTG device on HNP port [ 212.596048][ T6909] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 212.596068][ T6909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.596086][ T6909] usb 4-1: Product: syz [ 212.596099][ T6909] usb 4-1: Manufacturer: syz [ 212.596113][ T6909] usb 4-1: SerialNumber: syz [ 212.664496][ T6909] usb 4-1: config 0 descriptor?? [ 214.210686][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.211094][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.211885][ T6743] bridge_slave_0: entered allmulticast mode [ 214.329100][ T6743] bridge_slave_0: entered promiscuous mode [ 215.518521][ T1165] hsr_slave_0: left promiscuous mode [ 215.589754][ T1165] hsr_slave_1: left promiscuous mode [ 215.590486][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.711269][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.129378][ T5892] usb 4-1: USB disconnect, device number 3 [ 216.747087][ T7044] syz.3.360 (7044): drop_caches: 2 [ 218.218891][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 218.441317][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 219.258085][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.280141][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.280377][ T6743] bridge_slave_1: entered allmulticast mode [ 219.282943][ T6743] bridge_slave_1: entered promiscuous mode [ 221.543815][ T6743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.587872][ T6743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.831053][ T6743] team0: Port device team_slave_0 added [ 224.835641][ T6743] team0: Port device team_slave_1 added [ 226.791059][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.791074][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.791096][ T6743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.817633][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.817652][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.817677][ T6743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.276667][ T6743] hsr_slave_0: entered promiscuous mode [ 227.278065][ T6743] hsr_slave_1: entered promiscuous mode [ 227.281127][ T6743] debugfs: 'hsr0' already exists in 'hsr' [ 227.281151][ T6743] Cannot create hsr debugfs directory [ 230.191432][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.195319][ T7175] bond0: (slave rose0): Enslaving as an active interface with an up link [ 230.449273][ T5913] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 230.615292][ T5913] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.617814][ T5913] usb 1-1: Dual-Role OTG device on HNP port [ 230.618130][ T5913] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 230.619471][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.619492][ T5913] usb 1-1: Product: syz [ 230.619506][ T5913] usb 1-1: Manufacturer: syz [ 230.619519][ T5913] usb 1-1: SerialNumber: syz [ 230.639954][ T5913] usb 1-1: config 0 descriptor?? [ 230.797762][ T6743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.369720][ T6743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.473259][ T6743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.711102][ T6743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.792681][ T5913] usb 1-1: USB disconnect, device number 5 [ 235.775180][ T6743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.874466][ T6743] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.938734][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.938871][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.996146][ T3239] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.996634][ T3239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.103829][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.028498][ T54] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 239.207175][ T54] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.214630][ T54] usb 4-1: Dual-Role OTG device on HNP port [ 239.214971][ T54] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 239.214994][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.215020][ T54] usb 4-1: Product: syz [ 239.215032][ T54] usb 4-1: Manufacturer: syz [ 239.215045][ T54] usb 4-1: SerialNumber: syz [ 239.236663][ T54] usb 4-1: config 0 descriptor?? [ 243.877707][ T1243] usb 4-1: USB disconnect, device number 4 [ 244.107714][ T6743] veth0_vlan: entered promiscuous mode [ 245.369322][ T6743] veth1_vlan: entered promiscuous mode [ 246.254054][ T6743] veth0_macvtap: entered promiscuous mode [ 246.303299][ T6743] veth1_macvtap: entered promiscuous mode [ 247.510112][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.535195][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.575720][ T7344] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.656379][ T7344] syz.4.442 uses obsolete (PF_INET,SOCK_PACKET) [ 249.835511][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.840459][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.851509][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.857789][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.862453][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.994147][ T5118] Bluetooth: hci5: command tx timeout [ 253.057657][ T7363] chnl_net:caif_netlink_parms(): no params data found [ 253.999015][ T5118] Bluetooth: hci5: command tx timeout [ 254.734568][ T7433] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 255.201588][ T6057] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 255.853872][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853945][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.863978][ T6057] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.880805][ T6057] usb 5-1: Dual-Role OTG device on HNP port [ 255.883328][ T6057] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 255.883356][ T6057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.883375][ T6057] usb 5-1: Product: syz [ 255.883388][ T6057] usb 5-1: Manufacturer: syz [ 255.883401][ T6057] usb 5-1: SerialNumber: syz [ 255.946211][ T6057] usb 5-1: config 0 descriptor?? [ 256.088955][ T5118] Bluetooth: hci5: command tx timeout [ 258.168952][ T5118] Bluetooth: hci5: command tx timeout [ 258.765104][ T7478] loop4: detected capacity change from 0 to 7 [ 258.803327][ T7478] Dev loop4: unable to read RDB block 7 [ 258.803360][ T7478] loop4: AHDI p1 p2 [ 258.803390][ T7478] loop4: partition table partially beyond EOD, truncated [ 258.803651][ T7478] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 258.907038][ T6057] usb 5-1: USB disconnect, device number 7 [ 259.033188][ T7480] udevd[7480]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 259.630871][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.632990][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.633223][ T7363] bridge_slave_0: entered allmulticast mode [ 259.902634][ T7363] bridge_slave_0: entered promiscuous mode [ 259.906593][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.906804][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.906989][ T7363] bridge_slave_1: entered allmulticast mode [ 259.947781][ T7363] bridge_slave_1: entered promiscuous mode [ 260.440875][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.446182][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.461921][ T7513] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 261.955721][ T7363] team0: Port device team_slave_0 added [ 261.981647][ T7363] team0: Port device team_slave_1 added [ 262.925858][ T7545] overlayfs: failed lookup in lower (newroot/70, name='file0', err=-40): overlapping layers [ 263.438404][ T5892] ------------[ cut here ]------------ [ 263.438423][ T5892] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 263.438445][ T5892] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:5/5892 [ 263.438487][ T5892] Modules linked in: [ 263.438520][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.438541][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.438554][ T5892] Workqueue: events drm_fb_helper_damage_work [ 263.438582][ T5892] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 263.438602][ T5892] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 263.438618][ T5892] RSP: 0018:ffffc90005167860 EFLAGS: 00010246 [ 263.438634][ T5892] RAX: 1ffff110282f9600 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 263.438649][ T5892] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 263.438663][ T5892] RBP: ffffc90005167948 R08: 0000000000000000 R09: 0000000000000000 [ 263.438676][ T5892] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 263.438690][ T5892] R13: ffff8881417cb000 R14: 1ffff92000a2cf10 R15: ffffffff8b569b80 [ 263.438705][ T5892] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 263.438727][ T5892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.438740][ T5892] CR2: 00007ffc9ba5b140 CR3: 000000003363a000 CR4: 00000000003526f0 [ 263.438757][ T5892] Call Trace: [ 263.438768][ T5892] [ 263.438782][ T5892] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 263.438807][ T5892] ? rt_spin_unlock+0x150/0x200 [ 263.438832][ T5892] ? __pfx_autoremove_wake_function+0x10/0x10 [ 263.438857][ T5892] ? rt_spin_unlock+0x161/0x200 [ 263.438883][ T5892] ? drm_vblank_get+0x147/0x260 [ 263.438906][ T5892] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 263.438942][ T5892] drm_fb_helper_damage_work+0xc9/0x650 [ 263.438964][ T5892] ? process_scheduled_works+0x9ef/0x1770 [ 263.438987][ T5892] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 263.439011][ T5892] ? process_scheduled_works+0x9ef/0x1770 [ 263.439027][ T5892] ? process_scheduled_works+0x9ef/0x1770 [ 263.439046][ T5892] process_scheduled_works+0xad1/0x1770 [ 263.439095][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.439113][ T5892] ? do_raw_spin_lock+0x121/0x290 [ 263.439151][ T5892] worker_thread+0x8a0/0xda0 [ 263.439202][ T5892] kthread+0x711/0x8a0 [ 263.439230][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 263.439251][ T5892] ? __pfx_kthread+0x10/0x10 [ 263.439272][ T5892] ? rt_spin_unlock+0x150/0x200 [ 263.439300][ T5892] ? rt_spin_unlock+0x161/0x200 [ 263.439321][ T5892] ? __pfx_kthread+0x10/0x10 [ 263.439346][ T5892] ret_from_fork+0x510/0xa50 [ 263.439370][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 263.439388][ T5892] ? __switch_to+0xc9e/0x1480 [ 263.439420][ T5892] ? __pfx_kthread+0x10/0x10 [ 263.439445][ T5892] ret_from_fork_asm+0x1a/0x30 [ 263.439490][ T5892] [ 263.439505][ T5892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.439519][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.439540][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.439551][ T5892] Workqueue: events drm_fb_helper_damage_work [ 263.439571][ T5892] Call Trace: [ 263.439578][ T5892] [ 263.439584][ T5892] vpanic+0x1e0/0x670 [ 263.439609][ T5892] panic+0xb9/0xc0 [ 263.439629][ T5892] ? __pfx_panic+0x10/0x10 [ 263.439662][ T5892] ? ret_from_fork_asm+0x1a/0x30 [ 263.439692][ T5892] __warn+0x317/0x4b0 [ 263.439719][ T5892] ? drm_wait_one_vblank+0x39a/0x5c0 [ 263.439742][ T5892] ? drm_wait_one_vblank+0x39a/0x5c0 [ 263.439759][ T5892] __report_bug+0x288/0x500 [ 263.439788][ T5892] ? drm_wait_one_vblank+0x39a/0x5c0 [ 263.439812][ T5892] ? __pfx___report_bug+0x10/0x10 [ 263.439858][ T5892] report_bug_entry+0x19a/0x290 [ 263.439884][ T5892] ? drm_wait_one_vblank+0x587/0x5c0 [ 263.439902][ T5892] ? drm_wait_one_vblank+0x58c/0x5c0 [ 263.439920][ T5892] handle_bug+0xca/0x200 [ 263.439942][ T5892] exc_invalid_op+0x1a/0x50 [ 263.439963][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 263.439981][ T5892] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 263.440000][ T5892] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 263.440014][ T5892] RSP: 0018:ffffc90005167860 EFLAGS: 00010246 [ 263.440028][ T5892] RAX: 1ffff110282f9600 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 263.440042][ T5892] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 263.440057][ T5892] RBP: ffffc90005167948 R08: 0000000000000000 R09: 0000000000000000 [ 263.440069][ T5892] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 263.440083][ T5892] R13: ffff8881417cb000 R14: 1ffff92000a2cf10 R15: ffffffff8b569b80 [ 263.440119][ T5892] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 263.440153][ T5892] ? rt_spin_unlock+0x150/0x200 [ 263.440173][ T5892] ? __pfx_autoremove_wake_function+0x10/0x10 [ 263.440196][ T5892] ? rt_spin_unlock+0x161/0x200 [ 263.440220][ T5892] ? drm_vblank_get+0x147/0x260 [ 263.440240][ T5892] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 263.440269][ T5892] drm_fb_helper_damage_work+0xc9/0x650 [ 263.440293][ T5892] ? process_scheduled_works+0x9ef/0x1770 [ 263.440318][ T5892] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 263.440343][ T5892] ? process_scheduled_works+0x9ef/0x1770 [ 263.440362][ T5892] ? process_scheduled_works+0x9ef/0x1770 [ 263.440384][ T5892] process_scheduled_works+0xad1/0x1770 [ 263.440440][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.440455][ T5892] ? do_raw_spin_lock+0x121/0x290 [ 263.440488][ T5892] worker_thread+0x8a0/0xda0 [ 263.440531][ T5892] kthread+0x711/0x8a0 [ 263.440555][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 263.440574][ T5892] ? __pfx_kthread+0x10/0x10 [ 263.440595][ T5892] ? rt_spin_unlock+0x150/0x200 [ 263.440624][ T5892] ? rt_spin_unlock+0x161/0x200 [ 263.440645][ T5892] ? __pfx_kthread+0x10/0x10 [ 263.440670][ T5892] ret_from_fork+0x510/0xa50 [ 263.440694][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 263.440720][ T5892] ? __switch_to+0xc9e/0x1480 [ 263.440751][ T5892] ? __pfx_kthread+0x10/0x10 [ 263.440775][ T5892] ret_from_fork_asm+0x1a/0x30 [ 263.440817][ T5892] [ 263.441291][ T5892] Kernel Offset: disabled