last executing test programs: 3m46.484137481s ago: executing program 1 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m44.729476024s ago: executing program 1 (id=16): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m43.023685408s ago: executing program 1 (id=19): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 3m41.612492687s ago: executing program 3 (id=22): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040200"], 0xf) fanotify_init(0x8, 0x40000) unshare(0x8100880) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) socket$inet6(0xa, 0x5, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_GET_IO_FLUSHER(0x4) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000af2000/0x3000)=nil) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 3m40.934369203s ago: executing program 1 (id=23): r0 = socket(0x10, 0x803, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0x2, 0x0, 0x0}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x38}}, 0x810) sendmsg$nl_route(r0, 0x0, 0x0) 3m39.084795267s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xc000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) 3m39.044983548s ago: executing program 3 (id=25): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x8, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3m31.300312007s ago: executing program 1 (id=28): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xa, 0x4, 0x1, 0x23, 0x28, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x12, 0x0, [{0x6, 0xa, "80c014fe524b1603"}, {0x2, 0x2}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202", 0x4e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6", 0x46}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m30.638191464s ago: executing program 3 (id=30): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 3m28.862099545s ago: executing program 3 (id=33): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x7) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x4) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0xf) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) 3m25.193291063s ago: executing program 3 (id=35): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xf) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4089, &(0x7f0000001080)=0xff9) 3m23.187040987s ago: executing program 3 (id=38): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3m13.615566531s ago: executing program 32 (id=28): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xa, 0x4, 0x1, 0x23, 0x28, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x12, 0x0, [{0x6, 0xa, "80c014fe524b1603"}, {0x2, 0x2}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202", 0x4e}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6", 0x46}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m6.883017645s ago: executing program 33 (id=38): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 28.030619534s ago: executing program 4 (id=221): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) clock_adjtime(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r4, 0x0, 0x0, 0x200040a0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x8, 0x99}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) setresuid(0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 23.656250042s ago: executing program 4 (id=224): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x6936, &(0x7f00000004c0)={0x0, 0x30b5, 0x40000, 0x2, 0x1158}, &(0x7f0000000100), &(0x7f0000000280), 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22.143966105s ago: executing program 4 (id=228): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0x0) 18.605330413s ago: executing program 4 (id=230): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r1 = open(0x0, 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x4, 0x2}}, 0x50) r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @ofdm={0x1, 0x18, 0x1b, 0x1a, 0x7, 0x4, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004000000fedbdf250e0000000800030001bb1991ee95e53e39ae4cf4c324cde30c0ceef3bfa8e72e84552a2b251ea1491380a9b74a19b2ffcda83b4b0fe1871755752e9449c82835ba13bb8820437401b9c40aeb8d090c877a143930960cf0605c4303e07e3c3b144c43d8675a6d68ecebdc11b6a43c89ea35f81f", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x10) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r9, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r10, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x207, 0x4) 17.715666447s ago: executing program 0 (id=231): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 14.440170786s ago: executing program 0 (id=240): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xf}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)}, 0x9}], 0x2, 0x10100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 13.132501894s ago: executing program 0 (id=234): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 12.966297873s ago: executing program 0 (id=235): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000045) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r2, 0x5) close(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000100)=0x400, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x5, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e24, 0xffffffff, @local, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000940)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r8, 0x2}}, 0x18) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) sendto$inet(r6, &(0x7f0000000240)="e41e04adc4643e8596712327e9e94edf7893bda30ef9bca23ad186f912edc2cc27369d93469ea312739b56f5dac72b47547605309678ec3fd5a53aa6a7e5de1b35db4240bef12d2f5bda0f70865922937a22bf9d1d1323ace202694bf978bc7377f9b706230a754022f0", 0x6a, 0x20000010, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r6, &(0x7f0000000900)='\x00', 0x100000, 0x40, 0x0, 0x0) 9.547847755s ago: executing program 0 (id=236): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000b15dbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 6.556786383s ago: executing program 2 (id=238): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x40, 0x49, 0x17, 0x20, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xc, 0x20, 0x8, "", [{{0x9, 0x4, 0x87, 0x9, 0x0, 0x86, 0xc0, 0xd3}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00030000000006"], 0x30}}, 0x4090) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000140)={0x1, 0x803, 0x2}) socket(0x2b, 0x80801, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) close(r7) copy_file_range(r1, &(0x7f0000000300)=0x4453, r7, &(0x7f0000000380)=0x5, 0xa9b8, 0x0) 5.478069738s ago: executing program 4 (id=239): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x40, 0x49, 0x17, 0x20, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xc, 0x20, 0x8, "", [{{0x9, 0x4, 0x87, 0x9, 0x0, 0x86, 0xc0, 0xd3}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00030000000006"], 0x30}}, 0x4090) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000140)={0x1, 0x803, 0x2}) socket(0x2b, 0x80801, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) close(r7) 5.290462166s ago: executing program 2 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) waitid(0x1, r0, &(0x7f0000000300), 0x8, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 3.936010425s ago: executing program 2 (id=242): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x1e, 0x0, 0x8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) 3.501719633s ago: executing program 4 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.614927197s ago: executing program 2 (id=244): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.518171567s ago: executing program 0 (id=245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d000000000000000000000008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) rename(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.306008006s ago: executing program 2 (id=246): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x203, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r8, &(0x7f0000000040)="3c5c783ecd45036a2762bb626c65640a", 0x10) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=247): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x6}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r5, &(0x7f00000000c0), 0xffffff5e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 92.151684][ T10] cfg80211: failed to load regulatory.db [ 92.963347][ T5583] cgroup: Unknown subsys name 'net' [ 93.207033][ T5583] cgroup: Unknown subsys name 'cpuset' [ 93.268885][ T5583] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.333284][ T5583] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.074882][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.103032][ T4913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.122693][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.124519][ T4913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.144968][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.163353][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.165449][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.193420][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.194331][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.218353][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.253159][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.289149][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.291151][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.313495][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.402746][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.412403][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.444049][ T4913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.457977][ T4913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.469813][ T4913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.471484][ T4913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.473641][ T4913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.474002][ T4913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.475691][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.524899][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.526288][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.379503][ T5606] Bluetooth: hci1: command tx timeout [ 100.458288][ T5606] Bluetooth: hci0: command tx timeout [ 100.618288][ T5606] Bluetooth: hci4: command tx timeout [ 100.618298][ T5597] Bluetooth: hci2: command tx timeout [ 100.699016][ T5597] Bluetooth: hci3: command tx timeout [ 101.273552][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.274365][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.274606][ T5601] bridge_slave_0: entered allmulticast mode [ 101.276638][ T5601] bridge_slave_0: entered promiscuous mode [ 101.374644][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.374745][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.374987][ T5601] bridge_slave_1: entered allmulticast mode [ 101.376948][ T5601] bridge_slave_1: entered promiscuous mode [ 101.414167][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.414294][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.414448][ T5599] bridge_slave_0: entered allmulticast mode [ 101.416335][ T5599] bridge_slave_0: entered promiscuous mode [ 101.495105][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.495239][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.495415][ T5599] bridge_slave_1: entered allmulticast mode [ 101.497703][ T5599] bridge_slave_1: entered promiscuous mode [ 101.564705][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.564831][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.565000][ T5596] bridge_slave_0: entered allmulticast mode [ 101.567279][ T5596] bridge_slave_0: entered promiscuous mode [ 101.647881][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.657494][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.657664][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.657831][ T5596] bridge_slave_1: entered allmulticast mode [ 101.683187][ T5596] bridge_slave_1: entered promiscuous mode [ 101.706410][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.706564][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.706741][ T5595] bridge_slave_0: entered allmulticast mode [ 101.724550][ T5595] bridge_slave_0: entered promiscuous mode [ 101.740532][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.740658][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.745750][ T5600] bridge_slave_0: entered allmulticast mode [ 101.754966][ T5600] bridge_slave_0: entered promiscuous mode [ 101.779735][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.806445][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.807372][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.807539][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.807778][ T5595] bridge_slave_1: entered allmulticast mode [ 101.839329][ T5595] bridge_slave_1: entered promiscuous mode [ 101.844162][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.844268][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.844411][ T5600] bridge_slave_1: entered allmulticast mode [ 101.864662][ T5600] bridge_slave_1: entered promiscuous mode [ 101.925312][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.994219][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.049100][ T5601] team0: Port device team_slave_0 added [ 102.054797][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.094041][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.116845][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.127614][ T5601] team0: Port device team_slave_1 added [ 102.152149][ T5599] team0: Port device team_slave_0 added [ 102.156948][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.175647][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.216400][ T5599] team0: Port device team_slave_1 added [ 102.271069][ T5596] team0: Port device team_slave_0 added [ 102.323651][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.323666][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.323687][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.327978][ T5596] team0: Port device team_slave_1 added [ 102.394608][ T5595] team0: Port device team_slave_0 added [ 102.396918][ T5600] team0: Port device team_slave_0 added [ 102.397833][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.397849][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.397879][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.459403][ T5597] Bluetooth: hci1: command tx timeout [ 102.480896][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.480910][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.480930][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.484795][ T5595] team0: Port device team_slave_1 added [ 102.486930][ T5600] team0: Port device team_slave_1 added [ 102.538419][ T5597] Bluetooth: hci0: command tx timeout [ 102.564263][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.564283][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.564313][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.639066][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.639082][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.639105][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.698317][ T5597] Bluetooth: hci2: command tx timeout [ 102.698366][ T5597] Bluetooth: hci4: command tx timeout [ 102.778284][ T5606] Bluetooth: hci3: command tx timeout [ 103.102603][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.102619][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.102640][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.105561][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.105577][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.105597][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.106863][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.106878][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.106908][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.225775][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.225831][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.225907][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.232637][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.232681][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.232755][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.392336][ T5601] hsr_slave_0: entered promiscuous mode [ 103.393596][ T5601] hsr_slave_1: entered promiscuous mode [ 103.447087][ T5599] hsr_slave_0: entered promiscuous mode [ 103.449666][ T5599] hsr_slave_1: entered promiscuous mode [ 103.452904][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 103.453229][ T5599] Cannot create hsr debugfs directory [ 103.547351][ T5596] hsr_slave_0: entered promiscuous mode [ 103.549069][ T5596] hsr_slave_1: entered promiscuous mode [ 103.550798][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 103.550874][ T5596] Cannot create hsr debugfs directory [ 103.638862][ T5595] hsr_slave_0: entered promiscuous mode [ 103.639955][ T5595] hsr_slave_1: entered promiscuous mode [ 103.640657][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 103.640677][ T5595] Cannot create hsr debugfs directory [ 103.670648][ T5600] hsr_slave_0: entered promiscuous mode [ 103.671898][ T5600] hsr_slave_1: entered promiscuous mode [ 103.672670][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 103.672689][ T5600] Cannot create hsr debugfs directory [ 104.538406][ T5606] Bluetooth: hci1: command tx timeout [ 104.618254][ T5606] Bluetooth: hci0: command tx timeout [ 104.766307][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.778761][ T5606] Bluetooth: hci4: command tx timeout [ 104.778799][ T5606] Bluetooth: hci2: command tx timeout [ 104.816642][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.835760][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.858465][ T5597] Bluetooth: hci3: command tx timeout [ 104.882154][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.902635][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.923653][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.957078][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.984636][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.119332][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.166382][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.179259][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.213126][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.216092][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.244728][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.277734][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.325342][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.497311][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.533112][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.536572][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.590188][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.594309][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.634953][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.667662][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.692478][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.876669][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.911910][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.930853][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.973493][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.977896][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.022406][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.066406][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.103630][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.214712][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.293567][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.331816][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.348938][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.381965][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.396565][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.434511][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.453105][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.497741][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.521411][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.570183][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.570352][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.604681][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.618329][ T5597] Bluetooth: hci1: command tx timeout [ 106.646801][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.646932][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.698989][ T5597] Bluetooth: hci0: command tx timeout [ 106.777370][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.843707][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.843859][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.850684][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.860323][ T5597] Bluetooth: hci2: command tx timeout [ 106.860355][ T5597] Bluetooth: hci4: command tx timeout [ 106.930286][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.930416][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.938281][ T5606] Bluetooth: hci3: command tx timeout [ 107.014635][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.063424][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.063588][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.136099][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.181111][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.181263][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.376019][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.436211][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.486528][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.486743][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.573486][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.575015][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.712430][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.808510][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.808643][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.921971][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.924767][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.520342][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.870842][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.124763][ T5601] veth0_vlan: entered promiscuous mode [ 109.166055][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.255820][ T5601] veth1_vlan: entered promiscuous mode [ 109.532236][ T5596] veth0_vlan: entered promiscuous mode [ 109.546768][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.621140][ T5596] veth1_vlan: entered promiscuous mode [ 109.721656][ T5601] veth0_macvtap: entered promiscuous mode [ 109.766136][ T5595] veth0_vlan: entered promiscuous mode [ 109.784394][ T5601] veth1_macvtap: entered promiscuous mode [ 109.852255][ T5595] veth1_vlan: entered promiscuous mode [ 109.926914][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.943185][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.967584][ T5596] veth0_macvtap: entered promiscuous mode [ 109.987061][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.049374][ T5596] veth1_macvtap: entered promiscuous mode [ 110.193318][ T5595] veth0_macvtap: entered promiscuous mode [ 110.231871][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.288280][ T5595] veth1_macvtap: entered promiscuous mode [ 110.314844][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.534159][ T5600] veth0_vlan: entered promiscuous mode [ 110.541837][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.649348][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.771282][ T5600] veth1_vlan: entered promiscuous mode [ 110.807337][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.807370][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.836994][ T5599] veth0_vlan: entered promiscuous mode [ 111.091864][ T5599] veth1_vlan: entered promiscuous mode [ 111.245438][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.245464][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.736013][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.736039][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.773150][ T5600] veth0_macvtap: entered promiscuous mode [ 111.851002][ T5600] veth1_macvtap: entered promiscuous mode [ 111.868009][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.868034][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.976467][ T5599] veth0_macvtap: entered promiscuous mode [ 112.067236][ T5599] veth1_macvtap: entered promiscuous mode [ 112.084673][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.084722][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.206117][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.207176][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.207197][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.261561][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.295123][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.375804][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.763973][ T5785] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.973978][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.974021][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.299012][ T5801] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 114.660775][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.660803][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.249581][ T5811] vlan2: entered promiscuous mode [ 116.249607][ T5811] bridge0: entered promiscuous mode [ 117.638755][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.638782][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.761792][ T1064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.767507][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.767531][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.058645][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.213936][ T1482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214266][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214308][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214342][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214375][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214406][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214437][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214469][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214500][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214532][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214564][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214598][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214631][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214676][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214710][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214741][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214773][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214805][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.790570][ T5833] ======================================================= [ 118.790570][ T5833] WARNING: The mand mount option has been deprecated and [ 118.790570][ T5833] and is ignored by this kernel. Remove the mand [ 118.790570][ T5833] option from the mount to silence this warning. [ 118.790570][ T5833] ======================================================= [ 120.456115][ T5712] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.015768][ T5712] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.015823][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.015845][ T5712] usb 3-1: Product: syz [ 121.015862][ T5712] usb 3-1: Manufacturer: syz [ 121.015879][ T5712] usb 3-1: SerialNumber: syz [ 121.589672][ T5712] usb 3-1: can't set config #1, error -71 [ 122.987924][ T5712] usb 3-1: USB disconnect, device number 2 [ 125.358162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.378163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.388152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.398149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.408146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.418154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.438185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.448176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.458180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.028152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.306875][ T5890] mmap: syz.4.26 (5890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.583560][ T5901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.315805][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.335070][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.238988][ T9] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 148.917596][ T5950] syz.2.41 (5950): drop_caches: 2 [ 155.157653][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.221331][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.222440][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.225077][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.226315][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.759878][ T5606] Bluetooth: hci5: command tx timeout [ 160.132636][ T5606] Bluetooth: hci5: command tx timeout [ 161.900151][ T37] audit: type=1326 audit(1785903148.023:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900213][ T37] audit: type=1326 audit(1785903148.033:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900259][ T37] audit: type=1326 audit(1785903148.033:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900307][ T37] audit: type=1326 audit(1785903148.033:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900354][ T37] audit: type=1326 audit(1785903148.033:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900402][ T37] audit: type=1326 audit(1785903148.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900448][ T37] audit: type=1326 audit(1785903148.033:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900496][ T37] audit: type=1326 audit(1785903148.033:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900543][ T37] audit: type=1326 audit(1785903148.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 161.900590][ T37] audit: type=1326 audit(1785903148.043:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.4.52" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7321e2e019 code=0x50000 [ 162.245769][ T5606] Bluetooth: hci5: command tx timeout [ 162.849477][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.874447][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.088910][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.087298][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.103281][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.389858][ T5606] Bluetooth: hci5: command tx timeout [ 166.298320][ T5606] Bluetooth: hci6: command tx timeout [ 167.313494][ T6027] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 167.428641][ T5783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 167.571014][ T1023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.735316][ T5783] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 167.735343][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.735358][ T5783] usb 5-1: Product: syz [ 167.735370][ T5783] usb 5-1: Manufacturer: syz [ 167.735381][ T5783] usb 5-1: SerialNumber: syz [ 168.385397][ T5606] Bluetooth: hci6: command tx timeout [ 169.138536][ T1023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.224127][ T5783] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.289543][ T5783] usb 5-1: USB disconnect, device number 2 [ 170.458375][ T5606] Bluetooth: hci6: command tx timeout [ 170.573809][ T1023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.123007][ T6057] Zero length message leads to an empty skb [ 173.238234][ T5606] Bluetooth: hci6: command tx timeout [ 175.825637][ T1023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.842874][ T6088] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 176.484933][ T6093] binder: 6091:6093 ioctl c0306201 0 returned -14 [ 178.041652][ T6106] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 178.104306][ T37] kauditd_printk_skb: 56 callbacks suppressed [ 178.104396][ T37] audit: type=1107 audit(1785903164.723:68): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 179.037280][ T6099] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 179.037439][ T6099] netlink: 756 bytes leftover after parsing attributes in process `syz.0.73'. [ 179.618967][ T37] audit: type=1800 audit(1785903166.393:69): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.73" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 179.649777][ T6102] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 179.649941][ T6102] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 179.650047][ T6102] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 179.746068][ T6102] syz.0.73 (6102) used greatest stack depth: 18320 bytes left [ 183.391020][ T1023] bridge_slave_1: left allmulticast mode [ 183.391194][ T1023] bridge_slave_1: left promiscuous mode [ 183.412784][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.109136][ T1023] bridge_slave_0: left allmulticast mode [ 186.109177][ T1023] bridge_slave_0: left promiscuous mode [ 186.109437][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.270217][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.365752][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.405423][ T1023] bond0 (unregistering): Released all slaves [ 194.491372][ T6181] tipc: Started in network mode [ 194.491408][ T6181] tipc: Node identity 4, cluster identity 4711 [ 194.491425][ T6181] tipc: Node number set to 4 [ 194.847730][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.847865][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.863518][ T5970] bridge_slave_0: entered allmulticast mode [ 194.880170][ T5970] bridge_slave_0: entered promiscuous mode [ 194.936667][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.936814][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.937066][ T5970] bridge_slave_1: entered allmulticast mode [ 194.965523][ T5970] bridge_slave_1: entered promiscuous mode [ 196.942584][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.837617][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.420964][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 199.662777][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.898179][ T5970] team0: Port device team_slave_0 added [ 202.900063][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.900282][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.900494][ T5999] bridge_slave_0: entered allmulticast mode [ 202.905641][ T5999] bridge_slave_0: entered promiscuous mode [ 204.011338][ T5970] team0: Port device team_slave_1 added [ 204.011806][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.011937][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.052422][ T5999] bridge_slave_1: entered allmulticast mode [ 204.054101][ T6259] netlink: 'syz.0.104': attribute type 6 has an invalid length. [ 204.055272][ T5999] bridge_slave_1: entered promiscuous mode [ 204.277106][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 204.301644][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 204.560553][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.560571][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.560601][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.920428][ T6272] process 'syz.2.106' launched './file2' with NULL argv: empty string added [ 206.547992][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.562556][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 206.773101][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.773122][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.773153][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.791761][ T6258] ceph: No mds server is up or the cluster is laggy [ 206.936097][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.056082][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 208.256097][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 209.057389][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 209.447622][ T5999] team0: Port device team_slave_0 added [ 209.649177][ T5999] team0: Port device team_slave_1 added [ 209.847145][ T5970] hsr_slave_0: entered promiscuous mode [ 209.849264][ T5970] hsr_slave_1: entered promiscuous mode [ 209.863394][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 209.863499][ T5970] Cannot create hsr debugfs directory [ 212.520405][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.520424][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.520454][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.940000][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.971147][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.974923][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.976630][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.977579][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.330511][ T6334] hpfs: Bad magic ... probably not HPFS [ 215.350380][ T6335] hpfs: Bad magic ... probably not HPFS [ 215.967132][ T1023] hsr_slave_0: left promiscuous mode [ 215.993845][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 216.177442][ T1023] hsr_slave_1: left promiscuous mode [ 216.225620][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.225983][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.331834][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.331865][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.018496][ T5597] Bluetooth: hci1: command tx timeout [ 219.120436][ T5597] Bluetooth: hci1: command tx timeout [ 219.960803][ T1023] veth1_macvtap: left promiscuous mode [ 220.031054][ T1023] veth0_macvtap: left promiscuous mode [ 220.032328][ T1023] veth1_vlan: left promiscuous mode [ 220.073545][ T1023] veth0_vlan: left promiscuous mode [ 220.313708][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.343726][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.356753][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.387266][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.402339][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.178192][ T4913] Bluetooth: hci1: command tx timeout [ 222.344742][ T4913] Bluetooth: hci2: command 0x0406 tx timeout [ 222.348984][ T4913] Bluetooth: hci4: command 0x0406 tx timeout [ 222.349027][ T4913] Bluetooth: hci0: command 0x0406 tx timeout [ 222.603382][ T60] Bluetooth: hci3: command tx timeout [ 224.232123][ T5597] Bluetooth: hci1: command tx timeout [ 224.337852][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 224.623514][ T5597] Bluetooth: hci3: command tx timeout [ 224.673083][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 225.919909][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.919929][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.919960][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.472566][ T6341] pim6reg: entered allmulticast mode [ 226.698219][ T5597] Bluetooth: hci3: command tx timeout [ 226.775403][ T6372] binder: 6371:6372 ioctl c0186405 2000000028c0 returned -22 [ 226.813943][ T6372] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 226.814720][ T6372] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 228.799309][ T5597] Bluetooth: hci3: command tx timeout [ 229.252132][ T6385] UDC core: g1: couldn't find an available UDC or it's busy [ 231.916403][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.228621][ T6423] warning: `syz.4.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 235.859935][ T1482] wlan1: Trigger new scan to find an IBSS to join [ 238.814113][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 239.696715][ T1023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.729616][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.888328][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 240.024148][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 240.046642][ T31] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 240.046674][ T31] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 240.046699][ T31] usb 1-1: Product: syz [ 240.046709][ T31] usb 1-1: Manufacturer: syz [ 240.046720][ T31] usb 1-1: SerialNumber: syz [ 240.176171][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.176269][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.176479][ T6330] bridge_slave_0: entered allmulticast mode [ 241.208716][ T6330] bridge_slave_0: entered promiscuous mode [ 241.254816][ T31] usb 1-1: Invalid connection information received from device [ 241.482325][ T9] usb 1-1: USB disconnect, device number 2 [ 241.696005][ T1023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.763574][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.763703][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.764002][ T6330] bridge_slave_1: entered allmulticast mode [ 241.812642][ T6330] bridge_slave_1: entered promiscuous mode [ 241.927783][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.957144][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.957840][ T6346] bridge_slave_0: entered allmulticast mode [ 242.006050][ T6346] bridge_slave_0: entered promiscuous mode [ 242.141875][ T13] wlan1: Trigger new scan to find an IBSS to join [ 243.038473][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.038604][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.038877][ T6346] bridge_slave_1: entered allmulticast mode [ 243.040969][ T6346] bridge_slave_1: entered promiscuous mode [ 247.131968][ T44] wlan1: Creating new IBSS network, BSSID ca:56:2d:44:43:34 [ 247.276411][ T1023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.344520][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.410549][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.995078][ T1023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.081213][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.084146][ T6330] team0: Port device team_slave_0 added [ 248.087740][ T6330] team0: Port device team_slave_1 added [ 248.117737][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.265144][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.265795][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.266723][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.267128][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.267687][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.316559][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.319509][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.372716][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.373544][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 248.373990][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 250.522630][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.522648][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.522679][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.662011][ T6346] team0: Port device team_slave_0 added [ 250.672441][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.672460][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.672491][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.759793][ T6346] team0: Port device team_slave_1 added [ 252.136039][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.136058][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.136088][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.217168][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.217198][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.217228][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.344440][ T6553] SQUASHFS error: Failed to read block 0x0: -5 [ 252.344500][ T6553] unable to read squashfs_super_block [ 252.512314][ T6330] hsr_slave_0: entered promiscuous mode [ 252.516487][ T6330] hsr_slave_1: entered promiscuous mode [ 252.520605][ T6330] debugfs: 'hsr0' already exists in 'hsr' [ 252.520673][ T6330] Cannot create hsr debugfs directory [ 252.889322][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.981675][ T6346] hsr_slave_0: entered promiscuous mode [ 253.021024][ T6346] hsr_slave_1: entered promiscuous mode [ 253.023936][ T6346] debugfs: 'hsr0' already exists in 'hsr' [ 253.023965][ T6346] Cannot create hsr debugfs directory [ 255.346251][ T6575] hub 8-0:1.0: USB hub found [ 255.362007][ T6575] hub 8-0:1.0: 1 port detected [ 261.203088][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.663338][ T6601] input: syz1 as /devices/virtual/input/input6 [ 263.738664][ T6565] syz.4.156 (6565): drop_caches: 2 [ 265.430604][ T6612] hub 8-0:1.0: USB hub found [ 265.473669][ T6612] hub 8-0:1.0: 1 port detected [ 265.524522][ T6613] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 266.798202][ T1023] bridge_slave_1: left allmulticast mode [ 266.798240][ T1023] bridge_slave_1: left promiscuous mode [ 266.798595][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.151179][ T6620] overlayfs: overlapping lowerdir path [ 267.867360][ T6626] __nla_validate_parse: 5 callbacks suppressed [ 267.867384][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 268.031927][ T1023] bridge_slave_0: left allmulticast mode [ 268.031965][ T1023] bridge_slave_0: left promiscuous mode [ 268.032242][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.090439][ T1023] bridge_slave_1: left allmulticast mode [ 270.103290][ T1023] bridge_slave_1: left promiscuous mode [ 270.103579][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.651167][ T1023] bridge_slave_0: left allmulticast mode [ 270.651256][ T1023] bridge_slave_0: left promiscuous mode [ 270.704431][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.432283][ T1023] bridge_slave_1: left allmulticast mode [ 272.432389][ T1023] bridge_slave_1: left promiscuous mode [ 272.433308][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.607449][ T6646] Device name cannot be null; rc = [-22] [ 273.390028][ T1023] bridge_slave_0: left allmulticast mode [ 273.390081][ T1023] bridge_slave_0: left promiscuous mode [ 273.390413][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.504839][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.566565][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.571333][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.574226][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.586641][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.789458][ T6651] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 274.232154][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.309843][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.376179][ T1023] bond0 (unregistering): Released all slaves [ 274.669355][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.749220][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.811821][ T1023] bond0 (unregistering): Released all slaves [ 275.399193][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.459368][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.492522][ T1023] bond0 (unregistering): Released all slaves [ 275.739055][ T5597] Bluetooth: hci5: command tx timeout [ 277.713410][ T1033] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.837353][ T5597] Bluetooth: hci5: command tx timeout [ 280.040861][ T5597] Bluetooth: hci5: command tx timeout [ 281.706014][ T6330] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 282.076750][ T5597] Bluetooth: hci5: command tx timeout [ 283.629887][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.649497][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.675476][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.713291][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.714606][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.898239][ T5597] Bluetooth: hci6: command tx timeout [ 287.825191][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 287.978249][ T5597] Bluetooth: hci6: command tx timeout [ 289.866877][ T6729] UDC core: g1: couldn't find an available UDC or it's busy [ 290.058195][ T5597] Bluetooth: hci6: command tx timeout [ 290.282336][ T37] audit: type=1800 audit(1785903277.003:70): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.187" name="id" dev="configfs" ino=12956 res=0 errno=0 [ 290.499408][ T6755] Bluetooth: MGMT ver 1.23 [ 291.148608][ T6754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.148766][ T6754] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.376098][ T6754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.376241][ T6754] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 291.480041][ T6754] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.480140][ T6754] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 291.565820][ T6754] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 291.617537][ T6754] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 291.617651][ T6754] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 291.709107][ T6754] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 291.914340][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.942113][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.000195][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'. [ 292.548625][ T5597] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 292.550429][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 292.972739][ T6756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.032017][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 293.195860][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.231782][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.369671][ T1023] hsr_slave_0: left promiscuous mode [ 293.418376][ T5597] Bluetooth: hci4: command tx timeout [ 293.425085][ T1023] hsr_slave_1: left promiscuous mode [ 293.426137][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.498225][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 293.694275][ T5597] Bluetooth: hci6: command 0x0c1a tx timeout [ 293.698204][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.910366][ T6794] hpfs: Bad magic ... probably not HPFS [ 293.914079][ T6794] hpfs: Bad magic ... probably not HPFS [ 295.100546][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 295.498230][ T5597] Bluetooth: hci4: command tx timeout [ 295.635425][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 295.791285][ T5597] Bluetooth: hci6: command 0x0c1a tx timeout [ 296.318516][ T1023] hsr_slave_0: left promiscuous mode [ 296.338281][ T1023] hsr_slave_1: left promiscuous mode [ 296.339023][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.339043][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.403720][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.403750][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.467406][ T1023] veth1_macvtap: left promiscuous mode [ 296.469722][ T1023] veth0_macvtap: left promiscuous mode [ 296.469933][ T1023] veth1_vlan: left promiscuous mode [ 296.470061][ T1023] veth0_vlan: left promiscuous mode [ 297.086086][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 297.119744][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 298.108928][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 298.121215][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 298.121267][ T5597] Bluetooth: hci6: command 0x0c1a tx timeout [ 298.170757][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 299.922053][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 299.960579][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 300.542822][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 302.281280][ T5606] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 302.766093][ T6838] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 303.087210][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.087883][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.483772][ T6845] bridge_slave_0: left allmulticast mode [ 303.483809][ T6845] bridge_slave_0: left promiscuous mode [ 303.492470][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.558198][ T1007] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 303.732573][ T1007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.732610][ T1007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.732641][ T1007] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 303.732659][ T1007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.810036][ T1007] usb 5-1: config 0 descriptor?? [ 304.917054][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.917202][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.917509][ T6648] bridge_slave_0: entered allmulticast mode [ 304.921001][ T6648] bridge_slave_0: entered promiscuous mode [ 305.104749][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.104865][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.105076][ T6648] bridge_slave_1: entered allmulticast mode [ 305.107430][ T6648] bridge_slave_1: entered promiscuous mode [ 306.184493][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 306.190164][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 306.190202][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 306.190230][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 306.190256][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 306.190284][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 306.190314][ T1007] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 307.308113][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.332838][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.793011][ T1007] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 307.890157][ T6648] team0: Port device team_slave_0 added [ 307.941648][ T1007] cp2112 0003:10C4:EA90.0001: error requesting version [ 307.976570][ T6648] team0: Port device team_slave_1 added [ 308.841769][ T1007] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 308.948845][ T1007] usb 5-1: USB disconnect, device number 3 [ 311.751093][ T6891] ceph: No mds server is up or the cluster is laggy [ 311.786602][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.213756][ T1007] libceph: connect (1)[c::]:6789 error -22 [ 312.214309][ T1007] libceph: mon0 (1)[c::]:6789 connect error [ 312.479863][ T1007] libceph: connect (1)[c::]:6789 error -22 [ 312.480020][ T1007] libceph: mon0 (1)[c::]:6789 connect error [ 312.779697][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.779719][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.779753][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.887745][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.887766][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.887797][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.432683][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.433381][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.597544][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.597682][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.597992][ T6704] bridge_slave_0: entered allmulticast mode [ 313.604002][ T6704] bridge_slave_0: entered promiscuous mode [ 313.764447][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.764704][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.765044][ T6704] bridge_slave_1: entered allmulticast mode [ 313.796096][ T6704] bridge_slave_1: entered promiscuous mode [ 313.930777][ T6648] hsr_slave_0: entered promiscuous mode [ 313.932238][ T6648] hsr_slave_1: entered promiscuous mode [ 314.027500][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 314.172479][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.361018][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.238640][ T37] audit: type=1800 audit(1786427589.861:71): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.218" name="host_addr" dev="configfs" ino=13642 res=0 errno=0 [ 316.417733][ T6940] syz.4.219 (6940) used greatest stack depth: 17696 bytes left [ 316.695066][ T6704] team0: Port device team_slave_0 added [ 318.903712][ T6704] team0: Port device team_slave_1 added [ 319.434628][ T6954] futex_wake_op: syz.4.221 tries to shift op by 144; fix this program [ 320.992904][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.992925][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.992958][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.121061][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.121084][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.121120][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.628201][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.068314][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.069003][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.108907][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 326.254672][ T6704] hsr_slave_0: entered promiscuous mode [ 326.279300][ T6704] hsr_slave_1: entered promiscuous mode [ 326.284849][ T6704] debugfs: 'hsr0' already exists in 'hsr' [ 326.284891][ T6704] Cannot create hsr debugfs directory [ 326.340240][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.500279][ T6977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.230'. [ 326.728831][ T1023] bridge_slave_1: left allmulticast mode [ 326.728878][ T1023] bridge_slave_1: left promiscuous mode [ 326.729188][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.904515][ T1023] bridge_slave_0: left allmulticast mode [ 326.904560][ T1023] bridge_slave_0: left promiscuous mode [ 326.904887][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.407918][ T1023] bridge_slave_1: left allmulticast mode [ 327.407963][ T1023] bridge_slave_1: left promiscuous mode [ 327.408250][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.560790][ T1023] bridge_slave_0: left allmulticast mode [ 327.560834][ T1023] bridge_slave_0: left promiscuous mode [ 327.561111][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.628595][ T7017] 9p: Bad value for 'wfdno' [ 332.647173][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.251993][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.258228][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 336.488664][ T1023] bond0 (unregistering): Released all slaves [ 336.857818][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.771484][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.773489][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.779433][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.809052][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.443196][ T1007] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 338.524704][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.609508][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 338.632487][ T7038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.654592][ T1007] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.657535][ T1007] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 338.657580][ T1007] usb 3-1: can't read configurations, error -71 [ 338.674249][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.780138][ T1023] bond0 (unregistering): Released all slaves [ 339.022894][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 339.034056][ T7027] bridge_slave_1: left allmulticast mode [ 339.034087][ T7027] bridge_slave_1: left promiscuous mode [ 339.034346][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.609244][ T5719] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 340.241544][ T5597] Bluetooth: hci1: command tx timeout [ 340.467622][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'. [ 340.487177][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.493438][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.495473][ T5719] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 340.495512][ T5719] usb 5-1: can't read configurations, error -71 [ 342.242530][ T1023] hsr_slave_0: left promiscuous mode [ 342.269316][ T5606] Bluetooth: hci1: command tx timeout [ 342.582162][ T1023] hsr_slave_1: left promiscuous mode [ 342.583652][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.641566][ T1482] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.528384][ T5606] Bluetooth: hci1: command tx timeout [ 344.539185][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.756923][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.802107][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.806044][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.807231][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.836199][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.242683][ T5719] ------------[ cut here ]------------ [ 346.242700][ T5719] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 346.242727][ T5719] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:4/5719 [ 346.242774][ T5719] Modules linked in: [ 346.242810][ T5719] CPU: 1 UID: 0 PID: 5719 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.242837][ T5719] Tainted: [L]=SOFTLOCKUP [ 346.242844][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.242858][ T5719] Workqueue: events drm_fb_helper_damage_work [ 346.242892][ T5719] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 346.242918][ T5719] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 d5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 346.242934][ T5719] RSP: 0018:ffffc90004e477e0 EFLAGS: 00010246 [ 346.242949][ T5719] RAX: 1ffff11004b4ae00 RBX: 0000000000000000 RCX: 0000000000000000 [ 346.242961][ T5719] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 346.242975][ T5719] RBP: ffffc90004e478c8 R08: 0000000000000000 R09: 0000000000000000 [ 346.242986][ T5719] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 346.242999][ T5719] R13: ffff888025a57000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 346.243013][ T5719] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 346.243032][ T5719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.243055][ T5719] CR2: 0000001b32a0dff8 CR3: 00000000585d4000 CR4: 00000000003526f0 [ 346.243071][ T5719] Call Trace: [ 346.243080][ T5719] [ 346.243093][ T5719] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 346.243142][ T5719] ? rt_spin_unlock+0x157/0x200 [ 346.243166][ T5719] ? __pfx_autoremove_wake_function+0x10/0x10 [ 346.243202][ T5719] ? rt_spin_unlock+0x163/0x200 [ 346.243223][ T5719] ? drm_vblank_get+0x147/0x280 [ 346.243246][ T5719] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 346.243269][ T5719] drm_fb_helper_damage_work+0x6cf/0xf00 [ 346.243304][ T5719] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 346.243347][ T5719] ? process_scheduled_works+0xa20/0x14e0 [ 346.243379][ T5719] ? rcu_is_watching+0x15/0xb0 [ 346.243409][ T5719] ? process_scheduled_works+0xa20/0x14e0 [ 346.243434][ T5719] process_scheduled_works+0xa8e/0x14e0 [ 346.243481][ T5719] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.243509][ T5719] ? assign_work+0x3cf/0x5d0 [ 346.243534][ T5719] worker_thread+0xa47/0xfb0 [ 346.243597][ T5719] ? __kthread_parkme+0x71/0x1f0 [ 346.243632][ T5719] kthread+0x388/0x470 [ 346.243661][ T5719] ? __pfx_worker_thread+0x10/0x10 [ 346.243682][ T5719] ? __pfx_kthread+0x10/0x10 [ 346.243710][ T5719] ret_from_fork+0x514/0xb70 [ 346.243753][ T5719] ? __pfx_ret_from_fork+0x10/0x10 [ 346.243782][ T5719] ? __switch_to+0xc89/0x1420 [ 346.243813][ T5719] ? __pfx_kthread+0x10/0x10 [ 346.243842][ T5719] ret_from_fork_asm+0x1a/0x30 [ 346.243876][ T5719] [ 346.243895][ T5719] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 346.243912][ T5719] CPU: 1 UID: 0 PID: 5719 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.243939][ T5719] Tainted: [L]=SOFTLOCKUP [ 346.243947][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.243961][ T5719] Workqueue: events drm_fb_helper_damage_work [ 346.243993][ T5719] Call Trace: [ 346.244001][ T5719] [ 346.244009][ T5719] vpanic+0x56c/0xa60 [ 346.244033][ T5719] ? __pfx__printk+0x10/0x10 [ 346.244068][ T5719] ? __pfx_vpanic+0x10/0x10 [ 346.244087][ T5719] ? is_bpf_text_address+0x292/0x2b0 [ 346.244115][ T5719] ? is_bpf_text_address+0x26/0x2b0 [ 346.244151][ T5719] panic+0xc5/0xd0 [ 346.244173][ T5719] ? __pfx_panic+0x10/0x10 [ 346.244206][ T5719] ? ret_from_fork_asm+0x1a/0x30 [ 346.244237][ T5719] __warn+0x315/0x4c0 [ 346.244259][ T5719] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 346.244295][ T5719] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 346.244325][ T5719] __report_bug+0x276/0x570 [ 346.244369][ T5719] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 346.244404][ T5719] ? __pfx___report_bug+0x10/0x10 [ 346.244449][ T5719] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.244482][ T5719] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.244527][ T5719] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.244565][ T5719] report_bug_entry+0x19a/0x290 [ 346.244600][ T5719] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 346.244628][ T5719] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 346.244656][ T5719] handle_bug+0xce/0x200 [ 346.244693][ T5719] exc_invalid_op+0x1a/0x50 [ 346.244729][ T5719] asm_exc_invalid_op+0x1a/0x20 [ 346.244761][ T5719] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 346.244793][ T5719] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 d5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 346.244815][ T5719] RSP: 0018:ffffc90004e477e0 EFLAGS: 00010246 [ 346.244834][ T5719] RAX: 1ffff11004b4ae00 RBX: 0000000000000000 RCX: 0000000000000000 [ 346.244851][ T5719] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 346.244868][ T5719] RBP: ffffc90004e478c8 R08: 0000000000000000 R09: 0000000000000000 [ 346.244883][ T5719] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 346.244900][ T5719] R13: ffff888025a57000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 346.244943][ T5719] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 346.244973][ T5719] ? rt_spin_unlock+0x157/0x200 [ 346.244998][ T5719] ? __pfx_autoremove_wake_function+0x10/0x10 [ 346.245038][ T5719] ? rt_spin_unlock+0x163/0x200 [ 346.245076][ T5719] ? drm_vblank_get+0x147/0x280 [ 346.245108][ T5719] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 346.245138][ T5719] drm_fb_helper_damage_work+0x6cf/0xf00 [ 346.245182][ T5719] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 346.245236][ T5719] ? process_scheduled_works+0xa20/0x14e0 [ 346.245274][ T5719] ? rcu_is_watching+0x15/0xb0 [ 346.245308][ T5719] ? process_scheduled_works+0xa20/0x14e0 [ 346.245338][ T5719] process_scheduled_works+0xa8e/0x14e0 [ 346.245400][ T5719] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.245437][ T5719] ? assign_work+0x3cf/0x5d0 [ 346.245473][ T5719] worker_thread+0xa47/0xfb0 [ 346.245521][ T5719] ? __kthread_parkme+0x71/0x1f0 [ 346.245566][ T5719] kthread+0x388/0x470 [ 346.245603][ T5719] ? __pfx_worker_thread+0x10/0x10 [ 346.245631][ T5719] ? __pfx_kthread+0x10/0x10 [ 346.245669][ T5719] ret_from_fork+0x514/0xb70 [ 346.245712][ T5719] ? __pfx_ret_from_fork+0x10/0x10 [ 346.245750][ T5719] ? __switch_to+0xc89/0x1420 [ 346.245792][ T5719] ? __pfx_kthread+0x10/0x10 [ 346.245830][ T5719] ret_from_fork_asm+0x1a/0x30 [ 346.245873][ T5719] [ 346.246496][ T5719] Kernel Offset: disabled