last executing test programs: 10.622536359s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000330001ff03000000fedbdb25040000000800040002200000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x100130}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}}, 0x0) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x35000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 9.807145451s ago: executing program 4 (id=162): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @local, 0xe}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x420, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3f6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0xfffffff9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}, 0x420}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 9.303700015s ago: executing program 4 (id=163): futex(&(0x7f0000000040), 0xc, 0x2, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 9.1617687s ago: executing program 4 (id=164): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89fe, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x7, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1886f75a938a0000002d00010026bdf000fcdb"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close_range(r7, 0xffffffffffffffff, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000200)={0x100, 0x2, 0x3}, 0x18, 0x1) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r0, 0x4000, r3}, 0x18) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f00000002c0)={0x20, r9}, 0x0) landlock_restrict_self(r8, 0x0) 8.051656125s ago: executing program 0 (id=166): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x40, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) 7.954138034s ago: executing program 4 (id=167): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) socket$kcm(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}, 0x1, 0x0, 0x79000000}, 0x0) 7.79964517s ago: executing program 3 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000001c0)='\xac\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') tkill(r3, 0xb) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0xbd08, @vifc_lcl_ifindex, @multicast2}, 0x10) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_io_uring_setup(0x3783, 0x0, &(0x7f0000000040), &(0x7f0000000140)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r0, r1, 0x2) 7.673813514s ago: executing program 4 (id=170): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100), 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) 6.998080769s ago: executing program 2 (id=171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) 6.883719168s ago: executing program 0 (id=172): syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x72, 0x91, 0x58, 0x8, 0x1163, 0x200, 0xb892, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0x20, 0xe2, 0xc7, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7f, 0x79, 0x2}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x9, 0x80, 0x9b, [@generic={0x7, 0x5, "ab0b78eb81"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x80, 0x6c0602) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x7) 6.802022965s ago: executing program 3 (id=173): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0x20, 0x6, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x28, "d023e80fd5d202bc5c4e14eb5f52b74e98a61fa4d43e19b0bf447e7ec0e12d6fe24f0f8d5831f9ef"}, 0x0, 0x0}) 5.775544972s ago: executing program 2 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$inet_icmp(0x2, 0x2, 0x1) 5.426318068s ago: executing program 1 (id=176): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x140) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f00000000c0)=r1) (async) r2 = syz_io_uring_setup(0x4839, &(0x7f0000000100)={0x0, 0x7f7c, 0x200, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000200)=0x3, 0x0, 0x4) (async) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0xa, 0xe, 0x8, 0x4}, 0x57, [0x10001, 0x8, 0x9, 0x101, 0x3, 0x1, 0x369e, 0x0, 0x9, 0x3, 0x7, 0xaf, 0x7f, 0x5, 0xcf7, 0xd, 0x101, 0xe, 0x4, 0x4, 0xffff8000, 0x10000, 0x9229, 0x800, 0x1, 0x5, 0xa167, 0x8, 0x9, 0x8, 0x4, 0xffffffff, 0x10001, 0x1, 0x200, 0x9, 0x9, 0x33a6, 0x8, 0x6b, 0x1c95, 0x2, 0x1, 0x1ff, 0xdaa, 0x0, 0x7ac, 0x8, 0xfffffffd, 0x2, 0x4, 0x65, 0x7, 0x8, 0x5, 0x0, 0x434, 0x2, 0x531, 0xa0, 0x8, 0x9, 0x3, 0x2], [0x682, 0x5, 0x5, 0xfffffffe, 0x3c0, 0x5c, 0x4, 0x5, 0x4, 0x1, 0x8, 0x6f11, 0x0, 0x2, 0x0, 0xb, 0x1, 0xb, 0xff, 0x5, 0x2, 0x3ff, 0x10, 0x7, 0x0, 0x4, 0x2, 0x7, 0x1000, 0x4, 0x4, 0x4, 0x4e, 0x800, 0xf6d, 0x63e, 0xffffffff, 0x1, 0x6, 0xff, 0x101, 0x15d6, 0x1, 0xf9, 0x10001, 0x4, 0x100, 0x2, 0x9, 0x6, 0x8, 0xff0, 0x9, 0x5, 0x3, 0x6, 0x4, 0x4, 0x6, 0x5, 0x5, 0x1, 0xffffffff, 0x1], [0xff, 0x6, 0xdb62, 0x0, 0x7, 0x7, 0x6, 0x1, 0x2afe45b3, 0x5bd, 0x3, 0x0, 0x0, 0x929, 0x7fff, 0x8, 0x5, 0x1, 0x2, 0x6, 0x2, 0x6, 0x8, 0x7, 0xc, 0xd, 0xb53, 0x4, 0x8001, 0x4, 0x5, 0x3, 0x7, 0xfffffff4, 0x6, 0x6, 0xbc, 0x3f739a54, 0x10001, 0x4, 0xfffffffa, 0x988d, 0x0, 0x7, 0x2, 0x0, 0x7, 0x4, 0x6, 0x81, 0x6d7, 0x7, 0x7329, 0x6, 0x5, 0x7, 0x9, 0x8, 0x6, 0x3, 0x224, 0xe0000000, 0x6, 0x5], [0x9, 0xfff, 0x1, 0xffffffff, 0x1, 0xfeb, 0x8, 0x3, 0x9, 0xffff, 0x8, 0x4, 0x3, 0x0, 0x3, 0x8, 0xc, 0x80000001, 0x8, 0x3, 0x1, 0x9, 0xd, 0x81, 0x38c093fe, 0x6908, 0x3ff, 0x7dd37ed4, 0x9, 0x4, 0x6, 0x10001, 0xa, 0x0, 0x7, 0x8, 0x1, 0x6dde, 0xba5a, 0x1, 0x6, 0x1, 0x80, 0x5000000, 0x45de, 0x5192d499, 0x7, 0xfffff29c, 0x5, 0x95, 0x0, 0x5, 0x5, 0x7, 0x8000, 0x6c8e, 0x40, 0x2, 0x8, 0x51, 0x7, 0x10000, 0x1, 0x8000]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x140b, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x24800) (async) mount$cgroup2(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x80410, &(0x7f0000000840)={[{@memory_localevents}, {}, {@favordynmods}, {@memory_recursiveprot}, {}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}], [{@context={'context', 0x3d, 'system_u'}}]}) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000001a40)={&(0x7f0000002000)={[{&(0x7f0000000900)="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", 0x1000, 0x1}, {&(0x7f0000001900)="31e58aa369f55538670fe98136afff262e5c70813afe64f203a7a0a9953835ed22b69216ca07257ca82d1c47fc4ced731b088b86be7498b5a34a2621a8163f4c42df533a9784855b56223855c81114e68ede3cdd244ab7baf6f05e6a0e5236c6cb74ec718039dfae37ddb9328f591fcac06950c919b72455cc066e89672ec04c23b11399fd5f87c73e1843570ec177fc252fcd588a977975410f5b3f6ab549532a68572e929b26e01b53957c6b26c8339047ec04b84c831478e2576f45f8609d641dcb35517457b9fa390641d374b6695a8e5f41b6a9fc3dacf8ea8c32b0095b3e9e38e34636", 0xe6}, {&(0x7f0000001a00)="b1e65572a6343cae629e41cefb3f4e310caaf096835031dfcd58fd5af3b81a8ca939518dea5938", 0x27, 0x1}]}, 0x3, 0x1}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000001ac0)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, r0, 0x0, &(0x7f0000001a80)='./file0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x81) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001c40)=0x1030, 0x4) (async) sendmsg$AUDIT_USER(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x10, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) rmdir(&(0x7f0000001d80)='./file0\x00') (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001dc0)={0x0, 0x6}, 0x8) close_range(r5, r5, 0x0) r7 = accept4$inet6(r0, &(0x7f0000001e00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001e40)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001e80)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000001f80)=0xe8) sendmsg$nl_route(r0, &(0x7f00000030c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)=@bridge_delneigh={0x48, 0x1d, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, r8, 0x80, 0x28, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_LLADDR={0xa}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000003100)) (async) recvmsg$unix(r0, &(0x7f0000003400)={&(0x7f0000003140), 0x6e, &(0x7f0000003340)=[{&(0x7f00000031c0)=""/3, 0x3}, {&(0x7f0000003200)=""/9, 0x9}, {&(0x7f0000003240)=""/194, 0xc2}], 0x3, &(0x7f0000003380)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0xd37dff3dae3580bb) openat$comedi(0xffffffffffffff9c, &(0x7f0000003440)='/dev/comedi4\x00', 0x10000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000003480)={'virt_wifi0\x00', 0x0}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r9, 0xc0585604, &(0x7f00000034c0)={0x0, 0x0, {0x9, 0x40, 0x1003, 0x5, 0x3, 0x6, 0x1, 0x3}}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000) (async) syz_open_dev$dri(&(0x7f0000003540), 0x6, 0x881) (async) bind$can_raw(r0, &(0x7f0000003580)={0x1d, r11}, 0x10) 4.995594458s ago: executing program 1 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) r4 = getpid() fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) syz_pidfd_open(r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x48000) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) listen(r5, 0x208) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180), 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 4.594131277s ago: executing program 2 (id=178): unshare(0x2040400) unshare(0x40000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x4, 0xee, 0x5a, "cfac580b625322d235ec97b2d47585206eedf52743351357ff8eab2daeab89f7e3665cd6bd662fa79ea5f45cc0b8d3262afbb61f9f913f82dac697a3d87256", 0xfa}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffd, 0x6, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x14}, 0x60) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x2f, 0x104) (async, rerun: 32) setresuid(0x0, 0xee00, 0x0) (rerun: 32) setresuid(0xee00, 0xffffffffffffffff, 0xee00) (async) r3 = getpid() ioprio_set$pid(0x1, r3, 0x4000) (async) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}, {&(0x7f0000000600)=ANY=[], 0x4d8}, {&(0x7f0000002b00)=ANY=[], 0x1e20}], 0x3, 0x0, 0x0, 0x4008084}, 0x10) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 3.737134254s ago: executing program 1 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x0, 0x1df}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'syz_tun\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={0x0, 0x6, 0x1, [0x38, 0x6, 0x3, 0xf81, 0x2], [0x3800000000000000, 0x0, 0x3, 0x2, 0x1, 0x2, 0xa, 0xe21, 0x1ff, 0x3, 0x5, 0x5, 0x8000000000000001, 0x259e3d9e, 0x8, 0x7ff, 0x1, 0x9, 0x2, 0x1, 0xc, 0x100000001, 0x4, 0xffff, 0x9, 0x4, 0x7fffffffffffffff, 0xfffffffffffffff7, 0x10000, 0x8000, 0x8, 0x9, 0x3, 0x101, 0x3, 0xfffffffffffffe01, 0x1eca, 0x1, 0x7fffffffffffffff, 0x9, 0xfed7, 0x6, 0x2, 0x0, 0x3fffffffc0000, 0x2, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffff95c, 0xc696, 0x10, 0x6, 0x3, 0xe0, 0x101, 0x34, 0x2, 0x8, 0x8, 0x6, 0xfffffffffffffffa, 0xff, 0xf215, 0x4, 0xffffffff, 0x10001, 0x2, 0x80000000, 0x9a7a, 0x9, 0x80, 0x5, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x6, 0x1ff, 0x6, 0x3, 0x9, 0xce52, 0x3, 0x9, 0x8, 0x10, 0x10000, 0x1, 0x6, 0xf, 0xfffffffffffffda0, 0x896f, 0x5, 0x0, 0x40, 0x100000001, 0xae, 0x8, 0x1, 0x2, 0x5, 0x7, 0x7fffffff, 0xffffffffffff77e1, 0x1, 0x1, 0xffff, 0x1, 0x8000000000000000, 0x9, 0x3, 0x7, 0x5f, 0x8, 0x8000000000000000, 0x5, 0xfffffffffffffff4, 0x80000000, 0x400]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0xc0000042) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='befs\x00', 0x224000, &(0x7f0000000200)='\x00') r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x101}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000001840)=ANY=[@ANYBLOB="b931b2d41475aaaaaaaaaaf7d879da7ea51e61383c00fc000000000000000000000000000000ff0200000000000000000000000000010c03000000000000c910fe8000000000000000000000000000bbc20400000101000000000018907804000000ffff00000200007f41000000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.604164225s ago: executing program 0 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r0, &(0x7f00000000c0)=""/41, 0x29) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 2.883263105s ago: executing program 2 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031140000001100010000000000000000000084000a6cf920c19c6d2dbf90b6d698cf0b03ca0c2c707226b134fb"], 0x84}}, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r0}) r4 = dup3(r2, r1, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001740)=[{&(0x7f0000001800)="c0b3f641e93358db730fa114ef6fd9c6705352e1b8dfb95390d3ebb8cd73712ed6131a236b661abbe3038b46fa6f7c0f1e5c157cc3b5089582c0ef2a0fb81c4b6d478f7be370faea02f562a6fdead5a874b85495136d707a1cef985f3a56aeab38fa694e94d9e726bc11b61f00000000000000ed469d85cbf48688f6f8b4cd643a32a94ab6ec8efc569356a30a982aeae44ce595e461a425b08c032a84b79b477b410627d19c42cbb08d", 0xaa}, {&(0x7f0000000100)="8323000000001d39afc62ceefc8936f299eecf", 0x1a}, {&(0x7f0000000180), 0x13}, {&(0x7f00000001c0)="55c1ac6a33bcabcbf05b5674529841f58350038a066a02a6bc9d8c5eecfdbde63fe0ae2f71fe751ba7f269ebe88062259a37084b213e218b5a144b53a81e7cc49a22a19158853dbfabb1be2c6ab892f6083dc94e6a6710e73b7f4d1e2c52f8fe322e59d8020f1b81ca806ad1d02ffb2e82e69cf0a80a05a65dead7c62f7974b805c23351c9b7c340b4b064e60b5a4efdc0833b928d4530831c03a39c7727a1a29aec7354d1c5e9a5aa8af60670eee565ae446b989f81ea74a578a387aec81be9a2fdc25f94c171a3874be3e051956f638cf1f01811ddb63de509efb4008cdeb5cb0644c7cb2c", 0xfd82}, {&(0x7f0000000700)="820566a0e5038adaeacf19e7470234a058fa1a347381c790661dde230dc4150ae23ec76b77396270f45644f86e8d09edab75a26acb1e6209b5be5b40d09ba299b5c626c28448e5f04342e71e03d98aab89bf23721c77e3d1d2553eef61a61dc700000000000010bc27d1586457875f2878644dc8f4c8d47c9edc1bdb46392e3b52895de73f4d8808e1bd71ed7a571dc4f41465e8ad35c2ed5a79d701f8a8e492", 0xa0}, {&(0x7f0000000380)="c77d467908bfdef41403f806aa8abd7163a810e03642f3dea6321a7b21b738ed132db614140e7dc513a4f44adab6b69a9208bc55cf77e018bf5821baa9521cedb29a6d43c72b87ca91a291", 0x4b}, {&(0x7f0000000400)="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", 0x1de}], 0x7, 0x0) write$6lowpan_enable(r6, 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r8 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r8, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 2.865710222s ago: executing program 0 (id=182): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0x7, {0x7, 0x21, "0600000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.848187672s ago: executing program 1 (id=183): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_setup(0x6281, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x4, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000003c0), 0x4) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.617286132s ago: executing program 2 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000001c0)='\xac\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') tkill(r3, 0xb) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0xbd08, @vifc_lcl_ifindex, @multicast2}, 0x10) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_io_uring_setup(0x3783, 0x0, &(0x7f0000000040), &(0x7f0000000140)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r0, r1, 0x2) 2.535510089s ago: executing program 3 (id=185): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) syz_fuse_handle_req(r2, &(0x7f0000002a80)="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", 0x57, &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1.848337919s ago: executing program 3 (id=186): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x6, &(0x7f0000000000)=0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000cc0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = eventfd(0x761) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa0}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2e}}}}], 0x28}, 0x800) r12 = eventfd2(0x94000000, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) read$hiddev(r6, &(0x7f0000000c40)=""/127, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r13}, 0x18) r14 = eventfd2(0x40, 0x80000) r15 = eventfd2(0x9, 0x80001) io_submit(r4, 0x9, &(0x7f0000000bc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, &(0x7f0000000340)="f780d7cceaad88837cda738e147a4638f77f36ae69acbf619ae53e495ab4d028478543a0582933f0d97a925a13c521d7e966a742c2b36b2cc27be7c68cb21424efb94880030f890c7a413785105c7fa7e47a812bb80669e1e059f6584664b5d3a5de7e48f4069c3474d15bfda0380888869151d32e0733053441a4675d44e7dd32bc7b7b180ebad49d52cabe277fdf65579adddd3a44f7e15dcaba4e86e5da74471fec08b1831ce940000037e060d40a74b1ecc5aebb8b5ac2a8505a4892f306b361f986167bb8e752c40c06ad32be6f755e2ab3ed17ffb02fd571012fce8810fa293d59714ca499599889659e443177da6085dfb8810196c6", 0xf9, 0x5, 0x0, 0x1, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000440)="a91dc7067f32984b45e2de4201209f740219df50ce7c7c2bb095b44a853d8d6ef00e91ba228b9cd179b2e0735c85a115a1", 0x31, 0x7, 0x0, 0x3, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, r7, &(0x7f00000005c0)="eb5e73163ab56259a96247cf1230fd3e16832186fdf4f5b3db00f03f813efdf71e922076e9cee388ddcb8de2310e08c13c9584de576c0b3e5c7668682cc5f55da003bc0d2358a83081d21de255f834e71119b9a1e36bb9", 0x57, 0x100000000, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4, r8, &(0x7f00000006c0)="33f579fa181f4bce038cd952f8569f3eaa2e91be340da49e783d7983268110c20d954385cd275942d9cd5decda00634fe95679127f24177fa72fdb6af58cfced94c2c2470b2ee96604c5cb482b9613eed0bd2a4f34d4c638ddd2e399e4d39aa2eac5346b7823557f66496e56f3855563675af55601f9f0f4c126bb59d2b8f47e43d8fee79fbeeb41fd1c11c0fcc5e1f9dce1380fbae2adf06b4135f8e0ec414c7ada8d50470f2b89ef811307d3207621ae445ce7403fcff6bdc34d97572d2fb1b49d32632aca61b2dc71158755811a2a06dbeff0487c0c08e54ce7c2498f12e49a", 0xe1, 0xf769, 0x0, 0x3, r9}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0xd, r0, &(0x7f0000000800)="efabc76cf31f0937caee311425f09ad0cb7b70278e09bf261e762ec63ae7b837fd0fb610602227446d5b903ccfd2c4cbb0cc0d07560044b311f47b7dae63ffd1c4d33910af9c72c783345ac125249af5195dc665467088a12adf0007f5c212f45b641d93e5ab0b8568bf9617887db90e6067afc83e08b72de17a8ba5fc6fe800b0ca9791ec33b95c1905efeae03e7eb90d2d93db7fbd2e3715a60ca78b647e541574cf84f0293ffc08239e6603d61315138a720754eacf53ed605a67f8d83dc2480f209c1d68c7b19d2cc33473d75e474c", 0xd1, 0x5, 0x0, 0x3, r10}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x6, r11, &(0x7f0000000940)="2c473c1efda7ac352f8a0dd7387b1c60cf29d9dfcdd82284cc79f917e5164ffbcad3135ae8dbd31537495b2c7fc317c981b4299a", 0x34, 0x6, 0x0, 0x0, r12}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0xd, r13, &(0x7f00000009c0)="7dbe8df0ee35715adf29085dfbb3c5adaef12b2f1580feda6a279747fac74a0b3d168e8747fdc9440e4f8898b6415caf9beedcef25e113a6d6a2432fe908f7fdf1f9510103f70ee2f15627e18f5fbb268a51f760e7fdfb488abda838509d45450cb4350458042f0a869313c3a7a1cbf575", 0x71, 0x8, 0x0, 0x2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000a80)="94aa970ff8e2c45055", 0x9, 0x1, 0x0, 0x2, r14}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000000b00)="0f5b87fc2a3bcaa1ffb1314ff21340e4367adb50fbe46d504d8e326e666fa26127b177b4bb9bfed693fc64ad41fc04c4c99b91dc1968ecf9f39c8f5f89ef95102348677dbda69d64be9f93b5795d3fa1", 0x50, 0x7fffffffffffffff, 0x0, 0x2, r15}]) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r16, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)={0x14, r18, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) 1.847507743s ago: executing program 1 (id=187): mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x18010a0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x2f78, &(0x7f0000000580)={0x0, 0x42dd, 0x4, 0x2, 0x272}, &(0x7f0000000280), &(0x7f0000000640)) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000400)={0x0, 0xc0d5, 0x2000, 0x2, 0x168, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r6 = epoll_create(0xb398) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x800042, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x103}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) read$FUSE(r8, &(0x7f0000004500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000002c0)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x0, 0x1, 0x200, 0x1, 0x41, 0x0, 0x0, 0x1, 0x6}}, 0x50) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r8, 0x1) r10 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="85820b27f4d50a7f4c004a3e334f213a5c7a49404314d9874c8570af4732f49d3496b52c22922dc61405dcb556c3d56773ca112ddc3294f30c42faf9082208f94ad16fd7c6cb", 0x46}, {&(0x7f0000000340)="bf1b4585591ca3fa7122d92b11af463e06c16c7c16bd3e64cee02edf363f2777bac9524c01c57b018a79b072b8a16286e8101c314d416300fce4274c589aaa844bd0163e08937eb5b62100d9b9e4eee24fd37ad46e2041e35784cfc46310ae6c0ccd783e831d8e72488ce47dce8e41d0aad7c3acb4d584624287a1b74e38481df2aaa0f312f244d72d05084826cd9526981f", 0x92}, {&(0x7f0000000480)="6accaa397f88d849ecb68d7b38e53c4d12e7c4ed78295f530370e2bfc03002a7c2f5f7741546479e40da1c913b2331f73d15e02be0583b76befeecb7b173bc52159c8f91de93efac9fe4939e327cef62ce8f9f786fc2c552013862f3e35a7830300f2ada23db073454faeb04db89a37b6be85bff41e717ad342c8a0b2ce578c490bc3dbfd30cc43f668992be0453cbc3ad12547448082601ceb871c2911b60590e5f6483d150d48b48d1e0e2b6d0c2a4bfd84057939dab1980e008cda33995d4522b9c96ef6bcb451f3bb935aafcd3bf7c50cd32b61d82ba793064d3e206ca9287d48ab31cb2b0f19e9d015085551171b9f83ddc3729b1f67321", 0xfa}], 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r12, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.450808084s ago: executing program 3 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) 1.418362474s ago: executing program 4 (id=189): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x4, {0x4, 0x1, "a7ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 294.894936ms ago: executing program 3 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x40}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08", @ANYRES32=0x41424344], 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 229.316779ms ago: executing program 2 (id=191): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00', {0xbd}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x20, 0x40009, 0x0, 0x401, 0x22, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2, [0xfff, 0x2]}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 0s ago: executing program 0 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x5, 0x2, 0x0, 0x2, 0x25dfdbfd}, 0x10}}, 0x20000844) setreuid(0x0, 0xee00) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000fdc92909", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="5c00000014006b05c84e21000ab16d6e230675f81100000044000200178810cd51f50fc85817d30461bc01000000a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bbd70000b6c0504bb918", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 84.105967][ T5824] cgroup: Unknown subsys name 'net' [ 84.219907][ T5824] cgroup: Unknown subsys name 'cpuset' [ 84.229514][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.919191][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.295413][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.303953][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.312057][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.320236][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.328743][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.338000][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.345995][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.353587][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.361782][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.369732][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.410548][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.418813][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.427032][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.435223][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.443105][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.445214][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.459054][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.467663][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.480253][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.485394][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.494086][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.495720][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.515432][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.524913][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.532746][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.087720][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.215029][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 91.228999][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.388576][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.469065][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.477675][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.485139][ T5834] bridge_slave_0: entered allmulticast mode [ 91.492980][ T5834] bridge_slave_0: entered promiscuous mode [ 91.502711][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.510015][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.517491][ T5834] bridge_slave_1: entered allmulticast mode [ 91.524908][ T5834] bridge_slave_1: entered promiscuous mode [ 91.619057][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.659449][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.667176][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.674416][ T5849] bridge_slave_0: entered allmulticast mode [ 91.681973][ T5849] bridge_slave_0: entered promiscuous mode [ 91.689525][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.704363][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.728122][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.735257][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.742608][ T5836] bridge_slave_0: entered allmulticast mode [ 91.750528][ T5836] bridge_slave_0: entered promiscuous mode [ 91.763572][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.770951][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.779171][ T5849] bridge_slave_1: entered allmulticast mode [ 91.787286][ T5849] bridge_slave_1: entered promiscuous mode [ 91.830056][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.837452][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.845275][ T5836] bridge_slave_1: entered allmulticast mode [ 91.856055][ T5836] bridge_slave_1: entered promiscuous mode [ 91.901083][ T5834] team0: Port device team_slave_0 added [ 91.969966][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.995192][ T5834] team0: Port device team_slave_1 added [ 92.015702][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.023840][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.033667][ T5847] bridge_slave_0: entered allmulticast mode [ 92.041163][ T5847] bridge_slave_0: entered promiscuous mode [ 92.051321][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.098447][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.111684][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.121285][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.129276][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.136684][ T5847] bridge_slave_1: entered allmulticast mode [ 92.144128][ T5847] bridge_slave_1: entered promiscuous mode [ 92.214344][ T5849] team0: Port device team_slave_0 added [ 92.229576][ T5849] team0: Port device team_slave_1 added [ 92.247149][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.254154][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.280670][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.294708][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.303051][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.334442][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.386828][ T5841] Bluetooth: hci0: command tx timeout [ 92.415308][ T5836] team0: Port device team_slave_0 added [ 92.424730][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.438166][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.466413][ T5841] Bluetooth: hci1: command tx timeout [ 92.481334][ T5836] team0: Port device team_slave_1 added [ 92.502499][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.510007][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.537515][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.548167][ T5841] Bluetooth: hci2: command tx timeout [ 92.548525][ T5841] Bluetooth: hci3: command tx timeout [ 92.571366][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.578696][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.586297][ T5843] bridge_slave_0: entered allmulticast mode [ 92.594320][ T5843] bridge_slave_0: entered promiscuous mode [ 92.626958][ T5841] Bluetooth: hci4: command tx timeout [ 92.650961][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.658197][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.684542][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.709104][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.716770][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.724153][ T5843] bridge_slave_1: entered allmulticast mode [ 92.731693][ T5843] bridge_slave_1: entered promiscuous mode [ 92.756751][ T5847] team0: Port device team_slave_0 added [ 92.777224][ T5834] hsr_slave_0: entered promiscuous mode [ 92.783817][ T5834] hsr_slave_1: entered promiscuous mode [ 92.806369][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.813489][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.840010][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.853091][ T5847] team0: Port device team_slave_1 added [ 92.891070][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.898368][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.924523][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.984017][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.018088][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.025079][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.051926][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.069410][ T5849] hsr_slave_0: entered promiscuous mode [ 93.077259][ T5849] hsr_slave_1: entered promiscuous mode [ 93.084129][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.091985][ T5849] Cannot create hsr debugfs directory [ 93.115654][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.161952][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.169085][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.195674][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.229640][ T5843] team0: Port device team_slave_0 added [ 93.286648][ T5843] team0: Port device team_slave_1 added [ 93.300072][ T5836] hsr_slave_0: entered promiscuous mode [ 93.307330][ T5836] hsr_slave_1: entered promiscuous mode [ 93.313448][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.321284][ T5836] Cannot create hsr debugfs directory [ 93.495803][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.503943][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.530662][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.582982][ T5847] hsr_slave_0: entered promiscuous mode [ 93.590419][ T5847] hsr_slave_1: entered promiscuous mode [ 93.596804][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.604534][ T5847] Cannot create hsr debugfs directory [ 93.618242][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.625251][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.651753][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.924095][ T5843] hsr_slave_0: entered promiscuous mode [ 93.930680][ T5843] hsr_slave_1: entered promiscuous mode [ 93.937525][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.945112][ T5843] Cannot create hsr debugfs directory [ 94.053335][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.105237][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.141066][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.153282][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.263196][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.289344][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.322863][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.359292][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.424657][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.458558][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.467115][ T5841] Bluetooth: hci0: command tx timeout [ 94.474830][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.488519][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.546266][ T5841] Bluetooth: hci1: command tx timeout [ 94.588699][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.619402][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.627403][ T5841] Bluetooth: hci3: command tx timeout [ 94.636927][ T5841] Bluetooth: hci2: command tx timeout [ 94.641588][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.675753][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.708419][ T5841] Bluetooth: hci4: command tx timeout [ 94.754152][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.818694][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.830017][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.853776][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.863250][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.885667][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.893494][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.908233][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.963651][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.971190][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.032795][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.075025][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.113136][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.147027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.154212][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.180371][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.211637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.219139][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.245442][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.252644][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.292195][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.299426][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.342446][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.376760][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.458145][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.512762][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.519996][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.542554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.549815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.567286][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.621224][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.628482][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.704286][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.711518][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.833386][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.033070][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.095062][ T5834] veth0_vlan: entered promiscuous mode [ 96.197942][ T5834] veth1_vlan: entered promiscuous mode [ 96.244411][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.272143][ T5849] veth0_vlan: entered promiscuous mode [ 96.348988][ T5849] veth1_vlan: entered promiscuous mode [ 96.411563][ T5834] veth0_macvtap: entered promiscuous mode [ 96.445164][ T5834] veth1_macvtap: entered promiscuous mode [ 96.508548][ T5849] veth0_macvtap: entered promiscuous mode [ 96.521790][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.535198][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.548964][ T5841] Bluetooth: hci0: command tx timeout [ 96.554818][ T5836] veth0_vlan: entered promiscuous mode [ 96.571633][ T5849] veth1_macvtap: entered promiscuous mode [ 96.595712][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.621664][ T5836] veth1_vlan: entered promiscuous mode [ 96.628073][ T5841] Bluetooth: hci1: command tx timeout [ 96.643993][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.682474][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.691784][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.700996][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.710568][ T51] Bluetooth: hci3: command tx timeout [ 96.711372][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.716206][ T5841] Bluetooth: hci2: command tx timeout [ 96.784948][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.797070][ T5841] Bluetooth: hci4: command tx timeout [ 96.895593][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.909060][ T5847] veth0_vlan: entered promiscuous mode [ 96.949750][ T5847] veth1_vlan: entered promiscuous mode [ 96.961989][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.973700][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.983893][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.993415][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.058859][ T5836] veth0_macvtap: entered promiscuous mode [ 97.113673][ T10] cfg80211: failed to load regulatory.db [ 97.123569][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.141358][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.143313][ T5836] veth1_macvtap: entered promiscuous mode [ 97.199843][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.217966][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.253380][ T5847] veth0_macvtap: entered promiscuous mode [ 97.275195][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.283957][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.288306][ T5847] veth1_macvtap: entered promiscuous mode [ 97.309390][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.319997][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.328929][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.330565][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.403692][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.415714][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.425431][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.435621][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.444816][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.461592][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.461592][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.505063][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.520349][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.533424][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.542674][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.551544][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.562780][ T5843] veth0_vlan: entered promiscuous mode [ 97.648078][ T5843] veth1_vlan: entered promiscuous mode [ 97.702550][ T5953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.812731][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.814036][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.855724][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.873544][ T5843] veth0_macvtap: entered promiscuous mode [ 97.882158][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.961811][ T5954] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.971576][ T5954] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.980904][ T5954] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.990709][ T5954] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.003616][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.029058][ T5954] Zero length message leads to an empty skb [ 98.038752][ T5843] veth1_macvtap: entered promiscuous mode [ 98.076036][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.084088][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.184306][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.191858][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.217814][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.273022][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 98.289918][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.297726][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 98.311651][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.321129][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.337381][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.347421][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.363679][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.389359][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.476391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.556481][ T5959] ceph: No mds server is up or the cluster is laggy [ 98.622707][ T43] libceph: connect (1)[c::]:6789 error -101 [ 98.636110][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 98.657280][ T5841] Bluetooth: hci0: command tx timeout [ 98.706375][ T5841] Bluetooth: hci1: command tx timeout [ 98.795534][ T5841] Bluetooth: hci2: command tx timeout [ 98.806343][ T51] Bluetooth: hci3: command tx timeout [ 98.866722][ T51] Bluetooth: hci4: command tx timeout [ 99.333252][ T5966] ceph: No mds server is up or the cluster is laggy [ 99.357912][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 99.473640][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 99.567191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.716305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.724825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.733824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.742771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.806142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.917359][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.006338][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.458700][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.467733][ T5984] overlayfs: overlapping lowerdir path [ 100.552161][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.671571][ T5983] process 'syz.3.9' launched '/dev/fd/8' with NULL argv: empty string added [ 100.844550][ T5987] sock: sock_set_timeout: `syz.3.9' (pid 5987) tries to set negative timeout [ 100.905597][ T5987] tipc: Started in network mode [ 100.913013][ T5987] tipc: Node identity ., cluster identity 4711 [ 100.924358][ T5987] tipc: Enabling of bearer rejected, failed to enable media [ 101.136330][ T5935] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.187197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.327197][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 101.362034][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.411181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.462094][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.600224][ T5935] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 101.703146][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.940674][ T5935] usb 2-1: config 0 descriptor?? [ 102.127592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 102.132545][ T5999] ceph: No mds server is up or the cluster is laggy [ 102.321809][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 102.375814][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 102.814100][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 102.817648][ T5935] uclogic 0003:2179:0053.0001: interface is invalid, ignoring [ 102.901131][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 102.962186][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 102.998049][ T6010] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.206286][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 103.227667][ T6008] ceph: No mds server is up or the cluster is laggy [ 103.310714][ T5923] usb 2-1: USB disconnect, device number 2 [ 103.502193][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 103.693241][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 104.602478][ T30] audit: type=1326 audit(1755440449.723:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.3.16" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45d3f8ebe9 code=0x0 [ 105.035568][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 105.085845][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.168237][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.206162][ T980] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.398851][ T980] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.444759][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.477318][ T980] usb 5-1: Product: syz [ 105.507619][ T980] usb 5-1: Manufacturer: syz [ 105.512294][ T980] usb 5-1: SerialNumber: syz [ 105.617335][ T980] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.719925][ T43] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.770069][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.791439][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.817684][ T43] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 106.852099][ T43] ath9k_htc: Failed to initialize the device [ 106.876956][ T5844] usb 5-1: USB disconnect, device number 2 [ 107.046008][ T3414] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.493488][ T5844] usb 5-1: ath9k_htc: USB layer deinitialized [ 107.578113][ T3414] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 107.589836][ T3414] usb 1-1: config 0 has no interface number 0 [ 107.612697][ T3414] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 107.632190][ T3414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.058687][ T3414] usb 1-1: Product: syz [ 108.062978][ T3414] usb 1-1: Manufacturer: syz [ 108.070373][ T3414] usb 1-1: SerialNumber: syz [ 108.109915][ T3414] usb 1-1: config 0 descriptor?? [ 108.287846][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'. [ 108.305220][ T6088] usb usb8: usbfs: process 6088 (syz.2.22) did not claim interface 0 before use [ 108.354345][ T3414] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 108.403348][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.407028][ T980] libceph: connect (1)[c::]:6789 error -101 [ 108.445528][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 108.544488][ T3414] usb 1-1: Failed to create links for entity 32 [ 108.556191][ T6087] ceph: No mds server is up or the cluster is laggy [ 108.980329][ T980] libceph: connect (1)[c::]:6789 error -101 [ 108.996087][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 109.009198][ T3414] usb 1-1: Failed to register entities (-22). [ 109.128318][ T3414] usb 1-1: USB disconnect, device number 2 [ 109.763779][ T5844] usb 5-1: device descriptor read/all, error -71 [ 110.526956][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 110.901503][ T3414] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.762076][ T3414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.796276][ T3414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.920415][ T3414] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.955895][ T3414] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 112.012618][ T3414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.078964][ T3414] usb 4-1: config 0 descriptor?? [ 112.793596][ T3414] apple 0003:05AC:029F.0002: unknown main item tag 0x0 [ 112.885958][ T3414] apple 0003:05AC:029F.0002: unknown main item tag 0x0 [ 112.909906][ T3414] apple 0003:05AC:029F.0002: unknown main item tag 0x0 [ 113.171512][ T3414] apple 0003:05AC:029F.0002: unknown main item tag 0x0 [ 113.866818][ T3414] apple 0003:05AC:029F.0002: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.3-1/input0 [ 113.884003][ T6138] ceph: No mds server is up or the cluster is laggy [ 113.891956][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 113.910331][ T3414] usb 4-1: USB disconnect, device number 2 [ 113.935285][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 114.125294][ T6149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.310824][ T43] libceph: connect (1)[c::]:6789 error -101 [ 114.478065][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 114.791373][ T6150] fido_id[6150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 115.272175][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.856682][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.45'. [ 115.942880][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.989237][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.014895][ T5902] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 116.038938][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.058627][ T5902] usb 3-1: config 0 descriptor?? [ 116.980935][ T5902] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 117.457742][ T6170] netlink: 'syz.2.44': attribute type 16 has an invalid length. [ 117.465500][ T6170] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 117.576837][ T6170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.44'. [ 117.591787][ T5902] hid-led 0003:1D34:0004.0003: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 117.615614][ T5902] hid-led 0003:1D34:0004.0003: Dream Cheeky Webmail Notifier initialized [ 117.749798][ T5902] usb 3-1: USB disconnect, device number 2 [ 117.923116][ T6177] fido_id[6177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.050798][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 118.057076][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 118.267849][ T6190] ceph: No mds server is up or the cluster is laggy [ 118.623859][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 118.657820][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 120.553153][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.64'. [ 120.956580][ T3414] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.176701][ T3414] usb 1-1: Using ep0 maxpacket: 16 [ 121.192570][ T3414] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 121.217587][ T3414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.250567][ T3414] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.364127][ T3414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.476096][ T3414] usb 1-1: Product: syz [ 121.527200][ T3414] usb 1-1: Manufacturer: syz [ 121.561575][ T3414] usb 1-1: SerialNumber: syz [ 121.857925][ T3414] usb 1-1: config 0 descriptor?? [ 121.902141][ T3414] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.958521][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 121.964671][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 121.993972][ T6248] mkiss: ax0: crc mode is auto. [ 122.002462][ T3414] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 122.070495][ T6244] ceph: No mds server is up or the cluster is laggy [ 122.430982][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 122.460038][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 123.512941][ T3414] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 123.540618][ T3414] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 123.575056][ T3414] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 123.790795][ T3414] em28xx 1-1:0.0: No AC97 audio processor [ 123.864855][ T6269] xt_hashlimit: size too large, truncated to 1048576 [ 126.745966][ T890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.896063][ T890] usb 4-1: device descriptor read/64, error -71 [ 126.909148][ T980] usb 1-1: USB disconnect, device number 3 [ 127.127857][ T980] em28xx 1-1:0.0: Disconnecting em28xx [ 127.435999][ T890] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.541581][ T980] em28xx 1-1:0.0: Freeing device [ 127.696125][ T890] usb 4-1: device descriptor read/64, error -71 [ 127.807494][ T890] usb usb4-port1: attempt power cycle [ 128.204529][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 128.210710][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 128.223960][ T890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.548541][ T6309] ceph: No mds server is up or the cluster is laggy [ 128.822710][ T890] usb 4-1: device descriptor read/8, error -71 [ 129.902046][ T6320] mmap: syz.0.84 (6320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.736273][ T890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.815376][ T890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.888919][ T890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.951388][ T890] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 130.992951][ T890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.088148][ T890] usb 4-1: config 0 descriptor?? [ 132.820177][ T890] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 132.853720][ T890] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 132.977863][ T890] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 133.191653][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 133.203372][ T5894] usb 4-1: USB disconnect, device number 6 [ 133.351526][ T6354] fido_id[6354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 133.536129][ T890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.706056][ T890] usb 2-1: Using ep0 maxpacket: 16 [ 133.719633][ T890] usb 2-1: config 4 has an invalid interface number: 37 but max is 0 [ 133.728841][ T890] usb 2-1: config 4 has no interface number 0 [ 133.735001][ T890] usb 2-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 133.745022][ T890] usb 2-1: config 4 interface 37 has no altsetting 0 [ 133.770118][ T890] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 133.813019][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.866911][ T890] usb 2-1: Product: syz [ 133.872695][ T890] usb 2-1: Manufacturer: syz [ 133.896549][ T890] usb 2-1: SerialNumber: syz [ 133.925061][ T6355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.533414][ T890] usb 2-1: USB disconnect, device number 3 [ 134.596605][ T6370] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 134.746248][ T6376] netlink: 52 bytes leftover after parsing attributes in process `syz.3.97'. [ 134.825971][ T5894] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.968699][ T980] libceph: connect (1)[c::]:6789 error -101 [ 134.980213][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 134.990811][ T5894] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.137918][ T5894] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 135.183929][ T5894] usb 1-1: config 220 has no interface number 2 [ 135.191263][ T5894] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.255481][ T980] libceph: connect (1)[c::]:6789 error -101 [ 135.274400][ T5894] usb 1-1: config 220 interface 0 has no altsetting 0 [ 135.278336][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 135.284931][ T5894] usb 1-1: config 220 interface 76 has no altsetting 0 [ 135.289095][ T6381] ceph: No mds server is up or the cluster is laggy [ 135.625972][ T5894] usb 1-1: config 220 interface 1 has no altsetting 0 [ 135.648210][ T5894] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.674967][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.718067][ T5894] usb 1-1: Product: syz [ 135.722342][ T5894] usb 1-1: Manufacturer: syz [ 135.765937][ T5894] usb 1-1: SerialNumber: syz [ 136.235258][ T6371] bridge_slave_0: left allmulticast mode [ 136.241027][ T6371] bridge_slave_0: left promiscuous mode [ 136.247414][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.285956][ T6371] bridge_slave_1: left allmulticast mode [ 136.291684][ T6371] bridge_slave_1: left promiscuous mode [ 136.298674][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.322464][ T6371] bond0: (slave bond_slave_0): Releasing backup interface [ 136.343342][ T6371] bond0: (slave bond_slave_1): Releasing backup interface [ 136.631279][ T6371] team0: Port device team_slave_0 removed [ 136.659498][ T6371] team0: Port device team_slave_1 removed [ 136.667014][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.674492][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.665009][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.673034][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.291945][ T5894] usb 1-1: selecting invalid altsetting 0 [ 141.324903][ T5894] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 141.365983][ T5894] usb 1-1: No valid video chain found. [ 141.432923][ T5894] usb 1-1: selecting invalid altsetting 0 [ 141.501969][ T5894] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 141.625095][ T5894] usb 1-1: USB disconnect, device number 4 [ 142.065507][ T6426] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 142.072334][ T6426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.092933][ T6426] vhci_hcd vhci_hcd.0: Device attached [ 142.326048][ T3414] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 142.355416][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 142.366350][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 142.378502][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.489707][ T6442] ceph: No mds server is up or the cluster is laggy [ 142.622529][ T890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.670392][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 142.696046][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 142.906576][ T5894] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 142.914843][ T5894] usb 1-1: config 0 has no interface number 0 [ 142.952416][ T5894] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 142.952802][ T6436] vhci_hcd: connection reset by peer [ 142.970213][ T5894] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 142.985902][ T890] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.994492][ T5894] usb 1-1: config 0 interface 255 has no altsetting 0 [ 143.021762][ T5894] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 143.035167][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.045325][ T49] vhci_hcd: stop threads [ 143.052635][ T49] vhci_hcd: release socket [ 143.069868][ T49] vhci_hcd: disconnect device [ 143.074777][ T5894] usb 1-1: Product: syz [ 143.082111][ T5894] usb 1-1: Manufacturer: syz [ 143.083602][ T890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.092093][ T5894] usb 1-1: SerialNumber: syz [ 143.115089][ T890] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 143.133998][ T5894] usb 1-1: config 0 descriptor?? [ 143.134769][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.172812][ T890] usb 2-1: config 0 descriptor?? [ 143.353686][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.370934][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.380809][ T5909] usb 1-1: USB disconnect, device number 5 [ 143.416218][ T980] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.475313][ T6457] 9pnet_fd: Insufficient options for proto=fd [ 143.706000][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 143.736032][ T980] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 143.894664][ T890] logitech 0003:046D:C29C.0005: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 143.908802][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.918072][ T980] usb 4-1: Product: syz [ 143.922841][ T980] usb 4-1: Manufacturer: syz [ 143.928026][ T980] usb 4-1: SerialNumber: syz [ 143.937168][ T980] usb 4-1: config 0 descriptor?? [ 144.054327][ T890] logitech 0003:046D:C29C.0005: no inputs found [ 144.144403][ T6451] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20000 [ 144.194919][ T980] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 144.219902][ T980] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 144.266505][ T980] usb 2-1: USB disconnect, device number 4 [ 144.276162][ T6457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.321285][ T6457] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 144.391523][ T6465] fido_id[6465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 144.563329][ T30] audit: type=1326 audit(1755440490.113:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 144.594765][ T6457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.603342][ T30] audit: type=1326 audit(1755440490.113:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 144.635179][ T6457] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 144.693080][ T30] audit: type=1326 audit(1755440490.143:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.106429][ T30] audit: type=1326 audit(1755440490.143:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.128216][ T30] audit: type=1326 audit(1755440490.143:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.151109][ T30] audit: type=1326 audit(1755440490.143:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.212950][ T5844] usb 4-1: USB disconnect, device number 7 [ 145.233337][ T30] audit: type=1326 audit(1755440490.143:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.274762][ T6457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.302737][ T30] audit: type=1326 audit(1755440490.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.330835][ T30] audit: type=1326 audit(1755440490.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.501353][ T30] audit: type=1326 audit(1755440490.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41ff8ebe9 code=0x7ffc0000 [ 145.528761][ T6457] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.583798][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 146.816127][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 147.094942][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 147.101239][ T6498] ceph: No mds server is up or the cluster is laggy [ 147.110260][ T6457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.120515][ T6457] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 147.138690][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 147.175275][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 147.321523][ T6457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.363008][ T6457] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 147.496104][ T3414] vhci_hcd: vhci_device speed not set [ 147.661504][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 147.961308][ T6504] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 147.987524][ T6504] team0 (unregistering): Port device team_slave_0 removed [ 148.005664][ T6504] team0 (unregistering): Failed to send options change via netlink (err -105) [ 148.015504][ T6504] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 148.027475][ T6504] team0 (unregistering): Port device team_slave_1 removed [ 148.078445][ T890] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 148.297113][ T890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.321719][ T890] usb 1-1: not running at top speed; connect to a high speed hub [ 148.353415][ T890] usb 1-1: config 3 has an invalid interface number: 29 but max is 0 [ 148.387495][ T890] usb 1-1: config 3 has no interface number 0 [ 148.393721][ T890] usb 1-1: config 3 interface 29 has no altsetting 0 [ 148.459571][ T890] usb 1-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=fe.6f [ 148.523938][ T890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.730498][ T6523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.128'. [ 148.752861][ T890] usb 1-1: Product: syz [ 148.765983][ T890] usb 1-1: Manufacturer: syz [ 148.770883][ T890] usb 1-1: SerialNumber: syz [ 149.457445][ T890] usb 1-1: USB disconnect, device number 6 [ 149.491786][ T6539] overlay: Unknown parameter 'measure' [ 149.874012][ T6544] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 150.239682][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 150.271205][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 150.500919][ T6550] ceph: No mds server is up or the cluster is laggy [ 150.793789][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 150.816132][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 151.826931][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 151.833415][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 152.827080][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 152.846094][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 153.196773][ T6573] tipc: Started in network mode [ 153.201743][ T6573] tipc: Node identity 7f000001, cluster identity 4711 [ 153.297623][ T6573] tipc: Enabled bearer , priority 10 [ 155.073204][ T890] tipc: Node number set to 2130706433 [ 155.636544][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.650760][ T6617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.145'. [ 155.673365][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.682322][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.824672][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.876200][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.899153][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.927463][ T5909] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 155.953841][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.985038][ T5909] usb 4-1: config 0 descriptor?? [ 157.048779][ T5909] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 157.097018][ T5909] acrux 0003:1A34:0802.0006: no inputs found [ 157.115919][ T5909] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19 [ 158.283427][ T6650] fuse: Bad value for 'max_read' [ 158.299763][ T5909] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 158.891549][ T3414] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.180427][ T3414] usb 1-1: Using ep0 maxpacket: 8 [ 159.201584][ T3414] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 159.735909][ T3414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.766307][ T3414] usb 1-1: Product: syz [ 159.770548][ T3414] usb 1-1: Manufacturer: syz [ 159.775188][ T3414] usb 1-1: SerialNumber: syz [ 159.778516][ T890] usb 4-1: USB disconnect, device number 8 [ 159.867130][ T3414] usb 1-1: config 0 descriptor?? [ 159.916127][ T3414] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 159.951069][ T3414] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 160.100799][ T3414] usb 1-1: USB disconnect, device number 7 [ 160.649241][ T6699] serio: Serial port ptm0 [ 161.570087][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.579137][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.598364][ T6705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.890002][ T6715] Bluetooth: MGMT ver 1.23 [ 161.918549][ T890] libceph: connect (1)[c::]:6789 error -101 [ 161.928630][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 162.209733][ T890] libceph: connect (1)[c::]:6789 error -101 [ 162.511845][ T6720] ceph: No mds server is up or the cluster is laggy [ 162.521942][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 162.523308][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 162.692232][ T6731] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.701169][ T6731] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.709997][ T6731] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.718764][ T6731] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.810785][ T6731] vxlan0: entered promiscuous mode [ 163.066181][ T5923] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.368306][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 163.795875][ T5923] usb 1-1: config 2 has an invalid interface number: 169 but max is 0 [ 163.804125][ T5923] usb 1-1: config 2 has no interface number 0 [ 163.881293][ T5923] usb 1-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.969731][ T5923] usb 1-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.114317][ T5923] usb 1-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 164.130952][ T5923] usb 1-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 164.143244][ T5923] usb 1-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.186020][ T5923] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 164.211132][ T5844] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.215587][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.312013][ T5923] cypress_m8 1-1:2.169: DeLorme Earthmate USB converter detected [ 164.607441][ T5923] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 164.706031][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 164.710087][ T5923] usb 1-1: USB disconnect, device number 8 [ 164.719141][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.737265][ T5844] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 164.756902][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.764980][ T5844] usb 4-1: Product: syz [ 164.775910][ T5844] usb 4-1: Manufacturer: syz [ 164.780589][ T5844] usb 4-1: SerialNumber: syz [ 164.781784][ T5923] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 164.931061][ T5844] usb 4-1: config 0 descriptor?? [ 165.021428][ T5923] cypress_m8 1-1:2.169: device disconnected [ 165.705287][ T6771] sctp: failed to load transform for md5: -2 [ 165.983140][ T5844] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 166.604928][ T5844] usb 4-1: USB disconnect, device number 10 [ 167.057493][ T5909] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 167.302705][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.396875][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.464263][ T5909] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 167.476215][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.541186][ T890] libceph: connect (1)[c::]:6789 error -101 [ 167.565590][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 167.595765][ T5909] usb 1-1: config 0 descriptor?? [ 167.662626][ T6801] ceph: No mds server is up or the cluster is laggy [ 167.879803][ T6811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.031341][ T6793] netlink: 'syz.0.182': attribute type 13 has an invalid length. [ 168.040751][ T6793] macvtap0: entered promiscuous mode [ 168.063429][ T6793] macvtap0: refused to change device tx_queue_len [ 168.107850][ T5909] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 168.114721][ T5909] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 168.182128][ T5909] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 168.308925][ T5909] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 168.332926][ T5909] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 168.363816][ T5909] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 168.563023][ T5909] usb 1-1: USB disconnect, device number 9 [ 168.609754][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.394340][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 169.412466][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.442361][ T5844] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 169.483354][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.500617][ T6829] x_tables: duplicate entry at hook 2 [ 169.564654][ T5844] usb 5-1: config 0 descriptor?? [ 169.598704][ T6830] ------------[ cut here ]------------ [ 169.604460][ T6830] WARNING: CPU: 1 PID: 6830 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 169.614450][ T6830] Modules linked in: [ 169.618699][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.3.190 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 169.628715][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.638892][ T6830] RIP: 0010:folio_memcg+0x1a8/0x310 [ 169.644166][ T6830] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 169.663948][ T6830] RSP: 0018:ffffc9001c377250 EFLAGS: 00010287 [ 169.670319][ T6830] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 169.678426][ T6830] RDX: ffffc9000c95c000 RSI: 0000000000001d20 RDI: 0000000000001d21 [ 169.686467][ T6830] RBP: 0000000000000000 R08: ffffea0000a63387 R09: 1ffffd400014c670 [ 169.694480][ T6830] R10: dffffc0000000000 R11: fffff9400014c671 R12: ffffea0000a633b0 [ 169.702589][ T6830] R13: dffffc0000000000 R14: ffff8880275e6100 R15: 0000000000000002 [ 169.710663][ T6830] FS: 00007f45d4d1b6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 169.719700][ T6830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.726340][ T6830] CR2: 0000000000000000 CR3: 0000000032e9e000 CR4: 00000000003526f0 [ 169.734360][ T6830] Call Trace: [ 169.737724][ T6830] [ 169.740684][ T6830] workingset_activation+0x5f/0x4a0 [ 169.746270][ T6830] ? folio_mark_accessed+0x361/0x4a0 [ 169.751602][ T6830] folio_mark_accessed+0x3b5/0x4a0 [ 169.756838][ T6830] kvm_release_page_clean+0x9a/0xe0 [ 169.762084][ T6830] kvm_tdp_page_fault+0x2dd/0x370 [ 169.767246][ T6830] kvm_mmu_do_page_fault+0x2c5/0x640 [ 169.772597][ T6830] ? vmx_vcpu_run+0xd8b/0x25d0 [ 169.777462][ T6830] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 169.783346][ T6830] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 169.789077][ T6830] kvm_mmu_page_fault+0x22f/0xb70 [ 169.794160][ T6830] ? __pfx_handle_ept_violation+0x10/0x10 [ 169.799997][ T6830] vmx_handle_exit+0x1090/0x18a0 [ 169.804995][ T6830] ? vcpu_run+0x361c/0x6f70 [ 169.809637][ T6830] vcpu_run+0x432e/0x6f70 [ 169.814041][ T6830] ? vcpu_run+0x361c/0x6f70 [ 169.818703][ T6830] ? __pfx_vcpu_run+0x10/0x10 [ 169.823438][ T6830] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 169.829534][ T6830] ? rcu_is_watching+0x15/0xb0 [ 169.834359][ T6830] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 169.840070][ T6830] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 169.845920][ T6830] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 169.851968][ T6830] ? rcu_is_watching+0x15/0xb0 [ 169.856882][ T6830] ? look_up_lock_class+0x74/0x170 [ 169.862051][ T6830] ? register_lock_class+0x51/0x320 [ 169.867413][ T6830] ? __lock_acquire+0xab9/0xd20 [ 169.872353][ T6830] kvm_vcpu_ioctl+0x95c/0xe90 [ 169.877177][ T6830] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 169.882430][ T6830] ? __lock_acquire+0xab9/0xd20 [ 169.887420][ T6830] ? __asan_memset+0x22/0x50 [ 169.892078][ T6830] ? smack_file_ioctl+0x302/0x340 [ 169.897322][ T6830] ? __pfx_smack_file_ioctl+0x10/0x10 [ 169.902770][ T6830] ? __fget_files+0x2a/0x420 [ 169.907490][ T6830] ? __fget_files+0x3a0/0x420 [ 169.912219][ T6830] ? __fget_files+0x2a/0x420 [ 169.916958][ T6830] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.921989][ T6830] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 169.927306][ T6830] __se_sys_ioctl+0xfc/0x170 [ 169.931971][ T6830] do_syscall_64+0xfa/0x3b0 [ 169.936670][ T6830] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.941917][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.948105][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 169.952844][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.958849][ T6830] RIP: 0033:0x7f45d3f8ebe9 [ 169.963336][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.983155][ T6830] RSP: 002b:00007f45d4d1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.991728][ T6830] RAX: ffffffffffffffda RBX: 00007f45d41b6090 RCX: 00007f45d3f8ebe9 [ 169.999817][ T6830] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 170.007891][ T6830] RBP: 00007f45d4011e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.015945][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.023979][ T6830] R13: 00007f45d41b6128 R14: 00007f45d41b6090 R15: 00007ffe2dc70448 [ 170.032135][ T6830] [ 170.035204][ T6830] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.042526][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.3.190 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 170.052375][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.062471][ T6830] Call Trace: [ 170.065793][ T6830] [ 170.068765][ T6830] dump_stack_lvl+0x99/0x250 [ 170.073410][ T6830] ? __asan_memcpy+0x40/0x70 [ 170.078065][ T6830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.083320][ T6830] ? __pfx__printk+0x10/0x10 [ 170.087985][ T6830] panic+0x2db/0x790 [ 170.091935][ T6830] ? __pfx_panic+0x10/0x10 [ 170.096418][ T6830] __warn+0x31b/0x4b0 [ 170.100446][ T6830] ? folio_memcg+0x1a8/0x310 [ 170.105084][ T6830] ? folio_memcg+0x1a8/0x310 [ 170.109718][ T6830] report_bug+0x2be/0x4f0 [ 170.114131][ T6830] ? folio_memcg+0x1a8/0x310 [ 170.118774][ T6830] ? folio_memcg+0x1a8/0x310 [ 170.123436][ T6830] ? folio_memcg+0x1aa/0x310 [ 170.128075][ T6830] handle_bug+0x84/0x160 [ 170.132371][ T6830] exc_invalid_op+0x1a/0x50 [ 170.136923][ T6830] asm_exc_invalid_op+0x1a/0x20 [ 170.141803][ T6830] RIP: 0010:folio_memcg+0x1a8/0x310 [ 170.147051][ T6830] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 170.166698][ T6830] RSP: 0018:ffffc9001c377250 EFLAGS: 00010287 [ 170.172823][ T6830] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 170.180841][ T6830] RDX: ffffc9000c95c000 RSI: 0000000000001d20 RDI: 0000000000001d21 [ 170.188877][ T6830] RBP: 0000000000000000 R08: ffffea0000a63387 R09: 1ffffd400014c670 [ 170.196903][ T6830] R10: dffffc0000000000 R11: fffff9400014c671 R12: ffffea0000a633b0 [ 170.205086][ T6830] R13: dffffc0000000000 R14: ffff8880275e6100 R15: 0000000000000002 [ 170.213190][ T6830] ? folio_memcg+0x1a7/0x310 [ 170.217859][ T6830] workingset_activation+0x5f/0x4a0 [ 170.223137][ T6830] ? folio_mark_accessed+0x361/0x4a0 [ 170.228477][ T6830] folio_mark_accessed+0x3b5/0x4a0 [ 170.233640][ T6830] kvm_release_page_clean+0x9a/0xe0 [ 170.238902][ T6830] kvm_tdp_page_fault+0x2dd/0x370 [ 170.243975][ T6830] kvm_mmu_do_page_fault+0x2c5/0x640 [ 170.249344][ T6830] ? vmx_vcpu_run+0xd8b/0x25d0 [ 170.254152][ T6830] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 170.260014][ T6830] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 170.265634][ T6830] kvm_mmu_page_fault+0x22f/0xb70 [ 170.270718][ T6830] ? __pfx_handle_ept_violation+0x10/0x10 [ 170.276580][ T6830] vmx_handle_exit+0x1090/0x18a0 [ 170.281568][ T6830] ? vcpu_run+0x361c/0x6f70 [ 170.286143][ T6830] vcpu_run+0x432e/0x6f70 [ 170.290558][ T6830] ? vcpu_run+0x361c/0x6f70 [ 170.295164][ T6830] ? __pfx_vcpu_run+0x10/0x10 [ 170.299883][ T6830] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 170.305669][ T6830] ? rcu_is_watching+0x15/0xb0 [ 170.310481][ T6830] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 170.316069][ T6830] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 170.321833][ T6830] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 170.327870][ T6830] ? rcu_is_watching+0x15/0xb0 [ 170.332798][ T6830] ? look_up_lock_class+0x74/0x170 [ 170.337950][ T6830] ? register_lock_class+0x51/0x320 [ 170.343207][ T6830] ? __lock_acquire+0xab9/0xd20 [ 170.348116][ T6830] kvm_vcpu_ioctl+0x95c/0xe90 [ 170.352937][ T6830] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.358181][ T6830] ? __lock_acquire+0xab9/0xd20 [ 170.363075][ T6830] ? __asan_memset+0x22/0x50 [ 170.367713][ T6830] ? smack_file_ioctl+0x302/0x340 [ 170.372766][ T6830] ? __pfx_smack_file_ioctl+0x10/0x10 [ 170.378171][ T6830] ? __fget_files+0x2a/0x420 [ 170.382806][ T6830] ? __fget_files+0x3a0/0x420 [ 170.387769][ T6830] ? __fget_files+0x2a/0x420 [ 170.392418][ T6830] ? bpf_lsm_file_ioctl+0x9/0x20 [ 170.397382][ T6830] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.402621][ T6830] __se_sys_ioctl+0xfc/0x170 [ 170.407352][ T6830] do_syscall_64+0xfa/0x3b0 [ 170.411882][ T6830] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.417151][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.423252][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 170.427995][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.433918][ T6830] RIP: 0033:0x7f45d3f8ebe9 [ 170.438361][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.458171][ T6830] RSP: 002b:00007f45d4d1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.466613][ T6830] RAX: ffffffffffffffda RBX: 00007f45d41b6090 RCX: 00007f45d3f8ebe9 [ 170.474635][ T6830] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 170.482644][ T6830] RBP: 00007f45d4011e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.490692][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.498793][ T6830] R13: 00007f45d41b6128 R14: 00007f45d41b6090 R15: 00007ffe2dc70448 [ 170.507084][ T6830] [ 170.510515][ T6830] Kernel Offset: disabled [ 170.514963][ T6830] Rebooting in 86400 seconds..