last executing test programs: 5m30.851644701s ago: executing program 32 (id=2310): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x320, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x30c, 0x1, [@m_gact={0x2ac, 0x110, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c91, 0xffffffffffffffff}}]}, {0x271, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x320}}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4m53.398509996s ago: executing program 33 (id=2446): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000001018510000007", @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m49.571435912s ago: executing program 34 (id=2460): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x4a00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) accept4(r1, &(0x7f0000000040)=@x25, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 4m46.97648451s ago: executing program 35 (id=2471): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(0x0, 0x0) inotify_init1(0x800) rmdir(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x98b, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x68, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) io_uring_enter(r2, 0x52de, 0xf62e, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f0000000400)="c3459c2dff5dca77dcdbea79731f9e05594f163643bd37703012b1896f7547da92310d8cd049db8c21313c48421bf5dae20e41cc8ea8c7a4e07ba25204437406b2d0f25c1425cce0b26c6fdf1fd489b0509a49bca5bf3297fc96595b62aba801a9e25da62568a93d6e52243ac8cfdd6e61f57a61120930254dae1aa54841d5ce7e678a3ffed9885fca3a9d0df1cff61ca821ac6789139170ab7cf3e338130fabe9eecc2718449d0d8f49a35184dadab6", &(0x7f0000000140)=""/49, &(0x7f0000000540), 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x38) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xd9, 0xe5, 0xf7, 0x20, 0xbfd, 0x1c, 0x8ce8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x1, 0xe7, 0xd5, 0x37, 0x0, [], [{{0x9, 0x5, 0x1a, 0x8, 0x40, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in6=@private1, 0x0, 0x4}]}]}, 0x17c}}, 0x0) 1m48.065071139s ago: executing program 2 (id=3285): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded72407080001000200000088000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46007876000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded7"], 0x150}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851000103"]) 1m47.007333835s ago: executing program 7 (id=3289): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) 1m46.334453881s ago: executing program 7 (id=3292): socket(0x1d, 0x1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m44.802616433s ago: executing program 7 (id=3298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff810000000000", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000480)=0x1) preadv(r4, 0x0, 0x0, 0x80, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4004, r5, 0x2}) lseek(r7, 0x289e0cb9, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x4}) 1m43.398690471s ago: executing program 2 (id=3303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f00004c5000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xc, 0x10200) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[], 0x174}, 0x1, 0x0, 0x0, 0xe9c54a8cb558a56a}, 0x4000020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x0, 0xfa}}]}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x20, 0x21, 0x5d, {0x5d, 0x3, "78d55374e6983e17fc2821a5437392ef98780f18e70f782f3f6e34692d24d0440fcd6f4f6066cbff738a63f1e6db4f0597535cb59fe3c23aad7a49c62aa6d2d1a56c3fbc2e0319bd9d0733fa779f5b1cb9cfdc6f2c45a8ea616f26"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8a, &(0x7f0000000940)=ANY=[@ANYBLOB="12010003020000082505a1a4400001020301090278000201a440000904000001020d00000b24060001d66e643800d4052400ff010d240f01a6000000001008002006241aff01170a2407030800030001010c241b090002003e07985a0209058103ff03c280860904010000020d000009040101e4010d0000090582024000c005fe09050302ff0306cb07"], &(0x7f0000000ec0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x2, 0x87, 0x8, 0x8, 0xf}, 0x10a, &(0x7f0000000a40)={0x5, 0xf, 0x10a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x3, 0x79, 0x4}, @generic={0x1a, 0x10, 0x1, "c326e9e9bbea4a3936aac88512ada7c40bfdcea825e95e"}, @generic={0xda, 0x10, 0x1, "6f504140b918d2bc075147cdf44638e5acf9695ba7246a7e631e0a1a0d34d6aef502c0a6619defb1528273215843efa221befe7d2325940880e4830a7ca8a8cc5291eb8410f0cf0799dbc726707ce6a8f6b2e0792415896085d11385af39c3040ccc42b4775bed561340ef98ce9139f306a41d853024c845df83e0886e23c99d6ddbfcb5156b3ab946fe31a46722d30b6e1b332056004f1b16a4405c278f2ddf3996fec4a1eea94acd7fc7c70b8c48f15ed73251cd102b511830a30cb5108970e35d77337554225b7dafe1a3a05bcbddc6a685638a934b"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xb, 0x2}]}, 0x6, [{0xa7, &(0x7f0000000b80)=@string={0xa7, 0x3, "617bda6c850b1362594305f161b91957f080575d1d0b1f76988add9c175d96f19aad399ac7d807859b9c3752bfd0ff6d4854d183421be286759b012d85b2adbd55f23fd5e83729252253e7c1b6309e98d5985daddfb4212c0ddf214cd42abde31e3bb2f3f9b70c60ab1a7a623696f6de05ea54006a90a97a9364ad50f0be9de7d0deb6a00e8c918648c06331aa2593137de0a127c2685ebab81c9e8767073a820457e4f295"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x40c}}, {0xc0, &(0x7f0000000cc0)=@string={0xc0, 0x3, "a3be4b4def602e4485f46283ebfd1dc545dca1813d1fc9cf8c76d8ab5fe856145349736122c20810bef1548c8c0f9a750798218a974942184fe19a3a3f9674bc62bced305541b8a5f360f73c421ad0c10c5bb67f9701dc78c675b99b6cff22f58c940044e9d9a2dde25340d59b2e714484e9d21bf573b9494b0a3b112b53be3f9996efbfaaedc07e8ab61aae18f86d2cd6ccd1afd1acf60ac55a651afe3da4905d12833bf0b4b3bfb75a94a6d784f41e3f269c5d216105edfd7aea708380"}}, {0x95, &(0x7f0000000dc0)=@string={0x95, 0x3, "9f675770952453b28dae4f395252d7f9517c33a807bfe054d0b99b936164aba36a102a0c4a08229858d6411bdf1f0b621184fe86cd09b1e5dad3f8839825234a562da8ca1890a3d88931dc07a27283ccaeff39e3459ec34fee98d1565b8be7577addf0b74f5dd7d7734a783753bd3176bd4812073dbdb79f42686af73f7b9cbe03ea42f5832f1ae2a64e3e2d77040a265d09fd"}}, {0x1d, &(0x7f0000000e80)=@string={0x1d, 0x3, "eca4188dea3e79b5327ffd775dbc1d4ff6003dd1f0b63ecfcc0f62"}}]}) 1m42.11440174s ago: executing program 7 (id=3305): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) setxattr$security_capability(0x0, &(0x7f0000000240), 0x0, 0x0, 0x2) 1m40.813393033s ago: executing program 7 (id=3311): syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1m39.44176622s ago: executing program 2 (id=3314): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x5, 0x1, 0x3, 0x6, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000034000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}]) io_getevents(r2, 0xff, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) 1m38.695404842s ago: executing program 0 (id=3317): rt_sigaction(0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, {[0x16]}}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2180, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) 1m38.063371708s ago: executing program 2 (id=3319): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 1m37.937325626s ago: executing program 2 (id=3321): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) setxattr$security_capability(0x0, &(0x7f0000000240), 0x0, 0x0, 0x2) 1m37.684008032s ago: executing program 0 (id=3322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff810000000000", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0}}, 0x68) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16, @ANYBLOB="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"], 0x150}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851000103"]) 1m32.610467255s ago: executing program 6 (id=3337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff810000000000", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000034000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}]) io_getevents(r2, 0xff, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) 1m30.716977434s ago: executing program 6 (id=3342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3d5b, 0x1, 0x24, 0x10, 0x5, 0x200000, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0xb8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2d, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x6, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x40, 0x200, 0xe9, 0x3, 0x4, 0xe, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x400057, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x4, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0x2, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x7, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m29.811129937s ago: executing program 6 (id=3345): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x2) 1m29.567464059s ago: executing program 6 (id=3347): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1m27.020559855s ago: executing program 8 (id=3352): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x5, 0x1, 0x3, 0x6, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000034000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}]) io_getevents(r2, 0xff, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) 1m26.531449221s ago: executing program 8 (id=3353): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x88201) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e36", 0x6b}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a09", 0x2e}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e9", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d", 0x22}, {0x0}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) close(r0) 1m26.505438759s ago: executing program 8 (id=3354): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept4$packet(r0, 0x0, 0x0, 0x800) recvmmsg(r2, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x5}], 0x1, 0x3, 0x0) 1m25.607390184s ago: executing program 8 (id=3355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3d5b, 0x1, 0x24, 0x10, 0x5, 0x200000, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0xb8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2d, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x6, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x40, 0x200, 0xe9, 0x3, 0x4, 0xe, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x400057, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x4, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0x2, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x7, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m25.607180297s ago: executing program 36 (id=3311): syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1m24.720984802s ago: executing program 8 (id=3357): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x2) 1m24.641312547s ago: executing program 8 (id=3358): syz_usb_connect(0x3, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x83, 0xf0, 0x8c, 0x20, 0x4c8, 0x720, 0xa41e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x80, 0x0, [{{0x9, 0x4, 0xdb, 0x1, 0x0, 0x9a, 0xb5, 0xde, 0xb9}}]}}]}}, 0x0) 1m22.43907948s ago: executing program 37 (id=3324): fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1c3, 0x12) 1m17.769789462s ago: executing program 38 (id=3335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded72407080001000200000088000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46007876000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded7"], 0x150}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851000103"]) 1m14.393058249s ago: executing program 39 (id=3347): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1m9.342042677s ago: executing program 40 (id=3358): syz_usb_connect(0x3, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x83, 0xf0, 0x8c, 0x20, 0x4c8, 0x720, 0xa41e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x80, 0x0, [{{0x9, 0x4, 0xdb, 0x1, 0x0, 0x9a, 0xb5, 0xde, 0xb9}}]}}]}}, 0x0) 9.549621562s ago: executing program 3 (id=3580): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x2cb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 8.906204657s ago: executing program 3 (id=3581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0xb, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x109, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, 0xffffffffffffffff, 0xd2371000) getpriority(0x2, 0x0) 7.832310834s ago: executing program 3 (id=3587): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4000081) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) splice(r4, 0x0, r6, 0x0, 0x2000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 7.690570856s ago: executing program 9 (id=3588): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 6.776042508s ago: executing program 3 (id=3589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6.702094959s ago: executing program 9 (id=3590): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x1ff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001380)={0x1, &(0x7f0000001340)=[{0xa9fb, 0x1, 0xb, 0x7}]}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000340)=0x6) 5.915914611s ago: executing program 5 (id=3596): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x88201) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b", 0x5a}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e9", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d", 0x22}, {0x0}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) close(r0) 5.885280707s ago: executing program 5 (id=3597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x7c, 0x20000, {r2}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x180}) 5.834768743s ago: executing program 3 (id=3599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @sdr={0x50323234, 0x6b95}}) 5.648809395s ago: executing program 9 (id=3600): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) splice(r4, 0x0, r6, 0x0, 0x2000, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) 4.874554844s ago: executing program 3 (id=3602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x20000080) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 4.645512824s ago: executing program 1 (id=3603): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0xc}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)="09d90ebe68a5d804ec592ea37895e710c97bed4d4625a15c32", 0x19}, {&(0x7f0000000200)}], 0x3}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000600)={0x2}) shutdown(r6, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 3.617397921s ago: executing program 4 (id=3604): prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40814) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES8=0x0], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x1) r3 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="06154cf7d0c6216a86d79be7ca6f85020d5464e743a4163f8a2f5bf45d92b19c96e535db07cf4c02bc6b32f458d0bdf80e15fe63e1c072287539c5c805c1e0f8de1d7428eb3ac1697ab9553ab6d0d2d1de24f0fffa1370d7f1696c863a8c4c3bbe5172703622cd4ae5f45e6a57796b85a6bbfcda6ce17dbfac01c878f476af3ab22fe6ccfcf7ca6a00893ca1244994bd1f24680547cc722dca8c68661bcf5d9254522df9967227ca82543e1c331aa01949ba70d20a0ef4ca4dbecac919309893fda0675f0be973c8"}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3.487615686s ago: executing program 1 (id=3605): prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40814) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001280)={&(0x7f0000c0e000/0x1000)=nil, &(0x7f0000700000/0x3000)=nil, 0x1000}) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000100)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="06154cf7d0c6216a86d79be7ca6f85020d5464e743a4163f8a2f5bf45d92b19c96e535db07cf4c02bc6b32f458d0bdf80e15fe63e1c072287539c5c805c1e0f8de1d7428eb3ac1697ab9553ab6d0d2d1de24f0fffa1370d7f1696c863a8c4c3bbe5172703622cd4ae5f45e6a57796b85a6bbfcda6ce17dbfac01c878f476af3ab22fe6ccfcf7ca6a00893ca1244994bd1f24680547cc722dca8c68661bcf5d9254522df9967227ca82543e1c331aa01949ba70d20a0ef4ca4dbecac919309893fda0675f0be973c8"}) 3.236743647s ago: executing program 5 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="95"], 0x28}, 0x1, 0x0, 0x0, 0x240000d4}, 0x24000000) 3.193201955s ago: executing program 4 (id=3607): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fdffffff0f0000001800"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x18b200, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000300)) 2.929022683s ago: executing program 1 (id=3608): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x88201) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b", 0x5a}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e9", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d", 0x22}, {0x0}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) close(r0) 2.864279156s ago: executing program 9 (id=3609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x178, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x148, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xfc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.863790657s ago: executing program 4 (id=3610): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x1ff, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001380)={0x1, &(0x7f0000001340)=[{0xa9fb, 0x1, 0xb, 0x7}]}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000340)=0x6) 2.858963723s ago: executing program 5 (id=3611): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) iopl(0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x4ee7000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) getitimer(0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x3, 0x40000000, 0x0, 0x0, 0x3, 0x4]}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.796897782s ago: executing program 1 (id=3612): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 2.669442806s ago: executing program 1 (id=3613): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) iopl(0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x4ee7000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) getitimer(0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x3, 0x40000000, 0x0, 0x0, 0x3, 0x4]}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.948021254s ago: executing program 4 (id=3614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x5, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314247}}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) 1.032953572s ago: executing program 4 (id=3615): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0xc}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)="09d90ebe68a5d804ec592ea37895e710c97bed4d4625a15c32", 0x19}, {&(0x7f0000000200)}], 0x3}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000600)={0x2}) shutdown(r6, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 999.633562ms ago: executing program 9 (id=3616): syz_open_dev$evdev(0x0, 0x2, 0x140c82) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x8041, 0x8, 0x5}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f000000000000020000000000040000000000000007ed000000a0580e49b500"/108, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000600000000000000030000000000000006000000050000007663616e30000000010000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc6000000000000000400000000000000feffffff00000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x658) fchownat(r1, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r4, 0x1000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007b011800000000009500000000000000156b0525584845fc3f8c3b78e12db178fef1daa85c4a5acf88e849bd2c48da5fdfed8533ac72c96678d407220fc98d60ed1ba3347f13f757f7cebe8a09c3e18ced9a62397aaf18de5c985a1f9dabf1d326e8adfb6645055d986abfa6f32602e8aae3046d2a932a0d9dc3cee738dde776959ddce27c502badb58e38751ecd1fd94ac421c4c8e36daf106835e46836139acb1298ccdd2be1831684e089018bf24228e1f1e29653531ffc87ddd852e164360c5a44931ec929934ed2"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff79}, 0x1, 0x0, 0x0, 0x10}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) sendmsg$nl_route_sched(r8, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) 950.390791ms ago: executing program 5 (id=3617): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000180)=0x1, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 539.293795ms ago: executing program 5 (id=3618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x7c, 0x20000, {r2}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x180}) 518.170304ms ago: executing program 1 (id=3619): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r1, &(0x7f0000000cc0), 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)='~'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r6, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x4000040) 501.053157ms ago: executing program 4 (id=3620): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) splice(r4, 0x0, r6, 0x0, 0x2000, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) 0s ago: executing program 9 (id=3621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="95"], 0x28}, 0x1, 0x0, 0x0, 0x240000d4}, 0x24000000) kernel console output (not intermixed with test programs): -speed USB device number 65 using dummy_hcd [ 760.812698][T15165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.884151][T15165] veth0_vlan: entered promiscuous mode [ 760.895001][T15165] veth1_vlan: entered promiscuous mode [ 760.900941][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 760.907627][ T5874] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 760.915958][ T5874] usb 1-1: config 0 has no interface number 0 [ 760.927952][ T5874] usb 1-1: config 0 interface 184 has no altsetting 0 [ 760.944126][ T5874] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 760.953325][T10666] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 760.961420][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.974548][T15165] veth0_macvtap: entered promiscuous mode [ 760.980392][ T5874] usb 1-1: Product: syz [ 760.984628][ T5874] usb 1-1: Manufacturer: syz [ 760.999102][T15165] veth1_macvtap: entered promiscuous mode [ 761.012303][ T5874] usb 1-1: SerialNumber: syz [ 761.054368][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.071375][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.083898][ T5874] usb 1-1: config 0 descriptor?? [ 761.089038][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.104698][ T5874] smsc75xx v1.0.0 [ 761.112615][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.129683][T10666] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 761.143907][T10666] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 761.149252][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.152944][T10666] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 761.163479][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.176890][T10666] usb 8-1: config 220 has no interface number 2 [ 761.184411][T15165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.205763][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.216451][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.232344][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.255955][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.266521][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.277589][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.293662][T15165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.395758][T15165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.404856][T15165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.419887][T15165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.428913][T15165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.525257][T10666] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 761.551671][T10666] usb 8-1: config 220 interface 0 has no altsetting 0 [ 761.560318][T10666] usb 8-1: config 220 interface 76 has no altsetting 0 [ 761.567241][T10666] usb 8-1: config 220 interface 1 has no altsetting 0 [ 761.576482][T10666] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 761.584609][T13987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.585796][T10666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.602387][T10666] usb 8-1: Product: syz [ 761.606599][T10666] usb 8-1: Manufacturer: syz [ 761.611384][T10666] usb 8-1: SerialNumber: syz [ 761.618378][T13987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.647966][T13988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.655910][T13988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.190714][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 762.245323][T10666] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 762.309291][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 762.318549][T10666] usb 8-1: No valid video chain found. [ 762.327552][T10666] usb 8-1: selecting invalid altsetting 0 [ 762.333547][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 762.356734][T10666] usb 8-1: selecting invalid altsetting 0 [ 762.366311][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 762.469510][T10666] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 762.487054][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 762.512455][T10666] usb 8-1: USB disconnect, device number 18 [ 762.939040][ T5874] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 762.951659][ T5874] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 762.962588][ T5874] usb 1-1: USB disconnect, device number 65 [ 763.754525][T14509] Bluetooth: hci4: Frame reassembly failed (-84) [ 763.761144][T14509] Bluetooth: hci4: Frame reassembly failed (-84) [ 764.056910][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2966'. [ 764.847146][T15452] netlink: 'syz.7.2970': attribute type 29 has an invalid length. [ 764.897638][T15452] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2970'. [ 765.559290][ T5861] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 765.769551][ T5828] Bluetooth: hci4: command 0x1003 tx timeout [ 765.769992][T13897] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 765.840201][ T5861] usb 7-1: device descriptor read/64, error -71 [ 766.158095][ T5861] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 766.391597][ T5861] usb 7-1: device descriptor read/64, error -71 [ 766.560073][ T5861] usb usb7-port1: attempt power cycle [ 766.749341][ T5874] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 766.919264][ T5861] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 766.952491][ T5874] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 766.965951][ T5861] usb 7-1: device descriptor read/8, error -71 [ 766.974921][ T5874] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 766.984405][ T5874] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 766.998835][ T5874] usb 1-1: config 220 has no interface number 2 [ 767.005516][ T5874] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 767.021996][ T5874] usb 1-1: config 220 interface 0 has no altsetting 0 [ 767.028797][ T5874] usb 1-1: config 220 interface 76 has no altsetting 0 [ 767.036060][ T5874] usb 1-1: config 220 interface 1 has no altsetting 0 [ 767.053245][ T5874] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 767.067498][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.085089][ T5874] usb 1-1: Product: syz [ 767.091187][ T5874] usb 1-1: Manufacturer: syz [ 767.095781][ T5874] usb 1-1: SerialNumber: syz [ 767.219392][ T5861] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 767.249841][ T5861] usb 7-1: device descriptor read/8, error -71 [ 767.368953][ T5874] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 767.389353][ T5861] usb usb7-port1: unable to enumerate USB device [ 767.399450][ T5874] usb 1-1: No valid video chain found. [ 767.407201][ T5874] usb 1-1: selecting invalid altsetting 0 [ 767.513388][ T5874] usb 1-1: selecting invalid altsetting 0 [ 767.712561][ T5874] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 767.732491][ T5874] usb 1-1: USB disconnect, device number 66 [ 770.219606][T15528] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 770.226141][T15528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 770.236572][T15528] vhci_hcd vhci_hcd.0: Device attached [ 770.469363][ T24] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 771.169314][ T5861] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 771.550172][ T5861] usb 1-1: device descriptor read/64, error -71 [ 771.577332][T15548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3003'. [ 771.629371][ T48] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 771.789268][ T5861] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 771.794612][ T48] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 771.805938][ T48] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 771.815556][ T48] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 771.826112][ T48] usb 7-1: config 220 has no interface number 2 [ 771.837118][ T48] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 771.855352][ T48] usb 7-1: config 220 interface 0 has no altsetting 0 [ 771.862210][ T48] usb 7-1: config 220 interface 76 has no altsetting 0 [ 771.869285][ T48] usb 7-1: config 220 interface 1 has no altsetting 0 [ 771.878824][ T48] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 771.890897][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.899404][ T48] usb 7-1: Product: syz [ 771.903952][ T48] usb 7-1: Manufacturer: syz [ 771.908588][ T48] usb 7-1: SerialNumber: syz [ 772.148231][ T5861] usb 1-1: device descriptor read/64, error -71 [ 773.272363][ T48] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 773.278735][ T48] usb 7-1: No valid video chain found. [ 773.299291][ T48] usb 7-1: selecting invalid altsetting 0 [ 773.315572][T15530] vhci_hcd: connection reset by peer [ 773.325537][ T5861] usb usb1-port1: attempt power cycle [ 773.354957][T12000] vhci_hcd: stop threads [ 773.365925][T12000] vhci_hcd: release socket [ 773.371744][ T48] usb 7-1: selecting invalid altsetting 0 [ 773.377480][ T48] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 773.394278][T12000] vhci_hcd: disconnect device [ 773.461758][ T30] audit: type=1400 audit(1745310850.293:1343): avc: denied { write } for pid=15561 comm="syz.7.3009" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 773.671678][ T48] usb 7-1: USB disconnect, device number 17 [ 774.376140][ T5861] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 774.459636][ T30] audit: type=1400 audit(1745310851.293:1344): avc: denied { ioctl } for pid=15538 comm="syz.0.3000" path="socket:[51620]" dev="sockfs" ino=51620 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 774.484719][ T5861] usb 1-1: device descriptor read/8, error -71 [ 775.040570][ T5861] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 775.367172][ T5861] usb 1-1: device descriptor read/8, error -71 [ 775.516179][ T5861] usb usb1-port1: unable to enumerate USB device [ 775.577230][T15586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15586 comm=syz.8.3014 [ 775.674508][ T24] vhci_hcd: vhci_device speed not set [ 775.683362][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3014'. [ 775.808314][T15593] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 775.814843][T15593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 775.852713][T15593] vhci_hcd vhci_hcd.0: Device attached [ 776.121182][ T5897] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 776.128696][ T48] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 776.396792][ T48] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 776.527261][ T48] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 776.662913][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.702098][ T48] usb 9-1: config 0 descriptor?? [ 776.869505][ T5861] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 776.878313][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 776.888201][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 776.904400][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 776.915472][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 776.926248][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 776.938510][ T971] usb 9-1: USB disconnect, device number 5 [ 776.956546][T15594] vhci_hcd: connection reset by peer [ 777.029244][ T5861] usb 7-1: device descriptor read/64, error -71 [ 777.060787][ T12] vhci_hcd: stop threads [ 777.065040][ T12] vhci_hcd: release socket [ 777.079887][ T12] vhci_hcd: disconnect device [ 777.280081][T15627] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3028'. [ 777.289456][ T5861] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 777.289513][T15627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3028'. [ 777.358474][T14509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.421690][T14509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.451186][ T5861] usb 7-1: device descriptor read/64, error -71 [ 777.461162][T15619] chnl_net:caif_netlink_parms(): no params data found [ 777.484877][T14509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.535742][T15634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15634 comm=syz.8.3031 [ 777.579909][ T5861] usb usb7-port1: attempt power cycle [ 777.595149][T14509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.011915][T15619] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.029540][T15619] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.036659][T15619] bridge_slave_0: entered allmulticast mode [ 778.045071][T15619] bridge_slave_0: entered promiscuous mode [ 778.053375][T15619] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.060549][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.067714][T15619] bridge_slave_1: entered allmulticast mode [ 778.076095][T15619] bridge_slave_1: entered promiscuous mode [ 778.129260][ T5861] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 778.332711][ T5861] usb 7-1: device descriptor read/8, error -71 [ 778.376289][T15619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.408821][T15619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.540124][T15663] netlink: 'syz.8.3040': attribute type 30 has an invalid length. [ 778.547929][T15663] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3040'. [ 778.609800][ T5861] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 778.623391][T15619] team0: Port device team_slave_0 added [ 778.636173][T15619] team0: Port device team_slave_1 added [ 778.642294][ T5861] usb 7-1: device descriptor read/8, error -71 [ 778.707951][T14509] bridge_slave_1: left allmulticast mode [ 778.726208][T14509] bridge_slave_1: left promiscuous mode [ 778.759696][ T5861] usb usb7-port1: unable to enumerate USB device [ 778.790425][T14509] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.029391][T13897] Bluetooth: hci4: command tx timeout [ 779.084017][T14509] bridge_slave_0: left allmulticast mode [ 779.109637][T14509] bridge_slave_0: left promiscuous mode [ 779.115467][T14509] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.937219][T14509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.948712][T14509] bond_slave_0: left promiscuous mode [ 779.957679][T14509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.973461][T14509] bond_slave_1: left promiscuous mode [ 779.983882][T14509] bond0 (unregistering): Released all slaves [ 780.021453][T15619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.028543][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.057650][T15619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.115045][T15619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.125779][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.157309][T15619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.177163][T14509] tipc: Disabling bearer [ 780.184472][T14509] tipc: Left network mode [ 780.232219][T14509] IPVS: stopping backup sync thread 5978 ... [ 780.511048][T15619] hsr_slave_0: entered promiscuous mode [ 780.521307][T15619] hsr_slave_1: entered promiscuous mode [ 780.532748][T15619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.580935][T15619] Cannot create hsr debugfs directory [ 781.056270][T13897] Bluetooth: hci4: command tx timeout [ 781.309466][ T5897] vhci_hcd: vhci_device speed not set [ 781.432857][T15709] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3053'. [ 781.451922][T14509] hsr_slave_0: left promiscuous mode [ 781.464110][T14509] hsr_slave_1: left promiscuous mode [ 782.136877][T14509] veth1_macvtap: left promiscuous mode [ 782.145225][T14509] veth0_macvtap: left promiscuous mode [ 782.152761][T14509] veth1_vlan: left promiscuous mode [ 782.180815][T14509] veth0_vlan: left promiscuous mode [ 782.738874][ T5874] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 782.883041][T14509] team0 (unregistering): Port device team_slave_1 removed [ 782.911527][T14509] team0 (unregistering): Port device team_slave_0 removed [ 782.939300][ T5874] usb 3-1: device descriptor read/64, error -71 [ 783.131081][T13897] Bluetooth: hci4: command tx timeout [ 783.160214][T15703] netlink: 'syz.8.3053': attribute type 29 has an invalid length. [ 783.264982][ T5874] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 783.699405][ T30] audit: type=1400 audit(1745310860.483:1345): avc: denied { getopt } for pid=15728 comm="syz.8.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 783.904799][ T5874] usb 3-1: device descriptor read/64, error -71 [ 784.019628][ T5874] usb usb3-port1: attempt power cycle [ 784.035482][T15742] No control pipe specified [ 784.439749][ T5874] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 785.026239][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 785.105697][T15619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 785.227080][ T5874] usb 3-1: device not accepting address 76, error -71 [ 785.236792][T13897] Bluetooth: hci4: command tx timeout [ 785.240168][T15619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.287620][T15619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.302180][T15619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.366452][T15619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.383207][T15619] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.432268][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.439389][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.468776][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.475925][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.533929][ T30] audit: type=1400 audit(1745310862.353:1346): avc: denied { getopt } for pid=15762 comm="syz.6.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 785.553461][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.672225][ T30] audit: type=1400 audit(1745310862.353:1347): avc: denied { ioctl } for pid=15762 comm="syz.6.3069" path="socket:[52201]" dev="sockfs" ino=52201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 786.156031][T13897] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 786.165560][T13897] Bluetooth: hci0: Injecting HCI hardware error event [ 786.175549][T13897] Bluetooth: hci0: hardware error 0x00 [ 786.722395][T15619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.792480][T15793] overlayfs: failed to resolve './file1': -2 [ 786.841243][T15619] veth0_vlan: entered promiscuous mode [ 786.880659][T15619] veth1_vlan: entered promiscuous mode [ 786.941900][T15619] veth0_macvtap: entered promiscuous mode [ 786.966634][T15619] veth1_macvtap: entered promiscuous mode [ 787.282724][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.315170][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.336298][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.492006][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.651513][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.684236][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.709050][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.722742][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.759485][T15619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.798616][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.812396][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.823813][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.834922][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.845129][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.857920][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.868482][T15619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.884221][T15619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.896789][T15619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.912220][T15619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.934578][ T30] audit: type=1326 audit(1745310864.753:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 787.969017][T15619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.987947][T15619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.013353][T15619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.024400][ T30] audit: type=1326 audit(1745310864.753:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 788.078304][ T30] audit: type=1326 audit(1745310864.753:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 788.934335][T13897] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 789.079068][ T30] audit: type=1326 audit(1745310864.763:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 789.119557][ T30] audit: type=1326 audit(1745310864.763:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 789.145265][ T30] audit: type=1326 audit(1745310864.763:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 789.169298][ T30] audit: type=1326 audit(1745310864.763:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 789.199787][ T30] audit: type=1326 audit(1745310864.763:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e93990087 code=0x7ffc0000 [ 789.226413][T12000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.242353][T12000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.267675][ T30] audit: type=1326 audit(1745310864.763:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9e9398fffc code=0x7ffc0000 [ 789.294082][T14507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.391513][T14507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.424146][ T30] audit: type=1326 audit(1745310864.763:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9e9398ff34 code=0x7ffc0000 [ 789.578467][ T30] audit: type=1326 audit(1745310864.763:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9e9398ff34 code=0x7ffc0000 [ 789.606462][ T30] audit: type=1326 audit(1745310864.763:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e9398cdca code=0x7ffc0000 [ 789.634463][ T30] audit: type=1326 audit(1745310864.763:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.7.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9398e169 code=0x7ffc0000 [ 789.666200][T15828] overlayfs: failed to resolve './file1': -2 [ 791.313548][T15841] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 791.320078][T15841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 791.368398][T15841] vhci_hcd vhci_hcd.0: Device attached [ 791.421320][T15842] vhci_hcd: connection closed [ 791.426412][ T6285] vhci_hcd: stop threads [ 791.453424][ T6285] vhci_hcd: release socket [ 791.559839][ T6285] vhci_hcd: disconnect device [ 791.599296][ T5874] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 791.647224][ T5874] usb 45-1: enqueue for inactive port 0 [ 791.797356][ T5874] vhci_hcd: vhci_device speed not set [ 792.773553][T15872] overlayfs: failed to resolve './file1': -2 [ 794.210905][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 794.354229][ T5874] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 794.382140][T15901] netlink: 'syz.8.3114': attribute type 5 has an invalid length. [ 794.439474][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 794.448970][ T10] usb 1-1: config 0 has an invalid interface number: 219 but max is 1 [ 794.457589][ T10] usb 1-1: config 0 has an invalid interface number: 42 but max is 1 [ 794.466167][ T10] usb 1-1: config 0 has no interface number 0 [ 794.472953][ T10] usb 1-1: config 0 has no interface number 1 [ 794.479044][ T10] usb 1-1: config 0 interface 219 has no altsetting 0 [ 794.486938][ T10] usb 1-1: config 0 interface 42 has no altsetting 0 [ 794.495903][ T10] usb 1-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=a4.1e [ 794.505168][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.514752][ T10] usb 1-1: Product: syz [ 794.519460][ T10] usb 1-1: Manufacturer: syz [ 794.526168][ T5874] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.535404][ T10] usb 1-1: SerialNumber: syz [ 794.540093][ T5874] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 794.550568][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.570530][ T10] usb 1-1: config 0 descriptor?? [ 794.577201][ T5874] usb 3-1: config 0 descriptor?? [ 794.780051][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 794.780138][ T30] audit: type=1400 audit(1745310871.563:1365): avc: denied { create } for pid=15906 comm="syz.8.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 794.907982][ T5874] usb 3-1: USB disconnect, device number 78 [ 795.032919][ T10] usb 1-1: USB disconnect, device number 71 [ 795.955645][T15912] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 797.852164][ T5897] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 798.036328][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 798.052605][ T5897] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 228, using maximum allowed: 30 [ 798.459287][ T5897] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 798.509390][ T5897] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 798.539735][ T5897] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 799.249703][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 799.569275][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 799.582869][ T24] usb 9-1: config 0 has an invalid interface number: 219 but max is 1 [ 799.591906][ T24] usb 9-1: config 0 has an invalid interface number: 42 but max is 1 [ 799.619902][ T24] usb 9-1: config 0 has no interface number 0 [ 799.626225][ T24] usb 9-1: config 0 has no interface number 1 [ 799.635515][ T24] usb 9-1: config 0 interface 219 has no altsetting 0 [ 799.643923][ T24] usb 9-1: config 0 interface 42 has no altsetting 0 [ 799.661811][ T24] usb 9-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=a4.1e [ 799.671941][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.682598][ T24] usb 9-1: Product: syz [ 799.686919][ T24] usb 9-1: Manufacturer: syz [ 799.693894][ T24] usb 9-1: SerialNumber: syz [ 799.716736][ T24] usb 9-1: config 0 descriptor?? [ 799.835610][ T5874] psmouse serio2: Failed to reset mouse on : -5 [ 799.942916][ T24] usb 9-1: USB disconnect, device number 6 [ 800.055647][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.091618][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.102528][ T5897] usb 1-1: Product: Ќ [ 800.107806][ T5897] usb 1-1: Manufacturer: ࠇ [ 800.116740][ T5897] usb 1-1: can't set config #1, error -71 [ 800.124040][ T5897] usb 1-1: USB disconnect, device number 72 [ 800.268071][T15967] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 800.549739][T15990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15990 comm=syz.7.3142 [ 801.499784][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3142'. [ 801.895690][ T30] audit: type=1400 audit(1745310878.723:1366): avc: denied { bind } for pid=16005 comm="syz.2.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 802.021071][ T30] audit: type=1400 audit(1745310878.763:1367): avc: denied { ioctl } for pid=16005 comm="syz.2.3148" path="socket:[54724]" dev="sockfs" ino=54724 ioctlcmd=0x64a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 802.064490][T16008] block device autoloading is deprecated and will be removed. [ 802.262522][ T10] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 802.580296][ T10] usb 1-1: config 0 has no interfaces? [ 802.587481][ T10] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 802.609229][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.617236][ T10] usb 1-1: Product: syz [ 802.621572][ T10] usb 1-1: Manufacturer: syz [ 802.626155][ T10] usb 1-1: SerialNumber: syz [ 802.700144][ T10] usb 1-1: config 0 descriptor?? [ 803.574555][T16042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16042 comm=syz.6.3160 [ 803.857976][ T5874] misc userio: Buffer overflowed, userio client isn't keeping up [ 804.963065][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3160'. [ 805.170285][ T971] usb 1-1: USB disconnect, device number 73 [ 805.627130][T16061] fuse: Bad value for 'fd' [ 805.841473][T16065] overlayfs: failed to resolve './file0': -2 [ 806.031729][ T5874] input: PS/2 Generic Mouse as /devices/serio2/input/input22 [ 806.125552][T16078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16078 comm=syz.2.3170 [ 806.327096][ T5874] psmouse serio2: Failed to enable mouse on [ 806.331188][ T30] audit: type=1400 audit(1745310883.133:1368): avc: denied { execute } for pid=16074 comm="syz.0.3169" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.569554][ T971] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 807.149251][T12117] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 807.239112][ T971] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.329239][T13963] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 807.399260][T12117] usb 3-1: Using ep0 maxpacket: 16 [ 807.405763][T12117] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 807.420959][ T971] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.424022][T12117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 807.526138][T12117] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 807.580331][T12117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.588343][T12117] usb 3-1: Product: syz [ 807.593157][ T971] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.629706][T13963] usb 9-1: config 0 has no interfaces? [ 807.638041][T12117] usb 3-1: Manufacturer: syz [ 807.649351][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.661010][T13963] usb 9-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 807.674939][T13963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.759594][T16082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 807.767109][T12117] usb 3-1: SerialNumber: syz [ 807.769904][ T971] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.789353][T13963] usb 9-1: Product: syz [ 807.789891][T12117] usb 3-1: config 0 descriptor?? [ 807.795773][T13963] usb 9-1: Manufacturer: syz [ 808.309501][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.315858][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.333709][T13963] usb 9-1: SerialNumber: syz [ 808.351408][T13963] usb 9-1: config 0 descriptor?? [ 808.428597][T16106] fuse: Invalid rootmode [ 809.059543][T12117] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 809.070381][T12117] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 809.453935][T13963] usb 3-1: USB disconnect, device number 79 [ 809.789204][T16121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16121 comm=syz.7.3184 [ 809.886694][ T48] usb 1-1: USB disconnect, device number 74 [ 809.902139][T12117] usb 9-1: USB disconnect, device number 7 [ 810.912910][T16144] fuse: Invalid rootmode [ 811.150335][T12117] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 811.472872][T16150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16150 comm=syz.0.3195 [ 811.569263][T12117] usb 9-1: Using ep0 maxpacket: 8 [ 811.599899][T12117] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 811.620243][T12117] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 811.629510][T12117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.639236][T12117] usb 9-1: Product: syz [ 811.648395][T12117] usb 9-1: Manufacturer: syz [ 811.656982][ T5874] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 811.664622][T12117] usb 9-1: SerialNumber: syz [ 811.786757][T12117] usb 9-1: config 0 descriptor?? [ 812.010579][ T5874] usb 3-1: device descriptor read/64, error -71 [ 812.034697][T10666] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 812.221514][T10666] usb 1-1: config 0 has no interfaces? [ 812.422828][ T5874] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 812.448035][T10666] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 812.469498][T10666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.487778][T10666] usb 1-1: Product: syz [ 812.492115][T10666] usb 1-1: Manufacturer: syz [ 812.496710][T10666] usb 1-1: SerialNumber: syz [ 812.522808][T10666] usb 1-1: config 0 descriptor?? [ 812.579272][ T5874] usb 3-1: device descriptor read/64, error -71 [ 812.690732][ T5874] usb usb3-port1: attempt power cycle [ 813.153649][T10666] usb 9-1: USB disconnect, device number 8 [ 813.394021][T16161] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 813.569234][ T5874] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 814.444437][ T5874] usb 3-1: device descriptor read/8, error -71 [ 814.672264][ T48] usb 1-1: USB disconnect, device number 75 [ 816.087736][ T5874] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 816.322398][T16188] fuse: Invalid rootmode [ 817.520922][ T5874] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 817.529359][ T5874] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 817.551497][ T5874] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 817.569398][ T5874] usb 3-1: config 220 has no interface number 2 [ 817.575734][ T5874] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 817.589785][ T5874] usb 3-1: config 220 interface 0 has no altsetting 0 [ 817.596603][ T5874] usb 3-1: config 220 interface 76 has no altsetting 0 [ 817.604079][ T5874] usb 3-1: config 220 interface 1 has no altsetting 0 [ 817.622721][ T5874] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 817.637706][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.647968][ T5874] usb 3-1: Product: syz [ 817.662578][ T5874] usb 3-1: Manufacturer: syz [ 817.671565][ T5874] usb 3-1: SerialNumber: syz [ 818.053979][ T5874] usb 3-1: can't set config #220, error -71 [ 818.071222][ T5874] usb 3-1: USB disconnect, device number 83 [ 820.060226][T10666] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 820.099266][ T5874] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 820.286945][ T5874] usb 7-1: device descriptor read/64, error -71 [ 820.366578][T16228] fuse: Bad value for 'rootmode' [ 820.477909][T10666] usb 3-1: config 0 has no interfaces? [ 820.488828][T10666] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 820.498334][T10666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.506797][T10666] usb 3-1: Product: syz [ 820.512362][T10666] usb 3-1: Manufacturer: syz [ 820.521163][T10666] usb 3-1: SerialNumber: syz [ 820.536675][T10666] usb 3-1: config 0 descriptor?? [ 820.590132][ T5874] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 820.719271][ T5874] usb 7-1: device descriptor read/64, error -71 [ 820.842347][ T5874] usb usb7-port1: attempt power cycle [ 821.359520][ T5874] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 822.185965][ T5874] usb 7-1: device descriptor read/8, error -71 [ 822.366608][T10666] usb 3-1: USB disconnect, device number 84 [ 822.439399][ T5874] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 822.799286][ T5874] usb 7-1: device not accepting address 25, error -71 [ 822.807584][ T5874] usb usb7-port1: unable to enumerate USB device [ 823.156594][T16257] fuse: Bad value for 'rootmode' [ 824.118792][T16277] netlink: 'syz.7.3232': attribute type 30 has an invalid length. [ 824.156310][T16277] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3232'. [ 824.229221][ T48] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 824.460387][ T48] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 824.474029][ T48] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 824.484609][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.989551][ T48] usb 1-1: Product: syz [ 824.993787][ T48] usb 1-1: Manufacturer: syz [ 824.998514][ T48] usb 1-1: SerialNumber: syz [ 825.010242][ T48] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 825.320960][ T30] audit: type=1326 audit(1745310902.153:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16284 comm="syz.6.3235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f955338e169 code=0x0 [ 825.343901][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.466507][ T48] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 826.109236][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 826.770762][ T10] usb 9-1: device descriptor read/64, error -71 [ 826.870345][T16313] fuse: Bad value for 'rootmode' [ 827.192463][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 827.399265][ T10] usb 9-1: device descriptor read/64, error -71 [ 827.509509][ T10] usb usb9-port1: attempt power cycle [ 827.732862][ T5924] Bluetooth: hci3: Frame reassembly failed (-84) [ 827.937476][ T5874] usb 1-1: USB disconnect, device number 76 [ 828.649920][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 828.680284][ T10] usb 9-1: device descriptor read/8, error -71 [ 829.700455][ T5828] Bluetooth: hci3: command 0xfc11 tx timeout [ 829.711042][T13897] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 830.013226][T16347] fuse: Unknown parameter '0x0000000000000003' [ 830.619247][ T971] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 830.899272][ T48] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 830.911570][ T971] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 830.986431][ T971] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 831.022728][ T971] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 831.059017][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.120711][ T48] usb 7-1: config 0 has no interfaces? [ 831.430723][T16355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 831.443324][ T971] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 831.446030][T16367] fuse: Bad value for 'fd' [ 831.468869][ T48] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 831.479314][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.487343][ T48] usb 7-1: Product: syz [ 831.504609][ T48] usb 7-1: Manufacturer: syz [ 831.535637][ T48] usb 7-1: SerialNumber: syz [ 831.686870][ T48] usb 7-1: config 0 descriptor?? [ 833.804627][T12117] usb 1-1: USB disconnect, device number 77 [ 834.739573][ T10] usb 7-1: USB disconnect, device number 26 [ 836.283351][T16416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.129837][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 837.173390][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3274'. [ 838.142383][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 838.158723][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 838.178947][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 838.196582][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.216192][T16418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 838.348838][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 838.593361][T16439] input: syz0 as /devices/virtual/input/input25 [ 838.774687][ T10] usb 3-1: USB disconnect, device number 85 [ 839.675882][T16455] fuse: Bad value for 'group_id' [ 839.682299][T16455] fuse: Bad value for 'group_id' [ 839.811842][T16447] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 839.990583][T16464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3286'. [ 841.426347][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3291'. [ 842.227101][T16495] fuse: Bad value for 'group_id' [ 842.239287][T16495] fuse: Bad value for 'group_id' [ 843.647980][ T30] audit: type=1400 audit(1745310920.043:1370): avc: denied { bind } for pid=16507 comm="syz.6.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 843.705854][T16513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3298'. [ 845.748413][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3306'. [ 845.940593][ T5897] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 846.197185][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 846.445638][ T5897] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 228, using maximum allowed: 30 [ 846.548030][ T5897] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 846.647434][ T5897] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 846.680064][ T5897] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 847.193004][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3310'. [ 847.834382][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.452634][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.475343][ T5897] usb 3-1: Product: Ќ [ 848.485941][ T5897] usb 3-1: Manufacturer: ࠇ [ 848.510488][ T5897] usb 3-1: can't set config #1, error -71 [ 848.532011][ T5897] usb 3-1: USB disconnect, device number 86 [ 848.745858][T16574] fuse: Unknown parameter 'fd0x0000000000000003' [ 850.265670][T16593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3322'. [ 850.699789][T16602] fuse: Bad value for 'fd' [ 851.162132][ T30] audit: type=1800 audit(1745310927.553:1371): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3326" name="file1" dev="tmpfs" ino=987 res=0 errno=0 [ 851.183847][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.326988][T16608] Unknown options in mask 5 [ 851.639319][T10666] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 851.879283][T10666] usb 7-1: device descriptor read/64, error -71 [ 852.059331][T12117] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 852.129316][T10666] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 852.212067][T12117] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 852.226821][T12117] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 852.236880][T12117] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 852.246484][T12117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.263198][T10666] usb 7-1: device descriptor read/64, error -71 [ 852.272069][T16617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 852.281486][T12117] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 852.379544][T10666] usb usb7-port1: attempt power cycle [ 853.045844][T10666] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 853.130180][T10666] usb 7-1: device descriptor read/8, error -71 [ 853.369390][T10666] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 853.389654][T10666] usb 7-1: device descriptor read/8, error -71 [ 853.500655][T10666] usb usb7-port1: unable to enumerate USB device [ 854.367362][T12117] usb 1-1: USB disconnect, device number 78 [ 854.729522][T16626] xt_CT: No such helper "snmp_trap" [ 855.272433][T16638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3337'. [ 858.752339][ T30] audit: type=1400 audit(1745310935.583:1372): avc: denied { create } for pid=16667 comm="syz.8.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 858.772004][ T30] audit: type=1400 audit(1745310935.583:1373): avc: denied { bind } for pid=16667 comm="syz.8.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 858.868194][T16669] pim6reg: entered allmulticast mode [ 858.881543][T16669] pim6reg: left allmulticast mode [ 858.933801][ T30] audit: type=1400 audit(1745310935.763:1374): avc: denied { getopt } for pid=16667 comm="syz.8.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 859.287277][T16673] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3349'. [ 859.644404][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3350'. [ 862.465570][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.474235][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.483331][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 862.492410][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 862.503312][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.606022][T16697] chnl_net:caif_netlink_parms(): no params data found [ 862.654004][T16697] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.661209][T16697] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.668282][T16697] bridge_slave_0: entered allmulticast mode [ 862.675400][T16697] bridge_slave_0: entered promiscuous mode [ 862.682961][T16697] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.691115][T16697] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.698979][T16697] bridge_slave_1: entered allmulticast mode [ 862.707580][T16697] bridge_slave_1: entered promiscuous mode [ 862.744214][T14507] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.767430][T16697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.778200][T16697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.815382][T14507] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.832930][T16697] team0: Port device team_slave_0 added [ 862.841004][T16697] team0: Port device team_slave_1 added [ 862.858647][T16697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.865630][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.891819][T16697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.904754][T16697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.912537][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.938391][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.944846][T16697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.964539][T14507] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.996904][T16697] hsr_slave_0: entered promiscuous mode [ 863.004189][T16697] hsr_slave_1: entered promiscuous mode [ 863.010956][T16697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.019978][T16697] Cannot create hsr debugfs directory [ 863.090856][T14507] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.229466][T14507] bridge_slave_1: left allmulticast mode [ 863.235124][T14507] bridge_slave_1: left promiscuous mode [ 863.240847][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.251648][T14507] bridge_slave_0: left allmulticast mode [ 863.257274][T14507] bridge_slave_0: left promiscuous mode [ 863.263237][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.469055][T14507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.479025][T14507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.488791][T14507] bond0 (unregistering): Released all slaves [ 863.498807][T14507] bond1 (unregistering): Released all slaves [ 863.521202][T16697] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 863.535210][T16697] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 863.560377][T16697] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 863.568841][T14507] tipc: Disabling bearer [ 863.574805][T14507] tipc: Left network mode [ 863.577327][T16697] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 863.644647][T16697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.679401][T16697] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.688807][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.695867][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.708444][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.715577][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.747914][T14507] hsr_slave_0: left promiscuous mode [ 863.754755][T14507] hsr_slave_1: left promiscuous mode [ 863.760657][T14507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.768043][T14507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.775826][T14507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.783362][T14507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.798470][T14507] veth1_macvtap: left promiscuous mode [ 863.804132][T14507] veth0_macvtap: left promiscuous mode [ 863.809760][T14507] veth1_vlan: left promiscuous mode [ 863.814975][T14507] veth0_vlan: left promiscuous mode [ 864.066973][T14507] team0 (unregistering): Port device team_slave_1 removed [ 864.099080][T14507] team0 (unregistering): Port device team_slave_0 removed [ 864.465019][T16697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.576355][ T5828] Bluetooth: hci3: command tx timeout [ 864.616234][T16697] veth0_vlan: entered promiscuous mode [ 864.626652][T16697] veth1_vlan: entered promiscuous mode [ 864.647617][T16697] veth0_macvtap: entered promiscuous mode [ 864.657656][T16697] veth1_macvtap: entered promiscuous mode [ 864.668898][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.681613][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.691638][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.702131][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.711942][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.722593][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.732520][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.743103][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.754987][T16697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.767129][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.777659][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.787568][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.798155][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.807958][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.818852][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.828892][T16697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.841055][T16697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.851838][T16697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.863114][T16697] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.872056][T16697] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.880912][T16697] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.890991][T16697] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.938730][T13987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.951347][T13987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.971129][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.980505][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.503293][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3360'. [ 865.988234][T13897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 865.996751][T13897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 866.005562][T13897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 866.016185][T13897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 866.024835][T13897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 866.096337][T16734] netlink: 'syz.9.3362': attribute type 30 has an invalid length. [ 866.104308][T16734] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3362'. [ 866.316093][T12000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.439911][T12000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.527685][T16730] chnl_net:caif_netlink_parms(): no params data found [ 866.548993][T12000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.624820][T12000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.659353][T13897] Bluetooth: hci3: command tx timeout [ 866.674911][T16730] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.685365][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.693086][T16730] bridge_slave_0: entered allmulticast mode [ 866.701485][T16730] bridge_slave_0: entered promiscuous mode [ 866.718684][T16730] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.726798][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.734662][T16730] bridge_slave_1: entered allmulticast mode [ 866.743672][T16730] bridge_slave_1: entered promiscuous mode [ 866.770479][T16730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.782205][T16730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.864162][T16730] team0: Port device team_slave_0 added [ 866.876883][T16745] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 866.883406][T16745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.883552][T16730] team0: Port device team_slave_1 added [ 866.894760][T16745] vhci_hcd vhci_hcd.0: Device attached [ 866.921618][T12000] bridge_slave_1: left allmulticast mode [ 866.927269][T12000] bridge_slave_1: left promiscuous mode [ 866.933934][T12000] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.942803][T12000] bridge_slave_0: left allmulticast mode [ 866.948435][T12000] bridge_slave_0: left promiscuous mode [ 866.954440][T12000] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.129493][ T5861] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 867.149278][ T5874] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 867.186187][T12000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.196479][T12000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.205937][T12000] bond0 (unregistering): Released all slaves [ 867.217901][T16730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.225043][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.251164][T16730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.268655][T16730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.275827][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.302487][T16730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.334652][ T5874] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 867.343988][ T5874] usb 10-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 867.353416][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.364658][ T5874] usb 10-1: config 0 descriptor?? [ 867.384797][T16730] hsr_slave_0: entered promiscuous mode [ 867.391239][T16730] hsr_slave_1: entered promiscuous mode [ 867.397077][T16730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.405010][T16730] Cannot create hsr debugfs directory [ 867.495926][T12000] hsr_slave_0: left promiscuous mode [ 867.501745][T12000] hsr_slave_1: left promiscuous mode [ 867.507311][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.515239][T12000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.523903][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.531905][T12000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.545030][T12000] veth1_macvtap: left promiscuous mode [ 867.550739][T12000] veth0_macvtap: left promiscuous mode [ 867.556255][T12000] veth1_vlan: left promiscuous mode [ 867.561577][T12000] veth0_vlan: left promiscuous mode [ 867.581282][T16746] usb 51-1: recv xbuf, 0 [ 867.581421][ T24] usb 10-1: USB disconnect, device number 2 [ 867.585939][T14509] vhci_hcd: stop threads [ 867.600120][T14509] vhci_hcd: release socket [ 867.605002][T14509] vhci_hcd: disconnect device [ 867.649438][ T5861] vhci_hcd: vhci_device speed not set [ 867.845101][T12000] team0 (unregistering): Port device team_slave_1 removed [ 867.875918][T12000] team0 (unregistering): Port device team_slave_0 removed [ 868.089659][T13897] Bluetooth: hci0: command tx timeout [ 868.333756][T16750] xt_CT: No such helper "snmp_trap" [ 868.574847][T16730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 868.583704][T16730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 868.592700][T16730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.602182][T16730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.653700][T16730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.671615][T16730] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.682720][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.689813][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.705503][T12000] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.712557][T12000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.729902][T13897] Bluetooth: hci3: command tx timeout [ 868.829665][T16730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.964038][T16730] veth0_vlan: entered promiscuous mode [ 868.995178][T16730] veth1_vlan: entered promiscuous mode [ 869.024670][T16730] veth0_macvtap: entered promiscuous mode [ 869.035444][T16730] veth1_macvtap: entered promiscuous mode [ 869.056038][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.068422][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.078426][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.089403][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.102631][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.113120][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.123171][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.134335][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.144951][T16730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.166874][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.177787][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.187868][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.198909][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.217841][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.228648][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.241061][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.251579][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.266903][T16730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.282455][T16730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.291413][T16730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.303523][T16730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.315637][T16730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.387959][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.397503][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.420584][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.428409][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.493806][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 869.611532][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.617882][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.170856][T13897] Bluetooth: hci0: command tx timeout [ 870.177499][T16777] QAT: Invalid ioctl 1075883590 [ 870.192400][T16777] QAT: Invalid ioctl 1075883590 [ 870.202522][T16777] QAT: Invalid ioctl 1075883590 [ 870.212638][T16777] QAT: Invalid ioctl 1075883590 [ 870.223867][T16777] QAT: Invalid ioctl 1075883590 [ 870.236485][T16777] QAT: Invalid ioctl 1075883590 [ 870.248769][T16777] QAT: Invalid ioctl 1075883590 [ 870.260124][T16777] QAT: Invalid ioctl 1075883590 [ 870.273350][T16777] QAT: Invalid ioctl 1075883590 [ 870.285729][T16777] QAT: Invalid ioctl 1075883590 [ 870.308991][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 870.318390][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 870.344383][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 870.352582][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 870.360328][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 870.460474][T16782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16782 comm=syz.4.3369 [ 870.670169][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3370'. [ 870.809359][ T5828] Bluetooth: hci3: command tx timeout [ 870.867269][T16789] fuse: Invalid rootmode [ 870.974977][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.982327][T16792] netlink: 22 bytes leftover after parsing attributes in process `syz.9.3373'. [ 871.095848][T16778] chnl_net:caif_netlink_parms(): no params data found [ 871.151247][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.001789][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.249335][ T5828] Bluetooth: hci0: command tx timeout [ 872.489783][ T5828] Bluetooth: hci1: command tx timeout [ 872.507530][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.525471][T16809] pim6reg: entered allmulticast mode [ 872.530972][T16811] pim6reg: left allmulticast mode [ 872.546931][T16778] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.554654][T16778] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.563434][T16778] bridge_slave_0: entered allmulticast mode [ 872.571032][T16778] bridge_slave_0: entered promiscuous mode [ 872.578574][T16778] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.586112][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.595434][T16778] bridge_slave_1: entered allmulticast mode [ 872.604316][T16778] bridge_slave_1: entered promiscuous mode [ 872.654878][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3378'. [ 872.671964][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.687287][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.749080][T16778] team0: Port device team_slave_0 added [ 872.758063][T16778] team0: Port device team_slave_1 added [ 872.795414][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.807632][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.837857][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.361100][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.368040][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.393910][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.408296][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.824903][T16778] hsr_slave_0: entered promiscuous mode [ 873.840447][T16778] hsr_slave_1: entered promiscuous mode [ 874.332895][ T5828] Bluetooth: hci0: command tx timeout [ 874.362264][ T12] bridge_slave_1: left allmulticast mode [ 874.367918][ T12] bridge_slave_1: left promiscuous mode [ 874.390291][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.451717][T13897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 874.462082][T13897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 874.469834][T13897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 874.478021][T13897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 874.496225][T16823] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 874.504239][T13897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 874.585139][ T12] bridge_slave_0: left allmulticast mode [ 874.604989][ T12] bridge_slave_0: left promiscuous mode [ 874.618652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.673926][T13897] Bluetooth: hci1: command tx timeout [ 876.372628][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.456967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.525315][ T12] bond0 (unregistering): Released all slaves [ 876.569394][T13897] Bluetooth: hci4: command tx timeout [ 876.703095][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3386'. [ 876.729193][ T30] audit: type=1400 audit(1745310953.553:1375): avc: denied { listen } for pid=16846 comm="syz.9.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 876.750125][T13897] Bluetooth: hci1: command tx timeout [ 877.208338][ T12] hsr_slave_0: left promiscuous mode [ 877.214985][ T12] hsr_slave_1: left promiscuous mode [ 877.238293][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.247799][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.262705][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.518683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.548217][ T12] veth1_macvtap: left promiscuous mode [ 877.555661][ T12] veth0_macvtap: left promiscuous mode [ 877.562012][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3390'. [ 877.571152][ T12] veth1_vlan: left promiscuous mode [ 877.577005][ T12] veth0_vlan: left promiscuous mode [ 877.604923][T16862] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3391'. [ 878.669905][T13897] Bluetooth: hci4: command tx timeout [ 878.879214][T13897] Bluetooth: hci1: command tx timeout [ 879.216496][ T12] team0 (unregistering): Port device team_slave_1 removed [ 879.252194][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 879.263993][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 879.272901][ T12] team0 (unregistering): Port device team_slave_0 removed [ 879.280707][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 879.293168][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 879.303247][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 879.655608][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3395'. [ 879.810701][T16831] chnl_net:caif_netlink_parms(): no params data found [ 880.874079][T13897] Bluetooth: hci4: command tx timeout [ 881.278884][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.297591][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.347752][T16831] bridge_slave_0: entered allmulticast mode [ 881.361313][T16831] bridge_slave_0: entered promiscuous mode [ 881.375726][T13897] Bluetooth: hci2: command tx timeout [ 881.392658][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.400034][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.407181][T16831] bridge_slave_1: entered allmulticast mode [ 881.414365][T16831] bridge_slave_1: entered promiscuous mode [ 881.453607][T16778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 881.492081][T16778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 881.565282][T16778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 881.600297][T16778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 881.678969][T16831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.725338][T16831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.743637][T16877] chnl_net:caif_netlink_parms(): no params data found [ 881.818100][T16831] team0: Port device team_slave_0 added [ 881.841769][T16778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.868314][T16831] team0: Port device team_slave_1 added [ 882.043774][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.063855][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 882.564321][T16831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.575739][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.632502][T16831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.645272][T16831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.652646][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.681385][T16831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.820648][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.959246][T13897] Bluetooth: hci4: command tx timeout [ 883.160116][T16778] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.176559][T12000] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.183700][T12000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.219746][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.449229][T13897] Bluetooth: hci2: command tx timeout [ 883.495387][T16924] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 883.705797][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.716892][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.726160][T16877] bridge_slave_0: entered allmulticast mode [ 883.754295][T16877] bridge_slave_0: entered promiscuous mode [ 883.762331][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.774490][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.781906][T16877] bridge_slave_1: entered allmulticast mode [ 883.789030][T16877] bridge_slave_1: entered promiscuous mode [ 883.953048][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.451893][T14507] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.459013][T14507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.475372][T16940] fuse: Bad value for 'rootmode' [ 884.502162][T16941] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 884.514275][T16877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.538646][T16877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.587650][T16831] hsr_slave_0: entered promiscuous mode [ 884.596298][T16831] hsr_slave_1: entered promiscuous mode [ 884.604390][T16831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.613405][T16831] Cannot create hsr debugfs directory [ 884.620800][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 884.639984][T16877] team0: Port device team_slave_0 added [ 884.648502][T16877] team0: Port device team_slave_1 added [ 884.704978][T16877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.715356][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.743049][T16877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.801507][T16877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.808777][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.849772][T16877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.032599][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.077478][T16877] hsr_slave_0: entered promiscuous mode [ 885.087681][T16877] hsr_slave_1: entered promiscuous mode [ 885.094087][T16877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.102775][T16877] Cannot create hsr debugfs directory [ 885.154692][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.321502][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.529374][T13897] Bluetooth: hci2: command tx timeout [ 885.556775][ T30] audit: type=1326 audit(1745310962.383:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.595069][T16778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.602541][ T30] audit: type=1326 audit(1745310962.383:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.626622][ T30] audit: type=1326 audit(1745310962.383:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.650939][ T30] audit: type=1326 audit(1745310962.383:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.674592][ T30] audit: type=1326 audit(1745310962.383:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.698734][ T30] audit: type=1326 audit(1745310962.383:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.726941][ T30] audit: type=1326 audit(1745310962.393:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3e98e169 code=0x7ffc0000 [ 885.758494][ T30] audit: type=1326 audit(1745310962.393:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d3e990087 code=0x7ffc0000 [ 885.803342][ T30] audit: type=1326 audit(1745310962.393:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1d3e98fffc code=0x7ffc0000 [ 885.812973][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.830873][ T30] audit: type=1326 audit(1745310962.393:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16954 comm="syz.4.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1d3e98ff34 code=0x7ffc0000 [ 886.936467][T16778] veth0_vlan: entered promiscuous mode [ 887.044364][T16778] veth1_vlan: entered promiscuous mode [ 887.107515][T16778] veth0_macvtap: entered promiscuous mode [ 887.120612][T16778] veth1_macvtap: entered promiscuous mode [ 887.142515][ T12] bridge_slave_1: left allmulticast mode [ 887.160654][ T12] bridge_slave_1: left promiscuous mode [ 887.166403][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.186031][ T12] bridge_slave_0: left allmulticast mode [ 887.193305][ T12] bridge_slave_0: left promiscuous mode [ 887.199025][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.217746][ T12] bridge_slave_1: left allmulticast mode [ 887.223901][ T12] bridge_slave_1: left promiscuous mode [ 887.232094][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.242447][ T12] bridge_slave_0: left allmulticast mode [ 887.248136][ T12] bridge_slave_0: left promiscuous mode [ 887.257001][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.619334][T13897] Bluetooth: hci2: command tx timeout [ 887.879042][T16965] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 888.310083][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 889.027126][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.044881][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.058922][ T12] bond0 (unregistering): Released all slaves [ 889.077740][ T12] bond1 (unregistering): Released all slaves [ 889.170460][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.182484][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.191880][ T12] bond0 (unregistering): Released all slaves [ 889.207327][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.219241][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.230456][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.240880][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.250706][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.261291][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.272302][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.282963][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.294247][T16778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.317676][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.333224][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.344368][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.355190][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.380234][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.404628][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.414712][T16778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.429051][T16778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.446895][T16778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.537030][T16778] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.559233][T16778] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.574223][T16778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.586277][T16778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.531668][T13987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.572522][T13987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.607867][ T12] hsr_slave_0: left promiscuous mode [ 890.627316][ T12] hsr_slave_1: left promiscuous mode [ 890.635738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.651348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.671804][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.679550][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.695751][ T12] hsr_slave_0: left promiscuous mode [ 890.712426][ T12] hsr_slave_1: left promiscuous mode [ 890.718702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.726495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.752131][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.772513][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.830274][ T12] veth1_macvtap: left promiscuous mode [ 890.839007][ T12] veth0_macvtap: left promiscuous mode [ 890.860971][ T12] veth1_vlan: left promiscuous mode [ 890.874145][ T12] veth0_vlan: left promiscuous mode [ 890.890365][ T12] veth1_macvtap: left promiscuous mode [ 890.903948][ T12] veth0_macvtap: left promiscuous mode [ 890.919320][ T12] veth1_vlan: left promiscuous mode [ 890.924679][ T12] veth0_vlan: left promiscuous mode [ 891.269778][T16999] netlink: 'syz.9.3426': attribute type 30 has an invalid length. [ 891.277874][T16999] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3426'. [ 891.573480][ T12] team0 (unregistering): Port device team_slave_1 removed [ 891.632449][ T12] team0 (unregistering): Port device team_slave_0 removed [ 892.214406][ T12] team0 (unregistering): Port device team_slave_1 removed [ 892.242884][ T12] team0 (unregistering): Port device team_slave_0 removed [ 892.500835][T14507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.519730][T14507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.558445][T16999] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 892.631039][T16877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.677072][T16877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 892.791574][T16877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 892.949425][T16877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 893.650601][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 893.665731][T16831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 893.673000][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 893.673012][ T30] audit: type=1326 audit(1745310970.483:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.702878][ T30] audit: type=1326 audit(1745310970.483:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.729511][T16831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 893.742524][ T30] audit: type=1326 audit(1745310970.483:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.766181][ T30] audit: type=1326 audit(1745310970.493:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.792783][ T30] audit: type=1326 audit(1745310970.493:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.808209][T16831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 893.817275][ T30] audit: type=1326 audit(1745310970.493:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.847690][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 893.866080][ T30] audit: type=1326 audit(1745310970.493:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799358e169 code=0x7ffc0000 [ 893.893054][ T30] audit: type=1326 audit(1745310970.493:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7993590087 code=0x7ffc0000 [ 894.008941][T16831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 894.069386][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 894.100908][ T24] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 894.177993][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.343683][ T24] usb 6-1: config 0 descriptor?? [ 895.879084][ T30] audit: type=1326 audit(1745310970.493:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f799358fffc code=0x7ffc0000 [ 895.903126][ T30] audit: type=1326 audit(1745310970.493:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f799358ff34 code=0x7ffc0000 [ 896.043722][ T24] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 896.068329][T16877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.122249][T16877] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.155205][T16877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 896.166071][T16877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.194356][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.201501][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.231085][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.238181][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.307593][T16831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.393864][ T5897] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 896.436274][T16831] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.472369][ T24] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 896.516130][ T24] asix 6-1:0.0: probe with driver asix failed with error -32 [ 896.564012][ T5897] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 896.628752][ T5897] usb 10-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 896.696586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.703718][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.714573][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.717307][ T5897] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 896.721671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.753118][ T5897] usb 10-1: config 220 has no interface number 2 [ 896.763575][T16831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.764119][ T5897] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 896.793533][ T5897] usb 10-1: config 220 interface 0 has no altsetting 0 [ 896.803752][ T5897] usb 10-1: config 220 interface 76 has no altsetting 0 [ 896.814678][ T5897] usb 10-1: config 220 interface 1 has no altsetting 0 [ 896.817891][T16877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.824502][ T5897] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 896.842446][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.855877][ T5897] usb 10-1: Product: syz [ 896.858610][T16877] veth0_vlan: entered promiscuous mode [ 896.866022][ T5897] usb 10-1: Manufacturer: syz [ 896.875099][ T5897] usb 10-1: SerialNumber: syz [ 896.878232][T16877] veth1_vlan: entered promiscuous mode [ 896.916643][T16877] veth0_macvtap: entered promiscuous mode [ 896.927473][T16877] veth1_macvtap: entered promiscuous mode [ 896.968117][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.981012][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.990860][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.001482][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.011930][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.022479][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.033247][T16877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.065305][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.076069][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.086344][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.097340][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.106609][ T5897] usb 10-1: selecting invalid altsetting 0 [ 897.107453][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.122014][ T5897] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 897.125164][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.132846][ T5897] usb 10-1: No valid video chain found. [ 897.148024][T16877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.155715][ T5897] usb 10-1: selecting invalid altsetting 0 [ 897.159555][T16877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.164412][ T5897] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 897.173824][T16877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.184500][ T5897] usb 10-1: USB disconnect, device number 3 [ 897.188057][T16877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.202137][T16877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.224195][T16831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.298540][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.307248][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.325075][T16831] veth0_vlan: entered promiscuous mode [ 897.343379][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.351673][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.362968][T16831] veth1_vlan: entered promiscuous mode [ 897.393032][T16831] veth0_macvtap: entered promiscuous mode [ 897.407012][T16831] veth1_macvtap: entered promiscuous mode [ 897.428608][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.442104][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.452596][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.466657][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.496470][T10666] usb 6-1: USB disconnect, device number 2 [ 897.515861][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.527277][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.537272][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.549030][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.663442][T17050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17050 comm=syz.4.3436 [ 897.663794][T16831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.699345][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 898.190130][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.200668][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.211302][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.221814][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.231645][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.242699][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.269465][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.281978][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.394486][T16831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.408026][T16831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.419614][T16831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.470851][T16831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.479612][T16831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.058570][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 899.058583][ T30] audit: type=1326 audit(1745310975.883:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 899.461159][ T30] audit: type=1326 audit(1745310975.883:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 899.486262][ T30] audit: type=1326 audit(1745310976.023:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 899.565819][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.589708][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.599768][ T30] audit: type=1326 audit(1745310976.023:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 899.626530][ T30] audit: type=1326 audit(1745310976.023:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 899.655222][ T30] audit: type=1326 audit(1745310976.273:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 899.755115][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'. [ 900.608329][ T30] audit: type=1326 audit(1745310976.273:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 900.632007][ T30] audit: type=1326 audit(1745310976.283:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 900.659225][ T30] audit: type=1326 audit(1745310976.283:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 900.661169][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.682710][ T30] audit: type=1326 audit(1745310976.283:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.5.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feb18e169 code=0x7ffc0000 [ 900.787956][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.470745][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3446'. [ 901.671580][T17092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17092 comm=syz.1.3448 [ 902.654173][T17103] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3450'. [ 903.946120][T17123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3456'. [ 904.264486][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 904.583057][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 904.762744][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 905.134589][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 905.520048][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 905.540047][T17132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17132 comm=syz.5.3459 [ 905.566018][ T24] usb 2-1: config 220 has no interface number 2 [ 905.598526][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 905.654841][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 905.798577][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 905.806742][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 905.817989][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 905.832942][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.849178][ T24] usb 2-1: Product: syz [ 905.853344][ T24] usb 2-1: Manufacturer: syz [ 905.857925][ T24] usb 2-1: SerialNumber: syz [ 906.102482][ T24] usb 2-1: selecting invalid altsetting 0 [ 906.244146][ T24] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 906.355297][ T24] usb 2-1: No valid video chain found. [ 906.376912][T17146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3464'. [ 906.385362][ T24] usb 2-1: selecting invalid altsetting 0 [ 906.399523][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 906.423956][ T24] usb 2-1: USB disconnect, device number 52 [ 907.422818][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 908.079272][T13963] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 908.234103][T17172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17172 comm=syz.9.3473 [ 908.293613][T13963] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 908.302419][T13963] usb 6-1: config 0 has no interface number 0 [ 908.308891][T13963] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 908.340068][ T5897] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 908.381187][T13963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.516270][T13963] usb 6-1: config 0 descriptor?? [ 908.524657][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3475'. [ 908.539311][ T5897] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 908.566211][T13963] usb 6-1: selecting invalid altsetting 1 [ 908.577927][ T5897] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 908.755367][T13963] dvb_ttusb_budget: ttusb_init_controller: error [ 908.762462][ T5897] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 908.772786][T13963] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 908.784056][ T5897] usb 2-1: config 220 has no interface number 2 [ 908.792096][ T5897] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 908.805438][ T5897] usb 2-1: config 220 interface 0 has no altsetting 0 [ 908.812406][ T5897] usb 2-1: config 220 interface 76 has no altsetting 0 [ 908.819363][ T5897] usb 2-1: config 220 interface 1 has no altsetting 0 [ 908.832408][ T5897] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 908.841768][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.849979][ T5897] usb 2-1: Product: syz [ 908.854197][ T5897] usb 2-1: Manufacturer: syz [ 908.858854][ T5897] usb 2-1: SerialNumber: syz [ 909.123680][T13963] DVB: Unable to find symbol cx22700_attach() [ 909.182523][T13963] DVB: Unable to find symbol tda10046_attach() [ 909.188753][T13963] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 909.208847][T13963] usb 6-1: USB disconnect, device number 3 [ 909.547402][ T5897] usb 2-1: selecting invalid altsetting 0 [ 909.558498][ T5897] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 909.567317][ T5897] usb 2-1: No valid video chain found. [ 909.819194][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 909.838182][ T5897] usb 2-1: selecting invalid altsetting 0 [ 909.852916][ T5897] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 909.871621][ T5897] usb 2-1: USB disconnect, device number 53 [ 909.889208][ T971] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 910.009111][T17203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3479'. [ 910.180146][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 910.188394][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 910.208722][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 910.254485][ T10] usb 4-1: config 220 has no interface number 2 [ 910.262115][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 910.278150][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 910.281895][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 910.289373][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 910.306885][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 910.316539][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 910.328119][ T971] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 228, using maximum allowed: 30 [ 910.340981][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.348976][ T10] usb 4-1: Product: syz [ 910.360758][ T10] usb 4-1: Manufacturer: syz [ 910.367744][ T10] usb 4-1: SerialNumber: syz [ 910.460711][ T971] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 910.470911][ T971] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 910.481319][ T971] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 910.708673][ T10] usb 4-1: selecting invalid altsetting 0 [ 910.767105][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 910.808866][ T10] usb 4-1: No valid video chain found. [ 910.871260][ T10] usb 4-1: selecting invalid altsetting 0 [ 910.882503][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 910.908727][ T10] usb 4-1: USB disconnect, device number 47 [ 911.190452][ T974] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 911.614958][ T974] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 911.625874][ T974] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 911.658842][ T974] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 911.713258][T17221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17221 comm=syz.9.3485 [ 911.735931][ T974] usb 2-1: config 220 has no interface number 2 [ 911.745533][ T974] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 911.774868][ T974] usb 2-1: config 220 interface 0 has no altsetting 0 [ 911.796134][ T974] usb 2-1: config 220 interface 76 has no altsetting 0 [ 911.813265][ T974] usb 2-1: config 220 interface 1 has no altsetting 0 [ 911.826790][ T974] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 911.836829][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.848337][ T974] usb 2-1: Product: syz [ 911.854356][ T974] usb 2-1: Manufacturer: syz [ 911.860156][ T974] usb 2-1: SerialNumber: syz [ 911.950081][T17231] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3489'. [ 912.076641][ T974] usb 2-1: selecting invalid altsetting 0 [ 912.082694][ T974] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 912.099182][ T974] usb 2-1: No valid video chain found. [ 912.108076][ T974] usb 2-1: selecting invalid altsetting 0 [ 912.119231][ T974] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 912.139258][ T974] usb 2-1: USB disconnect, device number 54 [ 912.157172][ T971] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.183556][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.196284][ T971] usb 5-1: Product: Ќ [ 912.201806][ T971] usb 5-1: Manufacturer: ࠇ [ 912.208790][ T971] usb 5-1: can't set config #1, error -71 [ 912.229523][ T971] usb 5-1: USB disconnect, device number 42 [ 912.253736][T13963] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 912.520254][T13963] usb 6-1: Using ep0 maxpacket: 8 [ 913.132469][T13963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 913.142927][T13963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 913.152616][T13963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 913.167911][T13963] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 913.177649][T13963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.185675][T13963] usb 6-1: Product: syz [ 913.190637][T13963] usb 6-1: Manufacturer: syz [ 913.195225][T13963] usb 6-1: SerialNumber: syz [ 913.220782][T13963] usb 6-1: config 0 descriptor?? [ 913.789391][T13963] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 913.937221][T10666] psmouse serio3: Failed to reset mouse on : -5 [ 913.993604][T13963] usb 5-1: config 0 has no interfaces? [ 914.003344][T13963] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 914.018706][T13963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.026995][T13963] usb 5-1: Product: syz [ 914.034471][T13963] usb 5-1: Manufacturer: syz [ 914.044229][T13963] usb 5-1: SerialNumber: syz [ 914.057699][T13963] usb 5-1: config 0 descriptor?? [ 914.967495][ T10] usb 6-1: USB disconnect, device number 4 [ 915.066729][T17266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17266 comm=syz.9.3498 [ 916.695283][T17282] pim6reg: entered allmulticast mode [ 916.721542][T17283] pim6reg: left allmulticast mode [ 916.796857][T17288] syz.1.3503: attempt to access beyond end of device [ 916.796857][T17288] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 916.821243][T12117] usb 5-1: USB disconnect, device number 43 [ 916.934072][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 916.961016][T17288] gfs2: error -5 reading superblock [ 917.480655][T17301] hub 1-0:1.0: USB hub found [ 917.485535][T17301] hub 1-0:1.0: 1 port detected [ 917.499463][T17302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17302 comm=syz.5.3510 [ 918.125665][T10666] misc userio: Buffer overflowed, userio client isn't keeping up [ 918.149913][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 918.149927][ T30] audit: type=1800 audit(1745310993.975:1467): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3511" name="file1" dev="tmpfs" ino=134 res=0 errno=0 [ 918.537122][T17307] input: syz0 as /devices/virtual/input/input28 [ 919.686602][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3516'. [ 920.156707][T10666] input: PS/2 Generic Mouse as /devices/serio3/input/input27 [ 920.379527][T10666] psmouse serio3: Failed to enable mouse on [ 920.489470][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 920.509841][T17335] pim6reg: entered allmulticast mode [ 920.550122][T17335] pim6reg: left allmulticast mode [ 920.684724][ T10] usb 6-1: config 0 has no interfaces? [ 920.709480][ T10] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 921.496307][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.504945][ T10] usb 6-1: Product: syz [ 921.512481][ T10] usb 6-1: Manufacturer: syz [ 921.517117][ T10] usb 6-1: SerialNumber: syz [ 921.530794][T17343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17343 comm=syz.9.3521 [ 921.572841][ T10] usb 6-1: config 0 descriptor?? [ 922.876684][T17367] netlink: 22 bytes leftover after parsing attributes in process `syz.9.3529'. [ 922.915426][T17367] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3529'. [ 923.213372][ T974] usb 6-1: USB disconnect, device number 5 [ 923.278965][T17367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.290254][T17373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3530'. [ 923.315886][T17374] input: syz0 as /devices/virtual/input/input31 [ 923.335508][T17367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.517878][T17367] bond0 (unregistering): Released all slaves [ 923.997728][T17381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17381 comm=syz.5.3534 [ 927.759303][T17423] netlink: 22 bytes leftover after parsing attributes in process `syz.9.3544'. [ 927.791177][T17423] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3544'. [ 929.359914][T17431] input: syz0 as /devices/virtual/input/input34 [ 930.132618][ T10] psmouse serio6: Failed to reset mouse on : -5 [ 931.471104][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.477413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.317393][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 933.829190][T13963] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 934.218026][T13963] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 934.340082][T13963] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 228, using maximum allowed: 30 [ 934.628580][T13963] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 934.706468][T17509] input: syz0 as /devices/virtual/input/input36 [ 934.745604][T13963] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 934.763912][T13963] usb 10-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 935.319235][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 935.897084][T13963] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.912984][T13963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.059174][T13963] usb 10-1: Product: Ќ [ 936.079289][T13963] usb 10-1: Manufacturer: ࠇ [ 936.107604][T13963] usb 10-1: can't set config #1, error -71 [ 936.540544][T13963] usb 10-1: USB disconnect, device number 4 [ 937.278301][ T10] input: PS/2 Generic Mouse as /devices/serio6/input/input35 [ 937.499214][ T10] psmouse serio6: Failed to enable mouse on [ 937.598866][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3577'. [ 941.450173][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3590'. [ 944.965249][T17635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17635 comm=syz.4.3610 [ 945.210257][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'. [ 947.892036][T17666] page: refcount:3 mapcount:0 mapping:ffff888023e7eff8 index:0x2 pfn:0x6b85a [ 947.900875][T17666] memcg:ffff88805ecee000 [ 947.905703][T17666] aops:def_blk_aops ino:fa00000 [ 947.910586][T17666] flags: 0xfff6800000003d(locked|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 947.920930][T17666] raw: 00fff6800000003d ffffea0001ae16c8 ffffea00016b6008 ffff888023e7eff8 [ 947.929642][T17666] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88805ecee000 [ 947.938225][T17666] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 947.946387][T17666] page_owner tracks the page as allocated [ 947.952103][T17666] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17665, tgid 17665 (syz.5.3618), ts 947758101163, free_ts 947728468291 [ 947.972980][T17666] post_alloc_hook+0x181/0x1b0 [ 947.977775][T17666] get_page_from_freelist+0x135c/0x3920 [ 947.983326][T17666] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 947.989225][T17666] alloc_pages_mpol+0x1fb/0x550 [ 947.994069][T17666] folio_alloc_noprof+0x20/0x2d0 [ 947.998999][T17666] filemap_alloc_folio_noprof+0x3a1/0x470 [ 948.005314][T17666] page_cache_ra_order+0x4c0/0xd00 [ 948.010440][T17666] filemap_fault+0x147c/0x2740 [ 948.015194][T17666] __do_fault+0x10a/0x490 [ 948.019521][T17666] do_pte_missing+0x1a6/0x3fb0 [ 948.024280][T17666] __handle_mm_fault+0x103d/0x2a40 [ 948.029402][T17666] handle_mm_fault+0x3fe/0xad0 [ 948.034159][T17666] do_user_addr_fault+0x60c/0x1370 [ 948.039273][T17666] exc_page_fault+0x5c/0xc0 [ 948.043769][T17666] asm_exc_page_fault+0x26/0x30 [ 948.048611][T17666] page last free pid 17670 tgid 17667 stack trace: [ 948.055121][T17666] __free_frozen_pages+0x69d/0xff0 [ 948.060233][T17666] __folio_put+0x329/0x450 [ 948.064649][T17666] snd_seq_pool_done+0x178/0x280 [ 948.069594][T17666] snd_seq_fifo_delete+0x107/0x170 [ 948.074698][T17666] snd_seq_release+0x78/0xe0 [ 948.079289][T17666] __fput+0x3ff/0xb70 [ 948.083263][T17666] task_work_run+0x14d/0x240 [ 948.087854][T17666] syscall_exit_to_user_mode+0x27b/0x2a0 [ 948.093658][T17666] do_syscall_64+0xda/0x260 [ 948.098155][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.104109][T17666] ------------[ cut here ]------------ [ 948.110160][T17666] kernel BUG at mm/filemap.c:3433! [ 948.115275][T17666] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 948.121661][T17666] CPU: 0 UID: 0 PID: 17666 Comm: syz.5.3618 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 948.133690][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 948.143714][T17666] RIP: 0010:filemap_fault+0x1862/0x2740 [ 948.149234][T17666] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 948.168813][T17666] RSP: 0018:ffffc9000393f510 EFLAGS: 00010246 [ 948.174850][T17666] RAX: 0000000000080000 RBX: ffffea0001ae1680 RCX: ffffc9000c56f000 [ 948.182791][T17666] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88807a170444 [ 948.190733][T17666] RBP: ffffc9000393f7e0 R08: 0000000000000001 R09: 0000000000000000 [ 948.198673][T17666] R10: 0000000000000001 R11: fffffffffffc6d98 R12: ffff888023e7eff8 [ 948.206615][T17666] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 948.214557][T17666] FS: 00007f1febf506c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 948.223465][T17666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.230020][T17666] CR2: 0000200000001edd CR3: 000000003689e000 CR4: 00000000003526f0 [ 948.237962][T17666] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 948.245902][T17666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 948.253847][T17666] Call Trace: [ 948.257097][T17666] [ 948.260003][T17666] ? __pfx_filemap_fault+0x10/0x10 [ 948.265099][T17666] __do_fault+0x10a/0x490 [ 948.269400][T17666] do_pte_missing+0x1031/0x3fb0 [ 948.274225][T17666] ? __handle_mm_fault+0x1010/0x2a40 [ 948.279487][T17666] __handle_mm_fault+0x103d/0x2a40 [ 948.284573][T17666] ? __pfx___handle_mm_fault+0x10/0x10 [ 948.290012][T17666] ? find_vma+0xbf/0x140 [ 948.294235][T17666] ? __pfx_find_vma+0x10/0x10 [ 948.298884][T17666] handle_mm_fault+0x3fe/0xad0 [ 948.303624][T17666] do_user_addr_fault+0x7a6/0x1370 [ 948.308706][T17666] ? rcu_is_watching+0x12/0xc0 [ 948.313442][T17666] exc_page_fault+0x5c/0xc0 [ 948.317919][T17666] asm_exc_page_fault+0x26/0x30 [ 948.322739][T17666] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 948.328427][T17666] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 948.348005][T17666] RSP: 0018:ffffc9000393fa78 EFLAGS: 00050202 [ 948.354049][T17666] RAX: 0000000000000001 RBX: 0000200000001edd RCX: 0000000000000001 [ 948.361989][T17666] RDX: ffffed1005253d84 RSI: 0000200000001edd RDI: ffff88802929ec1d [ 948.369930][T17666] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed1005253d83 [ 948.377869][T17666] R10: ffff88802929ec1d R11: 0000000000000000 R12: 0000000000000000 [ 948.385816][T17666] R13: ffff88802929ec1d R14: dffffc0000000000 R15: 0000200000001edd [ 948.393764][T17666] _copy_from_user+0x98/0xd0 [ 948.398325][T17666] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 948.403935][T17666] snd_rawmidi_write+0x26e/0xc10 [ 948.408844][T17666] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 948.414271][T17666] ? avc_policy_seqno+0x9/0x20 [ 948.419003][T17666] ? selinux_file_permission+0x11f/0x580 [ 948.424610][T17666] ? __pfx_default_wake_function+0x10/0x10 [ 948.430391][T17666] ? bpf_lsm_file_permission+0x9/0x10 [ 948.435735][T17666] ? security_file_permission+0x71/0x210 [ 948.441341][T17666] ? rw_verify_area+0xcf/0x680 [ 948.446078][T17666] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 948.451507][T17666] vfs_writev+0x6c4/0xdc0 [ 948.455813][T17666] ? __pfx_vfs_writev+0x10/0x10 [ 948.460640][T17666] ? kmem_cache_free+0x2d4/0x4d0 [ 948.465549][T17666] ? __fget_files+0x20e/0x3c0 [ 948.470197][T17666] ? do_writev+0x295/0x330 [ 948.474585][T17666] do_writev+0x295/0x330 [ 948.478810][T17666] ? __pfx_do_writev+0x10/0x10 [ 948.483549][T17666] ? rcu_is_watching+0x12/0xc0 [ 948.488286][T17666] do_syscall_64+0xcd/0x260 [ 948.492766][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.498627][T17666] RIP: 0033:0x7f1feb18e169 [ 948.503025][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.522613][T17666] RSP: 002b:00007f1febf50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 948.530998][T17666] RAX: ffffffffffffffda RBX: 00007f1feb3b5fa0 RCX: 00007f1feb18e169 [ 948.538939][T17666] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 948.546879][T17666] RBP: 00007f1feb210a68 R08: 0000000000000000 R09: 0000000000000000 [ 948.554833][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.562775][T17666] R13: 0000000000000000 R14: 00007f1feb3b5fa0 R15: 00007ffe246a3a78 [ 948.570722][T17666] [ 948.573713][T17666] Modules linked in: [ 948.579480][T17666] ---[ end trace 0000000000000000 ]--- [ 948.585162][T17666] RIP: 0010:filemap_fault+0x1862/0x2740 [ 948.590719][T17666] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 948.610351][T17666] RSP: 0018:ffffc9000393f510 EFLAGS: 00010246 [ 948.616402][T17666] RAX: 0000000000080000 RBX: ffffea0001ae1680 RCX: ffffc9000c56f000 [ 948.624707][T17666] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88807a170444 [ 948.632679][T17666] RBP: ffffc9000393f7e0 R08: 0000000000000001 R09: 0000000000000000 [ 948.640648][T17666] R10: 0000000000000001 R11: fffffffffffc6d98 R12: ffff888023e7eff8 [ 948.648611][T17666] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 948.656583][T17666] FS: 00007f1febf506c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 948.665519][T17666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.672097][T17666] CR2: 0000200000001edd CR3: 000000003689e000 CR4: 00000000003526f0 [ 948.680061][T17666] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 948.688019][T17666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 948.695988][T17666] Kernel panic - not syncing: Fatal exception [ 948.702199][T17666] Kernel Offset: disabled [ 948.706495][T17666] Rebooting in 86400 seconds..