last executing test programs: 16m13.860866319s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m12.776520751s ago: executing program 1 (id=37): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000940)="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", 0x481}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 16m9.513724424s ago: executing program 1 (id=41): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = gettid() fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x1b, 0xf9, 0x17, 0x10, 0xd46, 0x2011, 0xe88a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0x6a, 0xa, 0x1, 0x4d, 0x78, 0x27, 0x62, [], [{{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{r3, r4+60000000}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) 16m5.853108949s ago: executing program 1 (id=51): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000002140)={{0x12, 0x1, 0x0, 0x8d, 0xdf, 0xb2, 0x40, 0xb49, 0x64f, 0xd4fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0xe6, 0xf6, 0x52, 0x0, [], [{{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3d, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x101, 0xff, 0x1, {0x22, 0xa9c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x9, 0xe, 0x8, 0x4}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7, 0xf000, 0xff81, [0xffff5f, 0x3f00, 0x10100ff, 0xc030]}]}, 0x2, [{0xc2, &(0x7f00000000c0)=@string={0xc2, 0x3, "273cb14ae5ea4ce9bf6f7a2e3f3523b8669f22cebbde2ae3f5fa05ff7af2cab99ce51723d76ab8b76f1c63651fd70fe0e4e586332458c3d34fa4f7278cfd830d8be1c5b2203687fd83a8bdb7de1de1f6cebcf0efe8feac454e9a8120aabb296acfdde21de0bebc7a57841c49df8d0316012e2570e05bc96b0a9e868389611d2fbd4f3c83b6e46fdabec7c3a9089265c142029e1363c1cbec97cb40c0913d65481b1055f30f30c30ff49ca35f69220d3e09fedb415bc11021da55682c4bf8e459"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x430}}]}) 16m2.88186888s ago: executing program 1 (id=58): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) splice(r2, 0x0, r3, 0x0, 0xffffffe1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m0.547948757s ago: executing program 1 (id=63): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x30000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 15m59.40297461s ago: executing program 32 (id=63): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x30000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 10m58.113555636s ago: executing program 0 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80) rseq(0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) close_range(r3, 0xffffffffffffffff, 0x0) 10m56.602142061s ago: executing program 0 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r3, &(0x7f0000000040)=""/44, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) 10m53.56690099s ago: executing program 0 (id=707): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0xf) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x8, 0xc, [{0x7, 0x8}, {0x7, 0x3}, {0x91a, 0x5}, {0x7fffffff, 0x1}, {0xa, 0x3}, {0x8, 0x2}, {0x7fffffff, 0x74e5}, {0x18000008, 0x7}], 0x98, 0x8, 0x6, 0x2, 0x3}}) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_gettime(0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8000000000000000, 0x44801) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 10m49.459338229s ago: executing program 0 (id=713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000300), &(0x7f0000000400)='%pS \x00'}, 0x20) 10m49.033588023s ago: executing program 0 (id=716): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0b0000000000e033fb00", @ANYRES32=0x0, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r3, &(0x7f0000000300)={0x11, 0xd, r4, 0x1, 0x4, 0x6, @random="832210f5572e"}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff0000", @ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 10m47.898534256s ago: executing program 0 (id=717): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x45a7, &(0x7f0000000240)={0x0, 0xbb6f, 0x2020, 0x2, 0x238}, 0x0, &(0x7f0000000180)) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x2814, 0x1, 0x1, 0xfffffffc, 0x0, r1}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000) io_setup(0x2007, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 10m31.283835568s ago: executing program 33 (id=717): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x45a7, &(0x7f0000000240)={0x0, 0xbb6f, 0x2020, 0x2, 0x238}, 0x0, &(0x7f0000000180)) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x2814, 0x1, 0x1, 0xfffffffc, 0x0, r1}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000) io_setup(0x2007, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 9m19.778045648s ago: executing program 6 (id=864): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) getpgid(r0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1, 0x0, 0x0, 0x20004004}, 0x0) 9m18.191099752s ago: executing program 6 (id=869): socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r2, &(0x7f00000002c0)=""/110, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000340)={{}, 0x7}) 9m14.410577134s ago: executing program 6 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) 9m13.26394172s ago: executing program 6 (id=878): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) userfaultfd(0x800) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r7 = dup3(r5, r2, 0x0) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 9m12.263804428s ago: executing program 6 (id=881): syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@udp6, 0x4}, 0x20) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001a000100000000000000000002100000000000080020000008001e000500000008000200ac1414aa08000300"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x1, '\x00', @p_u8=&(0x7f0000000080)}}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'batadv_slave_1\x00', {}, 0x1}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000008c0)={0x0, 'bond0\x00', {0x10000003}, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) 9m10.719305116s ago: executing program 6 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kexec_load(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) 8m54.550043139s ago: executing program 34 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kexec_load(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) 2m56.128008932s ago: executing program 7 (id=1522): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f0000000140)='./file0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044102, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x800008ec0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 2m52.409416289s ago: executing program 7 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m49.701205098s ago: executing program 7 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r3 = io_uring_setup(0x2507, &(0x7f0000000180)={0x0, 0x9fa1, 0x2, 0x2, 0x2000297}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000b72000/0x2000)=nil, 0x2000, 0x100000a, 0x5d031, r3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x9, 0x300) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000010000000"]) userfaultfd(0x40001) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8000, &(0x7f00000002c0)='(\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 2m48.5049943s ago: executing program 7 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r4, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) 2m44.840845278s ago: executing program 7 (id=1538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) 2m42.344522986s ago: executing program 7 (id=1542): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "ff0f00000000000600a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x19, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 2m26.041329772s ago: executing program 35 (id=1542): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "ff0f00000000000600a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x19, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 1m41.464204196s ago: executing program 3 (id=1631): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000140)={0x4, 0x0, 0x7, 0x6, 0xc, 0x8000000000000001}) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 1m37.956644846s ago: executing program 3 (id=1634): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 1m32.43786686s ago: executing program 3 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) 1m30.716330099s ago: executing program 3 (id=1645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x60) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000008a00e97803000000ffdbdf250a0000000000000018000500", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setfsgid(0xee01) 1m28.595965457s ago: executing program 3 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 1m25.947161532s ago: executing program 3 (id=1653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1m9.016186664s ago: executing program 36 (id=1653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 29.45358774s ago: executing program 4 (id=1741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x2a020400) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000000), 0x0, 0x4b5, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r2, 0x0, 0x0, 0x10000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0xe154}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r9, 0x0, 0x0, 0x0) 25.859985061s ago: executing program 4 (id=1747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) accept(r2, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='u\x80\x05fs\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x9008) 23.055196225s ago: executing program 4 (id=1751): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndpcmp(0x0, 0x1ff, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001440)={0xa00000, 0x1ff, 0xc, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091b, 0x5, '\x00', @value64=0xc}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x2022}) 20.759400288s ago: executing program 5 (id=1757): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) socket(0x840000000002, 0x3, 0x100) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 18.64257606s ago: executing program 8 (id=1760): mount(0x0, 0x0, &(0x7f0000000080)='devpts\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104070000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a00010048"], 0x48}}, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000a00), 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 16.833644029s ago: executing program 8 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) accept(r2, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='u\x80\x05fs\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x9008) 13.631176907s ago: executing program 2 (id=1762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) accept(r2, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='u\x80\x05fs\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x9008) 13.548745654s ago: executing program 5 (id=1764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000440)=[{&(0x7f0000002680)="1e", 0x1}, {0x0}], 0x2) 12.991058079s ago: executing program 9 (id=1765): getpgrp(0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001, 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002c810) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f00000101c0)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b0, &(0x7f0000000080)={0x0}) 12.907977552s ago: executing program 4 (id=1766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="17000000020001004003be8c5e687a8a6a0047cc020100ecff3f00000003a96c6b06169da9c0f8d94d0c18f6d625d05725ca6a880a00243cff0afc5e0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df018000000300000000feff000088c457681f009cee4a04000000010000b7315033bf79ac2df5bc080236e2b611424bdb8c8eec25a02aff06011500000000010000000affff02dfcc5800000000002175bb039cc84d5c705b0200", 0xb0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.759327311s ago: executing program 2 (id=1767): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f00000010c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000500)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) brk(0x20ffc000) 10.659460394s ago: executing program 9 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x2, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x82, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000001500000076e20000bf9800000000000056080000000000008500000007000000b700000000000000950000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.53855406s ago: executing program 5 (id=1769): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndpcmp(0x0, 0x1ff, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001440)={0xa00000, 0x1ff, 0xc, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091b, 0x5, '\x00', @value64=0xc}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x2022}) 10.510470358s ago: executing program 8 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x10, 0x2, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 8.849771388s ago: executing program 2 (id=1771): r0 = socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180)="5f4a57db02b4002de7000008a8b000", 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1507b6e901b9ff2f518c78042fb54238010880e800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cc000098028000080060001000a000000140002000000000005000300000000001c000080060001"], 0x184}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f0000000140)=""/48, 0x30) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 8.715609364s ago: executing program 9 (id=1772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 8.272148359s ago: executing program 5 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0xfbff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2) 5.756680294s ago: executing program 9 (id=1774): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) socket(0x840000000002, 0x3, 0x100) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 4.694863739s ago: executing program 5 (id=1775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) 4.568098698s ago: executing program 2 (id=1776): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndpcmp(0x0, 0x1ff, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001440)={0xa00000, 0x1ff, 0xc, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091b, 0x5, '\x00', @value64=0xc}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x2, 0x1}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x2022}) 4.512203539s ago: executing program 8 (id=1777): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='hrtimer_expire_entry\x00', r3}, 0xffffff7c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1f, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) eventfd(0x100) read$alg(0xffffffffffffffff, &(0x7f00000001c0)=""/68, 0x44) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.47251419s ago: executing program 4 (id=1778): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x0) 2.46965642s ago: executing program 9 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000440)=[{&(0x7f0000002680)="1e", 0x1}, {0x0}], 0x2) 2.177482295s ago: executing program 4 (id=1780): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair(0x22, 0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000000c0)=0x40) ppoll(&(0x7f0000000100)=[{r4}, {r4}], 0x2, &(0x7f0000000180), 0x0, 0x0) 2.15991681s ago: executing program 8 (id=1781): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) io_uring_setup(0x6112, &(0x7f00000008c0)={0x0, 0x9e9, 0x829, 0x0, 0x234}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 1.895679833s ago: executing program 2 (id=1782): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f0000001200)=0x7, 0x0, 0x1, 0x81, 0x9, 0x7, 0x24, 0x7ff}}], 0x58}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000004e3000006000000030000042c0500000200000004000000050a00000700000604000000fdffffff010000000100000036c7000000000000060000060400000015000000ff070000"], &(0x7f0000000b00)=""/178, 0x88, 0xb2, 0x1, 0x9, 0x0, @void, @value}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newtaction={0x74, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x5c, 0x1, [@m_xt={0x58, 0x0, 0x0, 0x0, {{0x7}, {0x71, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x45c) dup(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x36c, 0x2) 288.55518ms ago: executing program 2 (id=1783): syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010"], 0x24}], 0x1}, 0x0) 172.725428ms ago: executing program 8 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x0) 64.856836ms ago: executing program 9 (id=1785): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, 0x0, &(0x7f0000000580)=r5}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/210, 0xd2}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0xb, 0x4, 0x210, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x4, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 5 (id=1786): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$tipc(0x1e, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): a55/0x1540 [ 82.591218][ T5822] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 82.596518][ T5822] ? __pfx_hci_event_packet+0x10/0x10 [ 82.601891][ T5822] ? do_raw_spin_unlock+0x13c/0x8b0 [ 82.607101][ T5822] ? hci_send_to_monitor+0xd8/0x7f0 [ 82.612297][ T5822] ? kcov_remote_start+0x97/0x7d0 [ 82.617324][ T5822] hci_rx_work+0x3f3/0xdb0 [ 82.621752][ T5822] ? process_scheduled_works+0x976/0x1840 [ 82.627474][ T5822] process_scheduled_works+0xa66/0x1840 [ 82.633049][ T5822] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.639042][ T5822] ? assign_work+0x364/0x3d0 [ 82.643642][ T5822] worker_thread+0x870/0xd30 [ 82.648244][ T5822] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 82.654147][ T5822] ? __kthread_parkme+0x169/0x1d0 [ 82.659232][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 82.664341][ T5822] kthread+0x2f0/0x390 [ 82.668411][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 82.673520][ T5822] ? __pfx_kthread+0x10/0x10 [ 82.678112][ T5822] ret_from_fork+0x4b/0x80 [ 82.682530][ T5822] ? __pfx_kthread+0x10/0x10 [ 82.687123][ T5822] ret_from_fork_asm+0x1a/0x30 [ 82.691911][ T5822] [ 82.695376][ T5822] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.700585][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 82.711089][ T5822] Bluetooth: hci4: failed to register connection device [ 82.762230][ T6076] ======================================================= [ 82.762230][ T6076] WARNING: The mand mount option has been deprecated and [ 82.762230][ T6076] and is ignored by this kernel. Remove the mand [ 82.762230][ T6076] option from the mount to silence this warning. [ 82.762230][ T6076] ======================================================= [ 82.853560][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.893712][ T5870] usb 5-1: config 0 has no interfaces? [ 83.019489][ T5870] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 83.028843][ T5870] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 83.039539][ T5870] usb 5-1: Product: syz [ 83.715089][ T5870] usb 5-1: Manufacturer: syz [ 83.719825][ T5870] usb 5-1: SerialNumber: syz [ 83.730362][ T29] audit: type=1326 audit(1734898260.147:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6070 comm="syz.2.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x0 [ 83.935531][ T5824] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.971240][ T5870] usb 5-1: config 0 descriptor?? [ 83.977081][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 83.990833][ T5870] usb 5-1: can't set config #0, error -32 [ 84.032974][ T5870] usb 5-1: USB disconnect, device number 2 [ 84.050759][ T6072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.070937][ T6072] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 84.159909][ T5824] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 84.172753][ T5824] usb 2-1: config 0 has no interface number 0 [ 84.198827][ T5824] usb 2-1: config 0 interface 222 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 84.267838][ T5824] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 84.272564][ T6072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.290728][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.306907][ T5824] usb 2-1: Product: syz [ 84.311824][ T5824] usb 2-1: Manufacturer: syz [ 84.316469][ T5824] usb 2-1: SerialNumber: syz [ 84.330265][ T5824] usb 2-1: config 0 descriptor?? [ 84.369618][ T6072] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 84.433021][ T6072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.450160][ T6072] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.581336][ T6072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.593692][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.635513][ T6072] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 84.659162][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.732793][ T5824] usb 2-1: USB disconnect, device number 3 [ 84.823469][ T6072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 84.891578][ T6072] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 86.694014][ T6126] omfs: Invalid superblock (0) [ 87.180307][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 88.387669][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.925179][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.992936][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.744418][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 93.049546][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 93.458735][ T6187] kvm: kvm [6186]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 93.563161][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.811732][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.824273][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.070285][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.096545][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.104864][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.307985][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.316014][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.325711][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.340098][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.347429][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.354919][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.886400][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.199227][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.176657][ T55] Bluetooth: hci3: command tx timeout [ 99.245990][ T6190] chnl_net:caif_netlink_parms(): no params data found [ 99.661702][ T55] Bluetooth: hci3: command tx timeout [ 99.803037][ T68] bridge_slave_1: left allmulticast mode [ 99.809108][ T68] bridge_slave_1: left promiscuous mode [ 99.829028][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.795580][ T6274] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.821962][ T6274] CIFS mount error: No usable UNC path provided in device string! [ 100.821962][ T6274] [ 100.832351][ T6274] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.555640][ T68] bridge_slave_0: left allmulticast mode [ 101.630174][ T68] bridge_slave_0: left promiscuous mode [ 101.676064][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.736911][ T55] Bluetooth: hci3: command tx timeout [ 103.866534][ T55] Bluetooth: hci3: command tx timeout [ 104.407010][ T5870] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.514837][ T5870] usb 1-1: config 2 has an invalid interface number: 186 but max is 0 [ 105.871619][ T5870] usb 1-1: config 2 has no interface number 0 [ 105.886134][ T5870] usb 1-1: config 2 interface 186 has no altsetting 0 [ 106.176428][ T5870] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 106.189793][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.198327][ T5870] usb 1-1: Product: syz [ 106.207247][ T5870] usb 1-1: Manufacturer: syz [ 106.212356][ T5870] usb 1-1: SerialNumber: syz [ 108.208726][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.260383][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.312588][ T68] bond0 (unregistering): Released all slaves [ 108.428476][ T5870] catc 1-1:2.186: Can't set altsetting 1. [ 108.446150][ T5870] catc 1-1:2.186: probe with driver catc failed with error -5 [ 108.470034][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.520227][ T5870] usb 1-1: USB disconnect, device number 2 [ 108.799632][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 108.809665][ T25] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 108.819364][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.827822][ T25] usb 4-1: Product: syz [ 108.832959][ T25] usb 4-1: Manufacturer: syz [ 108.837590][ T25] usb 4-1: SerialNumber: syz [ 109.052498][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.060700][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.068151][ T25] aqc111 4-1:1.0: probe with driver aqc111 failed with error -22 [ 109.079552][ T6190] bridge_slave_0: entered allmulticast mode [ 109.092658][ T6190] bridge_slave_0: entered promiscuous mode [ 109.167717][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.192844][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.212582][ T6190] bridge_slave_1: entered allmulticast mode [ 109.232756][ T6190] bridge_slave_1: entered promiscuous mode [ 109.313929][ T6376] 9pnet_fd: Insufficient options for proto=fd [ 109.644840][ T25] usb 4-1: USB disconnect, device number 2 [ 109.736627][ T29] audit: type=1800 audit(1734898286.907:3): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.99" name="/" dev="9p" ino=2 res=0 errno=0 [ 109.769026][ T6381] syz.0.99 (6381) used greatest stack depth: 18032 bytes left [ 109.815604][ T68] hsr_slave_0: left promiscuous mode [ 109.826576][ T68] hsr_slave_1: left promiscuous mode [ 109.885078][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.903093][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.990276][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.997777][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.102454][ T68] veth1_macvtap: left promiscuous mode [ 110.146590][ T68] veth0_macvtap: left promiscuous mode [ 110.223560][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.232264][ T68] veth1_vlan: left promiscuous mode [ 110.238751][ T68] veth0_vlan: left promiscuous mode [ 110.390144][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 110.406925][ T5867] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 110.416476][ T5867] usb 3-1: config 0 has no interface number 0 [ 110.586392][ T5867] usb 3-1: config 0 interface 12 has no altsetting 0 [ 111.059650][ T5867] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 111.068764][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.140140][ T5867] usb 3-1: Product: syz [ 111.179597][ T5867] usb 3-1: Manufacturer: syz [ 111.184362][ T5867] usb 3-1: SerialNumber: syz [ 111.263609][ T5867] usb 3-1: config 0 descriptor?? [ 112.799694][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.042657][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.053880][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.063267][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.078265][ T6405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 113.135749][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.642564][ T25] usb 4-1: USB disconnect, device number 3 [ 113.921658][ T6217] udevd[6217]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.026141][ T68] team0 (unregistering): Port device team_slave_1 removed [ 114.099066][ T68] team0 (unregistering): Port device team_slave_0 removed [ 114.815649][ T5867] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 114.824120][ T5867] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.837326][ T5867] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 114.845085][ T5867] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 114.871831][ T5867] usb 3-1: USB disconnect, device number 2 [ 116.163952][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.197510][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.947252][ T6190] team0: Port device team_slave_0 added [ 116.968744][ T6190] team0: Port device team_slave_1 added [ 117.045582][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.065904][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.181372][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.196061][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.203112][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.229291][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.710112][ T6454] 9pnet: bogus RREAD count (69 > 41) [ 118.753528][ T6190] hsr_slave_0: entered promiscuous mode [ 118.779856][ T29] audit: type=1800 audit(1734898295.957:4): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.120" name="/" dev="9p" ino=2 res=0 errno=0 [ 118.864046][ T6190] hsr_slave_1: entered promiscuous mode [ 118.905218][ T6190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.935002][ T6190] Cannot create hsr debugfs directory [ 120.355703][ T6477] overlay: Unknown parameter '' [ 122.247499][ T6190] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.274275][ T6190] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.329309][ T6190] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.346872][ T6190] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.354988][ T6499] xt_hashlimit: size too large, truncated to 1048576 [ 122.362049][ T6499] xt_hashlimit: max too large, truncated to 1048576 [ 122.949636][ T6502] infiniband syz2: set active [ 122.954749][ T6502] infiniband syz2: added team_slave_1 [ 123.250175][ T6502] RDS/IB: syz2: added [ 123.254904][ T6502] smc: adding ib device syz2 with port count 1 [ 123.261584][ T6502] smc: ib device syz2 port 1 has pnetid [ 123.360782][ T6508] binder: BINDER_SET_CONTEXT_MGR already set [ 123.367038][ T6508] binder: 6507:6508 ioctl 4018620d 200002c0 returned -16 [ 123.398470][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.415384][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.448382][ T6190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.459552][ T6190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.485841][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.487789][ T29] audit: type=1326 audit(1734898300.627:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.0.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1bb85d29 code=0x0 [ 123.493004][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.496055][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.528805][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.711651][ T6521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.039852][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.626753][ T6560] Zero length message leads to an empty skb [ 128.450876][ T6565] hub 9-0:1.0: USB hub found [ 128.459654][ T6565] hub 9-0:1.0: 1 port detected [ 129.728112][ T6190] veth0_vlan: entered promiscuous mode [ 129.747095][ T6190] veth1_vlan: entered promiscuous mode [ 129.785183][ T6190] veth0_macvtap: entered promiscuous mode [ 130.268846][ T6582] binder_alloc: 6579: binder_alloc_buf, no vma [ 130.747219][ T6190] veth1_macvtap: entered promiscuous mode [ 130.771794][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.784708][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.429592][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.478919][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.569322][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.588948][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.616662][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.634322][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.661960][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.661064][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.349256][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.359530][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.376521][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.438245][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.537668][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.565601][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.579927][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.590379][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.601383][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.628174][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.798049][ T6616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.600917][ T6190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.709682][ T6190] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.789754][ T6190] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.810639][ T6190] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.915797][ T29] audit: type=1326 audit(1734898313.087:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6630 comm="syz.3.152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf69185d29 code=0x0 [ 137.758173][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.768911][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.147457][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.167808][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.410291][ T6669] binder: 6666:6669 ioctl c0306201 20000680 returned -14 [ 140.730805][ T6674] CIFS: VFS: Malformed UNC in devname [ 141.339751][ T6687] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 144.500654][ T52] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.609068][ T29] audit: type=1804 audit(1734898321.777:7): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.166" name="/newroot/43/bus/bus" dev="overlay" ino=274 res=1 errno=0 [ 144.660000][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 144.740484][ T52] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.778509][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.848939][ T52] usb 6-1: Product: syz [ 144.899855][ T52] usb 6-1: Manufacturer: syz [ 144.933696][ T52] usb 6-1: SerialNumber: syz [ 144.963359][ T52] usb 6-1: config 0 descriptor?? [ 145.262679][ T52] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.054957][ T6743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.074029][ T5868] hid (null): unknown global tag 0xd [ 147.091526][ T5868] hid (null): invalid report_count -437012996 [ 147.099551][ T5868] hid (null): unknown global tag 0xd [ 147.112899][ T52] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 147.145203][ T52] usb 6-1: USB disconnect, device number 2 [ 147.169236][ T5868] hid-generic 0081:0000:0006.0001: unexpected long global item [ 147.185845][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.207715][ T5868] hid-generic 0081:0000:0006.0001: probe with driver hid-generic failed with error -22 [ 148.330838][ T6764] random: crng reseeded on system resumption [ 153.671358][ T6812] serio: Serial port ptm0 [ 155.657843][ T6832] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 157.109335][ T55] Bluetooth: hci3: link tx timeout [ 157.114929][ T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.947965][ T6857] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 159.223983][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 159.261412][ T6859] netlink: 'syz.2.199': attribute type 32 has an invalid length. [ 159.399667][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 159.408686][ T6859] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 159.425131][ T6868] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.678503][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 161.239112][ T6888] overlayfs: failed to get inode (-116) [ 161.246326][ T6888] overlayfs: failed to get inode (-116) [ 162.581227][ T6902] hub 6-0:1.0: USB hub found [ 162.587378][ T6902] hub 6-0:1.0: 1 port detected [ 163.446191][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 163.473412][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 163.507695][ T6911] process 'syz.0.213' launched './file1' with NULL argv: empty string added [ 163.517194][ T29] audit: type=1326 audit(1734898340.667:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.3.214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf69185d29 code=0x0 [ 163.590237][ T6912] Bluetooth: MGMT ver 1.23 [ 169.362217][ T6960] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 175.096757][ T7005] binder: 7003:7005 ioctl c0306201 20000140 returned -14 [ 179.798080][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 179.949660][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 181.829931][ T7062] evm: overlay not supported [ 183.713042][ T7081] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 184.662006][ T7092] pim6reg: entered allmulticast mode [ 184.708644][ T7096] pim6reg: left allmulticast mode [ 187.039914][ T7118] input: syz0 as /devices/virtual/input/input5 [ 187.249545][ T7118] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 187.265581][ T7118] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.267'. [ 188.414614][ T7135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.979238][ T7123] team_slave_0: entered promiscuous mode [ 188.985347][ T7123] team_slave_1: entered promiscuous mode [ 189.084053][ T7123] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.173512][ T7123] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 189.378191][ T7142] syz.0.273 (7142): attempted to duplicate a private mapping with mremap. This is not supported. [ 190.624378][ T7128] bond0: entered promiscuous mode [ 190.635237][ T7128] bond_slave_0: entered promiscuous mode [ 190.645496][ T7128] bond_slave_1: entered promiscuous mode [ 190.672439][ T7128] macvlan2: entered promiscuous mode [ 190.769906][ T7128] team0: entered promiscuous mode [ 192.056748][ T7156] kvm: kvm [7151]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86 [ 192.071067][ T7156] kvm: kvm [7151]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe8 [ 192.249501][ T7162] input: syz0 as /devices/virtual/input/input6 [ 192.297672][ T7156] kvm: kvm [7151]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x876 [ 192.421098][ T7156] kvm: kvm [7151]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8da [ 194.057085][ T5868] IPVS: starting estimator thread 0... [ 195.179880][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.188732][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.395504][ T7173] IPVS: using max 21 ests per chain, 50400 per kthread [ 198.964604][ T7201] xt_cgroup: xt_cgroup: no path or classid specified [ 200.230413][ T7203] team0 (unregistering): left promiscuous mode [ 200.245234][ T7203] team_slave_0: left promiscuous mode [ 200.266124][ T7203] team_slave_1: left promiscuous mode [ 200.430795][ T7203] bond0: (slave macvlan2): Releasing backup interface [ 200.503134][ T7203] macvlan2 (unregistering): left promiscuous mode [ 200.661150][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 200.699105][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 201.850993][ T7229] o2cb: This node has not been configured. [ 201.857118][ T7229] o2cb: Cluster check failed. Fix errors before retrying. [ 201.864412][ T7229] (syz.2.295,7229,1):user_dlm_register:674 ERROR: status = -22 [ 201.872021][ T7229] (syz.2.295,7229,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 208.431604][ T7265] TCP: out of memory -- consider tuning tcp_mem [ 209.482842][ T29] audit: type=1326 audit(1734898385.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff145385d29 code=0x7ffc0000 [ 209.575316][ T29] audit: type=1326 audit(1734898385.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff145385d29 code=0x7ffc0000 [ 209.653186][ T29] audit: type=1326 audit(1734898385.995:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff145384690 code=0x7ffc0000 [ 209.736813][ T29] audit: type=1326 audit(1734898385.995:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff145385d29 code=0x7ffc0000 [ 209.885973][ T29] audit: type=1326 audit(1734898386.033:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff145385d29 code=0x7ffc0000 [ 209.909289][ T29] audit: type=1326 audit(1734898386.033:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff145385d29 code=0x7ffc0000 [ 213.924298][ T52] IPVS: starting estimator thread 0... [ 214.978685][ T7327] IPVS: using max 23 ests per chain, 55200 per kthread [ 218.774660][ T7367] random: crng reseeded on system resumption [ 220.134899][ T9] IPVS: starting estimator thread 0... [ 220.239492][ T7381] IPVS: using max 26 ests per chain, 62400 per kthread [ 223.847895][ T55] block nbd3: Receive control failed (result -32) [ 223.854660][ T5822] block nbd3: Receive control failed (result -32) [ 223.920050][ T7412] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 223.934000][ T7412] VFS: Can't find a romfs filesystem on dev nullb0. [ 223.934000][ T7412] [ 224.669305][ T7397] block nbd3: shutting down sockets [ 228.758016][ T5867] IPVS: starting estimator thread 0... [ 228.982692][ T7441] IPVS: using max 23 ests per chain, 55200 per kthread [ 246.738606][ T7549] capability: warning: `syz.4.382' uses deprecated v2 capabilities in a way that may be insecure [ 249.120740][ T7578] trusted_key: encrypted_key: insufficient parameters specified [ 250.699001][ T7586] x_tables: unsorted entry at hook 3 [ 250.769799][ T55] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 250.778100][ T55] Bluetooth: Wrong link type (-22) [ 250.783786][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 250.790407][ T55] Bluetooth: Wrong link type (-22) [ 250.796007][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 250.808915][ T55] Bluetooth: Wrong link type (-22) [ 250.814378][ T55] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 250.820975][ T55] Bluetooth: Wrong link type (-22) [ 250.926922][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.964901][ T7589] mkiss: ax0: crc mode is auto. [ 251.055277][ T7597] hub 9-0:1.0: USB hub found [ 251.061419][ T7597] hub 9-0:1.0: 1 port detected [ 259.881421][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.902532][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.247059][ T7723] netlink: 'syz.3.425': attribute type 10 has an invalid length. [ 266.326622][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.353365][ T7723] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 269.060581][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.136536][ T5867] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 270.217401][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 270.224184][ T5867] usb 6-1: config 0 has no interfaces? [ 270.231571][ T5867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.252296][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.384378][ T5867] usb 6-1: config 0 descriptor?? [ 271.318737][ T29] audit: type=1326 audit(1734898443.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7759 comm="syz.4.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff145385d29 code=0x0 [ 271.339551][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.970489][ T5867] usb 6-1: USB disconnect, device number 3 [ 273.105252][ T7788] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 273.203949][ T7788] kvm: pic: non byte read [ 273.217635][ T7788] kvm: pic: level sensitive irq not supported [ 273.219027][ T7788] kvm: pic: non byte read [ 273.231319][ T7788] kvm: pic: level sensitive irq not supported [ 273.231387][ T7788] kvm: pic: non byte read [ 273.242399][ T7788] kvm: pic: level sensitive irq not supported [ 273.242502][ T7788] kvm: pic: non byte read [ 276.130132][ T7817] netlink: 32 bytes leftover after parsing attributes in process `syz.5.452'. [ 277.695324][ T7823] netlink: 'syz.2.457': attribute type 29 has an invalid length. [ 277.740139][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 278.390316][ T7840] bond_slave_0: entered promiscuous mode [ 278.396514][ T7840] bond_slave_1: entered promiscuous mode [ 279.344821][ T7840] bond_slave_0: left promiscuous mode [ 279.350383][ T7840] bond_slave_1: left promiscuous mode [ 281.142065][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 284.136348][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 285.936154][ T29] audit: type=1800 audit(1734898457.479:16): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.475" name="/" dev="9p" ino=2 res=0 errno=0 [ 288.387912][ T7912] netlink: 344 bytes leftover after parsing attributes in process `syz.5.480'. [ 289.351097][ T7918] netlink: 'syz.0.482': attribute type 4 has an invalid length. [ 289.386253][ T7918] netlink: 'syz.0.482': attribute type 4 has an invalid length. [ 289.605778][ T7927] @ÿ: renamed from bond_slave_0 (while UP) [ 293.925811][ T7958] fuse: Unknown parameter '0x0000000000000006' [ 295.982283][ T7985] ip6t_srh: unknown srh match flags 4000 [ 302.773626][ T8044] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 303.466609][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 303.513066][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 304.534969][ T8068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.628577][ T55] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 309.065043][ T8110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.091775][ T8110] netlink: 'syz.5.535': attribute type 10 has an invalid length. [ 310.524262][ T8110] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 312.884679][ T8148] : renamed from bond0 (while UP) [ 313.371017][ T8155] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 317.938438][ T8182] Bluetooth: MGMT ver 1.23 [ 318.989475][ T8208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.305856][ T55] Bluetooth: hci3: link tx timeout [ 320.311090][ T55] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 322.771306][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 324.091725][ T29] audit: type=1326 audit(1734898492.771:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.0.563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1bb85d29 code=0x0 [ 325.366777][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.569'. [ 325.375824][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.569'. [ 325.385080][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.569'. [ 325.394477][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.569'. [ 325.928970][ T8257] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 325.938635][ T8257] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 326.503026][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.509665][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.035096][ T8315] Illegal XDP return value 4294967274 on prog (id 156) dev N/A, expect packet loss! [ 334.152651][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.582'. [ 334.162032][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.582'. [ 334.171236][ T8355] netlink: 4100 bytes leftover after parsing attributes in process `syz.5.582'. [ 334.540851][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 334.550220][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 334.671119][ T8369] dummy0: entered promiscuous mode [ 334.747922][ T8369] bond0: entered promiscuous mode [ 334.788419][ T8369] bond_slave_0: entered promiscuous mode [ 334.794455][ T8369] bond_slave_1: entered promiscuous mode [ 334.805183][ T8369] batadv0: entered promiscuous mode [ 334.940830][ T8374] x_tables: unsorted underflow at hook 3 [ 334.949809][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 335.737437][ T8387] syz.2.593 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 336.827727][ T8388] tipc: Started in network mode [ 336.833496][ T8388] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 338.055285][ T8388] tipc: Enabled bearer , priority 0 [ 339.320804][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 339.329578][ T5868] tipc: Node number set to 11578026 [ 349.279846][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 349.290095][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 349.299511][ T8477] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.615'. [ 349.535411][ T8482] vlan2: entered promiscuous mode [ 350.256988][ T8482] vlan2: entered allmulticast mode [ 350.262177][ T8482] hsr_slave_1: entered allmulticast mode [ 350.309153][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 356.398330][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 356.407550][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 356.417213][ T8535] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.632'. [ 359.354544][ T8554] Bluetooth: hci5: Frame reassembly failed (-84) [ 363.912744][ T8574] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 366.409058][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.923603][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.062488][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.069955][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.117884][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 373.636398][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 381.576783][ T8739] capability: warning: `syz.5.683' uses 32-bit capabilities (legacy support in use) [ 382.575438][ T5868] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 383.109170][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 383.129388][ T5868] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 383.246270][ T5868] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 383.261354][ T5868] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 383.272524][ T5868] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 383.285712][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 383.305860][ T5868] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 383.315024][ T5868] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 383.323865][ T5868] usb 4-1: Product: syz [ 383.328055][ T5868] usb 4-1: Manufacturer: syz [ 383.332666][ T5868] usb 4-1: SerialNumber: syz [ 383.402373][ T5868] usb 4-1: config 0 descriptor?? [ 383.599549][ T5868] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 383.616349][ T5868] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 384.657936][ T8] usb 4-1: USB disconnect, device number 4 [ 384.688067][ T8] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 385.118450][ T8770] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 385.730872][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.738201][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.835507][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.842727][ T8770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.850262][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.858796][ T8770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.910095][ T8770] bridge0: entered promiscuous mode [ 385.916098][ T8770] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 389.508300][ T8793] netlink: 112 bytes leftover after parsing attributes in process `syz.5.696'. [ 389.638716][ T8797] syz.2.697[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.638824][ T8797] syz.2.697[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.682896][ T8797] syz.2.697[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.806714][ T8811] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 390.884804][ T8812] warning: `syz.5.699' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 391.434444][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.441335][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.091960][ T8849] kvm: kvm [8848]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 398.957882][ T8907] bond0: option all_slaves_active: invalid value (9) [ 400.437786][ T8917] xt_bpf: check failed: parse error [ 400.454264][ T8917] syz.2.715: attempt to access beyond end of device [ 400.454264][ T8917] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 401.133807][ T5824] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 402.555807][ T5824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.587343][ T5824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.788933][ T5824] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.799124][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.807302][ T5824] usb 4-1: Product: syz [ 403.811572][ T5824] usb 4-1: Manufacturer: syz [ 403.816277][ T5824] usb 4-1: SerialNumber: syz [ 404.923309][ T5824] usb 4-1: 0:2 : does not exist [ 404.932313][ T5824] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 407.841967][ T5824] usb 4-1: USB disconnect, device number 5 [ 409.127795][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 409.153489][ T8975] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 419.427990][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.440231][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.463707][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.485155][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.497236][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 419.505405][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.555294][ T9050] chnl_net:caif_netlink_parms(): no params data found [ 421.661485][ T9073] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.756'. [ 421.737495][ T5822] Bluetooth: hci5: command tx timeout [ 422.617073][ T9075] befs: (nbd4): No write support. Marking filesystem read-only [ 422.627869][ T9075] syz.4.755: attempt to access beyond end of device [ 422.627869][ T9075] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 422.640853][ T9075] befs: (nbd4): unable to read superblock [ 422.933588][ T5824] IPVS: starting estimator thread 0... [ 423.070686][ T9076] IPVS: using max 21 ests per chain, 50400 per kthread [ 424.306160][ T5822] Bluetooth: hci5: command tx timeout [ 425.920242][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.927733][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.934987][ T9050] bridge_slave_0: entered allmulticast mode [ 425.943346][ T9050] bridge_slave_0: entered promiscuous mode [ 425.966585][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.861797][ T5822] Bluetooth: hci5: command tx timeout [ 426.870863][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.887323][ T9050] bridge_slave_1: entered allmulticast mode [ 426.904946][ T9050] bridge_slave_1: entered promiscuous mode [ 426.980385][ T9050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.999517][ T9050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.173237][ T9050] team0: Port device team_slave_0 added [ 429.149070][ T5822] Bluetooth: hci5: command tx timeout [ 430.302271][ T9050] team0: Port device team_slave_1 added [ 430.374512][ T9133] ISOFS: Unable to identify CD-ROM format. [ 430.686897][ T9137] binder_alloc: binder_alloc_mmap_handler: 9131 20ffd000-21000000 already mapped failed -16 [ 430.895613][ T9139] vivid-005: disconnect [ 431.349711][ T9134] vivid-005: reconnect [ 431.432710][ T9050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.459381][ T9050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.562561][ T9050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.610498][ T9050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.654826][ T9050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.723598][ T9050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.736001][ T9144] mmap: syz.5.772 (9144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 432.892703][ T9050] hsr_slave_0: entered promiscuous mode [ 432.994336][ T9050] hsr_slave_1: entered promiscuous mode [ 433.010729][ T9050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.042339][ T9050] Cannot create hsr debugfs directory [ 437.577858][ T9174] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 437.584843][ T9174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.594135][ T9174] vhci_hcd vhci_hcd.0: Device attached [ 438.272661][ T9175] vhci_hcd: connection closed [ 438.363096][ T53] vhci_hcd: stop threads [ 438.498787][ T53] vhci_hcd: release socket [ 438.529475][ T53] vhci_hcd: disconnect device [ 438.550755][ T5824] vhci_hcd: vhci_device speed not set [ 439.855822][ T9050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.102936][ T9050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.073644][ T9050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.461378][ T9050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.666271][ T9050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.682539][ T9050] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.713369][ T9050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.723893][ T9050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.743894][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.751095][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.793946][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.801134][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.784260][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 444.244514][ T9050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.004185][ T9249] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 447.013020][ T9249] netlink: 224 bytes leftover after parsing attributes in process `syz.2.796'. [ 448.981366][ T9050] veth0_vlan: entered promiscuous mode [ 449.066958][ T9050] veth1_vlan: entered promiscuous mode [ 449.641394][ T9050] veth0_macvtap: entered promiscuous mode [ 449.756243][ T9050] veth1_macvtap: entered promiscuous mode [ 450.129582][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.323976][ T9263] syz.5.797 (9263): drop_caches: 2 [ 450.374976][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.385906][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.397405][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.410135][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.424764][ T9263] syz.5.797 (9263): drop_caches: 2 [ 450.436035][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.447257][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.463721][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.997651][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 451.449180][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.859114][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.805927][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.815860][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.826542][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.836429][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.945964][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.958449][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.969275][ T9283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 453.171828][ T9283] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 453.207388][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.272516][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.287336][ T9283] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 453.288554][ T9050] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.306163][ T9050] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.314998][ T9050] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.323716][ T9050] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.393163][ T9283] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 454.879138][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.892141][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.750100][ T9309] xt_hashlimit: overflow, try lower: 0/0 [ 455.773348][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.945202][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.229300][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.680812][ T9353] bridge0: port 3(erspan0) entered blocking state [ 462.687321][ T9353] bridge0: port 3(erspan0) entered disabled state [ 462.693924][ T9353] erspan0: entered allmulticast mode [ 462.699868][ T9353] erspan0: entered promiscuous mode [ 464.549477][ T9359] bridge0: port 3(vlan2) entered blocking state [ 464.647878][ T9359] bridge0: port 3(vlan2) entered disabled state [ 464.655848][ T9359] vlan2: entered allmulticast mode [ 464.661701][ T9359] dummy0: entered allmulticast mode [ 464.676696][ T9359] vlan2: entered promiscuous mode [ 465.254429][ T9368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.298728][ T9359] dummy0: entered promiscuous mode [ 465.634423][ T9359] bridge0: port 3(vlan2) entered blocking state [ 465.641261][ T9359] bridge0: port 3(vlan2) entered forwarding state [ 467.214444][ T29] audit: type=1326 audit(1734898627.020:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.5.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7fc00000 [ 468.585046][ T29] audit: type=1326 audit(1734898628.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.5.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a6d185d29 code=0x7fc00000 [ 468.606253][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.847189][ T9418] xt_CT: No such helper "snmp" [ 475.922445][ T9454] IPVS: Scheduler module ip_vs_sip not found [ 476.799282][ T9464] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 479.923787][ T9497] bond_slave_0: entered promiscuous mode [ 479.929541][ T9497] bond_slave_1: entered promiscuous mode [ 479.946992][ T9497] macsec1: entered promiscuous mode [ 479.952259][ T9497] bond0: entered promiscuous mode [ 479.966738][ T9497] macsec1: entered allmulticast mode [ 479.972077][ T9497] bond0: entered allmulticast mode [ 479.987468][ T9497] bond_slave_0: entered allmulticast mode [ 479.993248][ T9497] bond_slave_1: entered allmulticast mode [ 480.066273][ T9497] bond0: left allmulticast mode [ 480.071255][ T9497] bond_slave_0: left allmulticast mode [ 480.077230][ T9497] bond_slave_1: left allmulticast mode [ 480.082861][ T9497] bond0: left promiscuous mode [ 480.099567][ T9497] bond_slave_0: left promiscuous mode [ 480.105084][ T9497] bond_slave_1: left promiscuous mode [ 486.043328][ T9529] tty tty2: ldisc open failed (-12), clearing slot 1 [ 492.519568][ T5871] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 492.845105][ T9584] QAT: Device 7 not found [ 493.358109][ T9587] Mount JFS Failure: -22 [ 493.446567][ T9587] jfs_mount failed w/return code = -22 [ 493.482845][ T9589] input: syz0 as /devices/virtual/input/input8 [ 494.608123][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 494.964956][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 494.975706][ T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 494.984789][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.999200][ T25] usb 4-1: Product: syz [ 495.003485][ T25] usb 4-1: Manufacturer: syz [ 495.008647][ T25] usb 4-1: SerialNumber: syz [ 495.187792][ T25] usb 4-1: config 0 descriptor?? [ 495.321642][ T9607] block nbd6: NBD_DISCONNECT [ 495.411819][ T25] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 495.571510][ T9607] block nbd6: Disconnected due to user request. [ 495.635781][ T25] usb 4-1: Detected FT232H [ 495.705543][ T9607] block nbd6: shutting down sockets [ 495.799205][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 495.806387][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 495.814407][ T25] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 495.826346][ T25] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 495.914627][ T25] usb 4-1: USB disconnect, device number 6 [ 496.119719][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 496.129526][ T25] ftdi_sio 4-1:0.0: device disconnected [ 498.216128][ T9620] vlan5: entered promiscuous mode [ 498.222494][ T9620] dummy0: entered promiscuous mode [ 498.235625][ T9620] team0: Port device vlan5 added [ 499.573104][ T9631] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 504.511070][ T9658] vlan2: entered promiscuous mode [ 504.539659][ T9658] vlan2: entered allmulticast mode [ 504.556409][ T9658] hsr_slave_1: entered allmulticast mode [ 505.127547][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 505.653630][ T9673] syz.5.897: attempt to access beyond end of device [ 505.653630][ T9673] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 505.753516][ T9673] smc: removing ib device syz2 [ 505.806360][ T9663] hsr_slave_1 (unregistering): left allmulticast mode [ 505.849626][ T9663] hsr_slave_1 (unregistering): left promiscuous mode [ 507.858317][ T29] audit: type=1326 audit(1734898665.109:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 507.879638][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.976067][ T29] audit: type=1326 audit(1734898665.203:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 508.072481][ T29] audit: type=1326 audit(1734898665.203:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 508.094125][ T29] audit: type=1326 audit(1734898665.203:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 508.115694][ T29] audit: type=1326 audit(1734898665.203:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 509.049034][ T29] audit: type=1326 audit(1734898665.203:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 509.076972][ T29] audit: type=1326 audit(1734898665.203:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 509.099116][ T29] audit: type=1326 audit(1734898665.203:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 509.153545][ T29] audit: type=1326 audit(1734898665.203:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 509.202764][ T29] audit: type=1326 audit(1734898665.203:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 515.898097][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.956540][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.987375][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 516.017654][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.096767][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.154547][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 516.179176][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.828497][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.675670][ T5822] Bluetooth: hci0: command tx timeout [ 521.477866][ T5822] Bluetooth: hci0: command tx timeout [ 522.672617][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.909127][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.781721][ T55] Bluetooth: hci0: command tx timeout [ 525.630597][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.470886][ T5822] Bluetooth: hci0: command tx timeout [ 527.662829][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.682937][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 528.004494][ T9819] futex_wake_op: syz.3.929 tries to shift op by -1; fix this program [ 528.369712][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.454098][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.472258][ T9738] bridge_slave_0: entered allmulticast mode [ 528.479783][ T9738] bridge_slave_0: entered promiscuous mode [ 528.515274][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.566443][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.584809][ T9738] bridge_slave_1: entered allmulticast mode [ 528.598905][ T9738] bridge_slave_1: entered promiscuous mode [ 530.028146][ T9826] Invalid source name [ 530.664139][ T11] vlan2: left allmulticast mode [ 530.669259][ T11] dummy0: left allmulticast mode [ 530.681417][ T11] vlan2: left promiscuous mode [ 530.691741][ T11] dummy0: left promiscuous mode [ 530.767675][ T11] bridge0: port 3(vlan2) entered disabled state [ 530.784188][ T11] bridge_slave_1: left allmulticast mode [ 530.797907][ T11] bridge_slave_1: left promiscuous mode [ 531.526902][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.587851][ T11] bridge_slave_0: left allmulticast mode [ 531.596137][ T11] bridge_slave_0: left promiscuous mode [ 531.606511][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.556556][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 539.364433][ T9881] syz.4.945: attempt to access beyond end of device [ 539.364433][ T9881] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 542.094506][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.128382][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.194547][ T11] bond0 (unregistering): Released all slaves [ 542.230244][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.253415][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.719195][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 543.341501][ T9738] team0: Port device team_slave_0 added [ 543.584345][ T9908] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 543.617040][ T9908] : (slave wlan1): Enslaving as an active interface with an up link [ 543.652057][ T9738] team0: Port device team_slave_1 added [ 543.755579][ T9904] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 544.695618][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.708372][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.787981][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.848115][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.959327][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.283724][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.532092][ T9920] syz.4.954 uses obsolete (PF_INET,SOCK_PACKET) [ 546.705352][ T9738] hsr_slave_0: entered promiscuous mode [ 546.717968][ T9738] hsr_slave_1: entered promiscuous mode [ 546.855894][ T9738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.035769][ T9738] Cannot create hsr debugfs directory [ 547.572254][ T11] hsr_slave_0: left promiscuous mode [ 547.577876][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 547.594208][ T11] hsr_slave_1: left promiscuous mode [ 547.600484][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.615254][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.623600][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.665888][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.728580][ T11] veth1_macvtap: left promiscuous mode [ 547.739353][ T11] veth0_macvtap: left promiscuous mode [ 547.745199][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 547.759700][ T5870] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.776626][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.785020][ T11] veth1_vlan: left promiscuous mode [ 547.795828][ T11] veth0_vlan: left promiscuous mode [ 547.801299][ T5870] usb 6-1: Product: syz [ 547.805486][ T5870] usb 6-1: Manufacturer: syz [ 547.817025][ T5870] usb 6-1: SerialNumber: syz [ 547.840480][ T5870] usb 6-1: config 0 descriptor?? [ 548.104121][ T9939] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 548.113064][ T9939] overlayfs: missing 'lowerdir' [ 548.789837][ T5870] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 550.078821][ T11] team0 (unregistering): Port device team_slave_1 removed [ 550.133549][ T11] team0 (unregistering): Port device team_slave_0 removed [ 550.409509][ T5870] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 550.424679][ T5870] usb 6-1: USB disconnect, device number 6 [ 552.563627][ T9738] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 552.598708][ T9953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 552.605285][ T9953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.613240][ T9953] vhci_hcd vhci_hcd.0: Device attached [ 552.645245][ T9738] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.711623][ T9954] vhci_hcd: connection closed [ 552.733620][ T1032] vhci_hcd: stop threads [ 552.742770][ T1032] vhci_hcd: release socket [ 552.757556][ T1032] vhci_hcd: disconnect device [ 552.795783][ T9738] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 552.814965][ T9738] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 553.055924][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.310899][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.491712][ T9964] Bluetooth: MGMT ver 1.23 [ 553.671312][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.678537][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.218320][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.225575][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.482416][ T9969] openvswitch: netlink: Flow actions attr not present in new flow. [ 554.928084][ T9738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 555.546724][ T9738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.568318][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.297602][ T9994] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 558.305489][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 558.703776][ T9994] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 558.868629][T10019] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 558.876618][T10019] netlink: 56 bytes leftover after parsing attributes in process `syz.4.974'. [ 559.925842][ T9738] veth0_vlan: entered promiscuous mode [ 559.938427][ T9738] veth1_vlan: entered promiscuous mode [ 559.974237][ T9738] veth0_macvtap: entered promiscuous mode [ 559.992912][ T9738] veth1_macvtap: entered promiscuous mode [ 560.157696][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.173422][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.202690][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.217479][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.228191][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.239488][ T5871] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 560.301359][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.393134][T10042] No such timeout policy "syz1" [ 560.873288][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.886288][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.899889][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.923534][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.956047][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.966210][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.126754][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.138063][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.148425][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.199636][ T5871] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.212667][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.223815][ T5871] usb 5-1: Product: syz [ 561.232621][ T5871] usb 5-1: Manufacturer: syz [ 561.240225][ T5871] usb 5-1: SerialNumber: syz [ 561.257658][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.275640][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.359612][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.381799][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.400595][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.674906][ T9738] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.714785][ T9738] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.832324][ T9738] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.198479][ T5871] usb 5-1: 0:2 : does not exist [ 562.231828][ T5871] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 562.354695][ T9738] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.456938][ T5871] usb 5-1: USB disconnect, device number 4 [ 562.664115][ T9177] udevd[9177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.041524][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.050548][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.058101][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.067331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.494204][T10067] xt_hashlimit: max too large, truncated to 1048576 [ 569.744032][T10095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.811592][T10106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.857086][T10106] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 573.166388][T10133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.997'. [ 575.116573][T10138] exFAT-fs (nullb0): invalid boot record signature [ 575.150235][T10138] exFAT-fs (nullb0): failed to read boot sector [ 575.201950][T10140] netlink: 'syz.4.999': attribute type 21 has an invalid length. [ 575.210399][T10140] netlink: 'syz.4.999': attribute type 20 has an invalid length. [ 575.218655][T10140] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.229436][T10138] exFAT-fs (nullb0): failed to recognize exfat type [ 576.391541][T10153] pim6reg: entered allmulticast mode [ 576.422192][T10153] pim6reg: left allmulticast mode [ 576.471093][T10143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 582.108738][ T5824] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 582.350187][T10187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 582.364712][T10187] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 582.426278][ T5824] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 582.629976][T10194] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 582.637000][T10194] PKCS7: Only support pkcs7_signedData type [ 582.824683][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1020'. [ 587.137161][T10227] Smack: duplicate mount options [ 588.548769][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 589.913187][T10250] hub 9-0:1.0: USB hub found [ 589.918764][T10250] hub 9-0:1.0: 1 port detected [ 594.681733][T10272] binder_alloc: 10270: binder_alloc_buf, no vma [ 607.025284][T10351] No source specified [ 609.311263][T10348] binder: BC_ACQUIRE_RESULT not supported [ 609.334325][T10348] binder: 10339:10348 ioctl c0306201 20000480 returned -22 [ 609.679021][T10386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.462423][T10416] netlink: zone id is out of range [ 612.509551][T10409] netlink: 'syz.3.1071': attribute type 10 has an invalid length. [ 612.518026][T10416] netlink: del zone limit has 4 unknown bytes [ 613.342688][T10409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1071'. [ 613.516694][T10409] team0: Port device geneve0 added [ 613.600622][T10416] Falling back ldisc for ttyS3. [ 617.247692][T10469] No source specified [ 618.318758][T10481] usb usb9: usbfs: process 10481 (syz.2.1087) did not claim interface 0 before use [ 619.777077][T10499] netlink: 'syz.5.1092': attribute type 10 has an invalid length. [ 619.785726][T10499] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1092'. [ 620.629535][T10499] team0: Port device geneve0 added [ 621.815694][T10512] binder_alloc: 10511: binder_alloc_buf size 68856 failed, no address space [ 621.824872][T10512] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 622.151612][T10493] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 622.200821][T10518] 9pnet_fd: Insufficient options for proto=fd [ 628.976665][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1110'. [ 629.070172][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1110'. [ 629.310185][T10568] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1110'. [ 631.390279][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 632.433512][ T5822] block nbd4: Receive control failed (result -107) [ 632.460701][T10590] block nbd4: shutting down sockets [ 634.775416][T10618] xt_CONNSECMARK: invalid mode: 0 [ 646.874951][T10695] xt_nat: multiple ranges no longer supported [ 647.230419][T10711] 9pnet_fd: p9_fd_create_unix (10711): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 649.017045][ T55] Bluetooth: hci0: command 0x1407 tx timeout [ 649.358918][ T5822] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 649.493876][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1146'. [ 649.530293][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1146'. [ 649.844896][T10715] batadv0: entered promiscuous mode [ 650.900193][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 650.900214][ T29] audit: type=1326 audit(1734898798.881:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10723 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 651.850501][ T29] audit: type=1326 audit(1734898798.900:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10723 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 651.890577][T10715] dummy0: entered promiscuous mode [ 651.907797][T10715] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 651.927523][ T29] audit: type=1326 audit(1734898798.900:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10723 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 651.968662][T10715] Cannot create hsr debugfs directory [ 652.032617][ T29] audit: type=1326 audit(1734898798.918:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10723 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 652.054267][ T29] audit: type=1326 audit(1734898799.816:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10723 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 655.146584][T10748] syz.3.1154: attempt to access beyond end of device [ 655.146584][T10748] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 655.159953][T10748] hfs: can't find a HFS filesystem on dev loop3 [ 655.579318][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 655.748481][T10751] netlink: 'syz.5.1155': attribute type 10 has an invalid length. [ 655.813740][T10751] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 656.320070][T10759] hub 9-0:1.0: USB hub found [ 656.331645][T10759] hub 9-0:1.0: 1 port detected [ 657.896183][T10766] bond0: left promiscuous mode [ 657.943383][T10766] bond_slave_0: left promiscuous mode [ 657.949119][T10766] bond_slave_1: left promiscuous mode [ 657.956584][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.702677][T10766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.463307][T10794] Invalid source name [ 662.520239][T10800] ubi0: attaching mtd0 [ 662.527287][T10800] ubi0: scanning is finished [ 662.547822][T10800] ubi0: empty MTD device detected [ 663.350243][T10802] Bluetooth: MGMT ver 1.23 [ 664.899038][T10800] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 665.083775][T10800] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 665.116786][T10800] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 665.123797][T10800] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 665.168411][T10800] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 665.179254][T10800] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 665.200851][T10800] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4284467891 [ 665.222452][T10800] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 665.279789][T10815] ubi0: background thread "ubi_bgt0d" started, PID 10815 [ 667.024625][T10833] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 669.205962][T10828] kvm: kvm [10827]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xa00000000 [ 669.301213][T10847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 669.310454][T10847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 672.090328][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1183'. [ 676.916446][T10894] erofs (device erofs): cannot read erofs superblock [ 680.395588][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 680.999444][T10922] kvm: kvm [10919]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xa00000000 [ 681.011334][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 681.042448][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 681.059066][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 681.999041][ T9] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 682.688650][ T9] usb 4-1: string descriptor 0 read error: -71 [ 682.697742][ T9] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=a9.fa [ 682.750160][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.829235][ T9] usb 4-1: config 0 descriptor?? [ 682.836825][ T9] usb 4-1: can't set config #0, error -71 [ 682.852233][ T9] usb 4-1: USB disconnect, device number 7 [ 691.588657][T10989] No source specified [ 698.160758][T11034] 9pnet_fd: Insufficient options for proto=fd [ 700.476323][T11044] Smack: duplicate mount options [ 701.011397][ T55] Bluetooth: hci0: link tx timeout [ 701.018609][ T55] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 703.948588][ T5822] Bluetooth: hci0: command 0x1407 tx timeout [ 705.643984][T11084] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.1238'. [ 705.653435][T11084] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.1238'. [ 705.662721][T11084] netlink: 69 bytes leftover after parsing attributes in process `syz.7.1238'. [ 706.789912][T11084] input: syz0 as /devices/virtual/input/input10 [ 708.423029][T11106] kvm: kvm [11105]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xa00000000 [ 717.758471][ T29] audit: type=1326 audit(1734902956.446:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9010385d29 code=0x7ffc0000 [ 717.779967][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.789694][ T29] audit: type=1326 audit(1734902956.446:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9010385d29 code=0x7ffc0000 [ 717.826469][ T29] audit: type=1326 audit(1734902956.446:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9010385d29 code=0x7ffc0000 [ 717.849937][ T29] audit: type=1326 audit(1734902956.446:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9010385d29 code=0x7ffc0000 [ 717.871762][ T29] audit: type=1326 audit(1734902956.446:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9010384690 code=0x7ffc0000 [ 717.894360][ T29] audit: type=1326 audit(1734902956.446:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9010387557 code=0x7ffc0000 [ 717.916286][ T29] audit: type=1326 audit(1734902956.446:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9010385d29 code=0x7ffc0000 [ 717.937814][ T29] audit: type=1326 audit(1734902956.446:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9010387557 code=0x7ffc0000 [ 717.959485][ T29] audit: type=1326 audit(1734902956.446:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f901038498a code=0x7ffc0000 [ 717.980907][ T29] audit: type=1326 audit(1734902956.446:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.7.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9010385d29 code=0x7ffc0000 [ 719.672945][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.930046][T11184] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 719.946259][T11184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.357572][T11192] hub 9-0:1.0: USB hub found [ 720.373424][T11192] hub 9-0:1.0: 1 port detected [ 721.721168][T11184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.896077][T11184] : (slave batadv_slave_0): Enslaving as an active interface with an up link [ 727.190630][ T5822] Bluetooth: hci0: command 0x1407 tx timeout [ 731.463462][T11273] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1275'. [ 732.300219][T11273] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1275'. [ 748.962025][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 751.423010][T11382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.574343][T11378] Invalid source name [ 752.211810][T11395] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 753.149452][T11382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.863751][T11382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.027897][T11382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.757566][T11382] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.780817][T11382] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.874496][T11382] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.958809][T11382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.655828][T11442] Invalid source name [ 763.946831][T11468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 763.953298][T11468] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.309315][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 764.309335][ T29] audit: type=1326 audit(1734902999.970:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 764.351252][ T29] audit: type=1326 audit(1734902999.970:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 764.450814][ T29] audit: type=1326 audit(1734902999.970:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 764.638516][ T29] audit: type=1326 audit(1734902999.970:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 765.362813][ T29] audit: type=1326 audit(1734902999.970:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 765.683452][ T29] audit: type=1326 audit(1734902999.970:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 766.561879][ T55] Bluetooth: hci0: command 0x1407 tx timeout [ 766.593968][ T29] audit: type=1326 audit(1734902999.970:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 766.955789][ T29] audit: type=1326 audit(1734902999.970:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 766.983662][ T29] audit: type=1326 audit(1734902999.970:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 767.641754][ T29] audit: type=1326 audit(1734902999.970:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11475 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6d184690 code=0x7ffc0000 [ 768.949937][ T55] Bluetooth: hci0: command 0x1407 tx timeout [ 771.084967][T11524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.092960][T11524] IPv6: NLM_F_CREATE should be set when creating new route [ 771.100223][T11524] IPv6: NLM_F_CREATE should be set when creating new route [ 774.004611][T11549] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 775.529371][ C0] hrtimer: interrupt took 44903 ns [ 777.272780][T11586] Invalid logical block size (524288) [ 777.434909][T11583] overlayfs: missing 'lowerdir' [ 778.710866][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 778.710887][ T29] audit: type=1326 audit(1734903013.402:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 778.821945][T11606] tmpfs: Bad value for 'huge' [ 778.846876][T11606] netlink: 'syz.7.1368': attribute type 1 has an invalid length. [ 778.859714][ T29] audit: type=1326 audit(1734903013.402:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 778.902214][T11606] No such timeout policy "syz0" [ 779.239240][ T29] audit: type=1326 audit(1734903013.411:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 779.262408][ T29] audit: type=1326 audit(1734903013.411:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 779.615277][ T29] audit: type=1326 audit(1734903013.411:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 779.741587][ T29] audit: type=1326 audit(1734903013.411:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 780.092541][ T29] audit: type=1326 audit(1734903013.411:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 780.115990][ T29] audit: type=1326 audit(1734903013.411:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 781.104392][ T29] audit: type=1326 audit(1734903013.411:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 781.135544][ T29] audit: type=1326 audit(1734903013.411:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd854385d29 code=0x7ffc0000 [ 781.548393][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 782.823914][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 783.308660][ T5824] usb 3-1: unable to read config index 0 descriptor/all [ 783.316101][ T5824] usb 3-1: can't read configurations, error -71 [ 785.858687][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.266044][T11656] futex_wake_op: syz.7.1380 tries to shift op by 32; fix this program [ 793.190304][T11710] input: syz0 as /devices/virtual/input/input12 [ 796.933431][T11719] Invalid source name [ 797.252282][T11740] overlayfs: failed to resolve './file1': -2 [ 800.351044][T11754] xt_CT: No such helper "syz0" [ 801.891265][T11760] rtc_cmos 00:00: Alarms can be up to one day in the future [ 801.901080][T10721] rtc_cmos 00:00: Alarms can be up to one day in the future [ 801.901313][T10721] rtc_cmos 00:00: Alarms can be up to one day in the future [ 801.901486][T10721] rtc_cmos 00:00: Alarms can be up to one day in the future [ 801.901656][T10721] rtc_cmos 00:00: Alarms can be up to one day in the future [ 801.901667][T10721] rtc rtc0: __rtc_set_alarm: err=-22 [ 806.770054][T11762] tty tty35: ldisc open failed (-12), clearing slot 34 [ 806.875179][T11780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.259574][T11789] No such timeout policy "syz1" [ 810.157644][T11804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 812.941883][T11785] Invalid source name [ 819.509175][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1426'. [ 821.284474][T11845] Invalid source name [ 832.512593][T11968] Invalid source name [ 832.575109][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1447'. [ 837.938311][T12028] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 838.066213][T12026] Invalid source name [ 841.166414][T12057] 9pnet_fd: Insufficient options for proto=fd [ 843.330993][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 843.331016][ T29] audit: type=1326 audit(1734903073.586:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 843.511905][ T29] audit: type=1326 audit(1734903073.586:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 843.535583][ T29] audit: type=1326 audit(1734903073.595:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 843.557054][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.714198][ T29] audit: type=1326 audit(1734903073.595:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 844.794330][ T29] audit: type=1326 audit(1734903073.595:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 844.826168][ T29] audit: type=1326 audit(1734903073.595:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6d184690 code=0x7ffc0000 [ 845.171202][ T29] audit: type=1326 audit(1734903073.707:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 845.243177][ T29] audit: type=1326 audit(1734903073.707:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 845.264779][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.315191][ T29] audit: type=1326 audit(1734903073.707:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 845.336791][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.352012][ T29] audit: type=1326 audit(1734903073.707:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12062 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7ffc0000 [ 845.373576][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.535473][T12086] overlayfs: statfs failed on './file0' [ 846.968251][T12096] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 846.977575][T12096] overlayfs: missing 'lowerdir' [ 849.147137][T12120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1480'. [ 849.156442][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1480'. [ 849.165422][T12120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1480'. [ 849.174593][T12120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1480'. [ 849.237915][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 849.237937][ T29] audit: type=1326 audit(1734903079.404:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12116 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6d185d29 code=0x7fc00000 [ 849.265737][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.329067][ T29] audit: type=1326 audit(1734903079.516:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12116 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a6d17cce7 code=0x7fc00000 [ 849.372220][ T29] audit: type=1326 audit(1734903079.516:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12116 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a6d121f29 code=0x7fc00000 [ 849.394040][ T29] audit: type=1326 audit(1734903079.516:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12116 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6a6d121fef code=0x7fc00000 [ 849.415840][ T29] audit: type=1326 audit(1734903079.516:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12116 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a6d185d29 code=0x7fc00000 [ 851.133873][T12132] No such timeout policy "syz1" [ 851.159041][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.630095][T12136] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[12136] [ 852.093961][T12145] Process accounting resumed [ 857.575485][T12175] (syz.2.1496,12175,1):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 857.593726][T12175] o2cb: This node has not been configured. [ 857.599759][T12175] o2cb: Cluster check failed. Fix errors before retrying. [ 857.607164][T12175] (syz.2.1496,12175,1):user_dlm_register:674 ERROR: status = -22 [ 857.615312][T12175] (syz.2.1496,12175,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 857.933662][T12177] o2cb: This node has not been configured. [ 857.939971][T12177] o2cb: Cluster check failed. Fix errors before retrying. [ 857.949750][T12177] (syz.2.1496,12177,1):user_dlm_register:674 ERROR: status = -22 [ 857.959626][T12177] (syz.2.1496,12177,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 858.472860][T12175] o2cb: This node has not been configured. [ 858.481360][T12175] o2cb: Cluster check failed. Fix errors before retrying. [ 859.079003][T12175] (syz.2.1496,12175,1):user_dlm_register:674 ERROR: status = -22 [ 859.277108][T12192] : renamed from bond0 (while UP) [ 860.368007][T12195] orangefs_mount: mount request failed with -4 [ 860.391636][T12175] (syz.2.1496,12175,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 866.050112][ T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 866.233124][T12243] random: crng reseeded on system resumption [ 866.484753][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.672953][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.007980][ T52] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 867.071962][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 867.603499][T12253] trusted_key: encrypted_key: insufficient parameters specified [ 867.827575][ T52] usb 5-1: SerialNumber: syz [ 869.363541][ T52] usb 5-1: 0:2 : does not exist [ 869.474079][ T52] usb 5-1: USB disconnect, device number 5 [ 869.777841][ T9177] udevd[9177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.230292][T12278] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 870.238823][T12278] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 870.249868][T12278] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 870.257843][T12278] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 870.332584][T12278] netlink: 'syz.7.1519': attribute type 1 has an invalid length. [ 870.340634][T12278] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1519'. [ 871.952603][T12279] 9pnet: Could not find request transport: rdmaÿÿÿÿ18446744073709551615 [ 874.686269][T12312] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 874.694210][T12312] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 874.703888][T12312] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 874.711877][T12312] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 874.774221][T12312] netlink: 'syz.5.1527': attribute type 1 has an invalid length. [ 874.782188][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1527'. [ 880.112039][T12355] bridge0: port 3(erspan0) entered blocking state [ 881.109794][T12355] bridge0: port 3(erspan0) entered disabled state [ 881.120302][T12355] erspan0: entered allmulticast mode [ 881.146431][T12355] erspan0: entered promiscuous mode [ 881.157088][T12355] bridge0: port 3(erspan0) entered blocking state [ 881.163645][T12355] bridge0: port 3(erspan0) entered forwarding state [ 882.802672][T12360] kAFS: unparsable volume name [ 886.907774][T12384] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 890.297224][T12404] batadv_slave_1: entered promiscuous mode [ 891.052829][T12415] bridge0: entered promiscuous mode [ 891.062031][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1546'. [ 891.083064][T12404] bridge_slave_1: left allmulticast mode [ 891.092805][T12404] bridge_slave_1: left promiscuous mode [ 891.156464][T12410] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 891.196441][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.284196][T12404] bridge_slave_0: left allmulticast mode [ 891.290255][T12404] bridge_slave_0: left promiscuous mode [ 891.304918][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.582456][T12401] batadv_slave_1: left promiscuous mode [ 891.793649][T12421] bridge0: port 3(erspan0) entered blocking state [ 891.800185][T12421] bridge0: port 3(erspan0) entered disabled state [ 891.807891][T12421] erspan0: entered allmulticast mode [ 891.814392][T12421] erspan0: entered promiscuous mode [ 891.820013][T12421] bridge0: port 3(erspan0) entered blocking state [ 891.826547][T12421] bridge0: port 3(erspan0) entered forwarding state [ 893.691678][T12429] syz.5.1551 (12429): drop_caches: 2 [ 893.707581][T12429] syz.5.1551 (12429): drop_caches: 2 [ 900.676906][T12456] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 903.346038][T12480] xt_CT: No such helper "pptp" [ 903.989503][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 904.651490][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 904.768916][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 904.783412][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 904.793396][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 904.803533][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.398698][ T55] Bluetooth: hci0: command tx timeout [ 907.861561][T11895] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.612182][ T55] Bluetooth: hci0: command tx timeout [ 910.016001][T11895] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.669930][T11895] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.834854][ T55] Bluetooth: hci0: command tx timeout [ 911.860119][T12492] chnl_net:caif_netlink_parms(): no params data found [ 913.834089][T12562] trusted_key: encrypted_key: insufficient parameters specified [ 914.449733][T11895] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.469009][T12566] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1576'. [ 914.478495][ T55] Bluetooth: hci0: command tx timeout [ 916.870468][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 916.922946][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.945136][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.952431][T12492] bridge_slave_0: entered allmulticast mode [ 916.991516][T12492] bridge_slave_0: entered promiscuous mode [ 917.210353][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.264850][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.339827][T12492] bridge_slave_1: entered allmulticast mode [ 917.604617][T12492] bridge_slave_1: entered promiscuous mode [ 918.052998][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.091726][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.379910][T12492] team0: Port device team_slave_0 added [ 918.409035][T11895] erspan0: left allmulticast mode [ 918.419332][T11895] erspan0: left promiscuous mode [ 918.463170][T11895] bridge0: port 3(erspan0) entered disabled state [ 918.510519][T11895] bridge_slave_1: left allmulticast mode [ 918.516234][T11895] bridge_slave_1: left promiscuous mode [ 918.522645][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.564174][T11895] bridge_slave_0: left allmulticast mode [ 919.478523][T11895] bridge_slave_0: left promiscuous mode [ 919.511072][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.034553][T12630] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 925.059815][T12630] kvm: pic: non byte read [ 925.064847][T12630] kvm: pic: level sensitive irq not supported [ 925.064922][T12630] kvm: pic: non byte read [ 925.076895][T12630] kvm: pic: non byte read [ 925.082209][T12630] kvm: pic: non byte read [ 925.087202][T12630] kvm: pic: non byte read [ 925.092694][T12630] kvm: pic: non byte read [ 925.107293][T12630] kvm: pic: non byte read [ 925.112703][T12630] kvm: pic: non byte read [ 925.117625][T12630] kvm: pic: non byte read [ 925.122478][T12630] kvm: pic: non byte read [ 925.128441][T12630] kvm: pic: single mode not supported [ 925.133085][T11895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.160352][T11895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.175841][T11895] bond0 (unregistering): Released all slaves [ 925.194873][T12492] team0: Port device team_slave_1 added [ 925.403633][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.410647][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.536549][T12641] block nbd3: not configured, cannot reconfigure [ 925.770476][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.970160][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.977395][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.192339][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.595554][T12492] hsr_slave_0: entered promiscuous mode [ 933.622832][T12492] hsr_slave_1: entered promiscuous mode [ 933.657356][T12492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.698997][T12492] Cannot create hsr debugfs directory [ 933.988972][T11895] batadv0: left promiscuous mode [ 934.533220][T12695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1611'. [ 935.025119][T11895] dummy0: left promiscuous mode [ 935.038033][T11895] hsr_slave_0: left promiscuous mode [ 935.038613][T11895] hsr_slave_1: left promiscuous mode [ 935.039333][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.039369][T11895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.040078][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.040106][T11895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.135268][T11895] veth1_macvtap: left promiscuous mode [ 935.135380][T11895] veth0_macvtap: left promiscuous mode [ 935.135502][T11895] veth1_vlan: left promiscuous mode [ 935.135588][T11895] veth0_vlan: left promiscuous mode [ 936.245845][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 936.494513][T12695] tty tty3: ldisc open failed (-12), clearing slot 2 [ 937.412212][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 938.823975][T12705] block nbd5: shutting down sockets [ 944.380460][T11895] team0 (unregistering): Port device team_slave_1 removed [ 944.439145][T11895] team0 (unregistering): Port device team_slave_0 removed [ 945.058807][T12748] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 945.073119][T12748] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 946.512424][T12760] bond0: entered promiscuous mode [ 946.517768][T12760] bond_slave_0: entered promiscuous mode [ 946.524321][T12760] bond_slave_1: entered promiscuous mode [ 949.133435][T12492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 950.113052][T12492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 951.142548][T12492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 953.990515][T12492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 955.777312][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.794735][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.845131][T12492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.857016][T12492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.904961][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.912217][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.935075][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.942221][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.855198][T12819] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 959.384054][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.655910][T12828] syz.2.1644 (12828) used greatest stack depth: 17584 bytes left [ 959.815655][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 960.403406][T12492] veth0_vlan: entered promiscuous mode [ 960.573278][T12868] vxfs: WRONG superblock magic 00000000 at 1 [ 960.580394][T12868] vxfs: WRONG superblock magic 00000000 at 8 [ 960.586516][T12868] vxfs: can't find superblock. [ 961.444569][T12492] veth1_vlan: entered promiscuous mode [ 961.989904][T12492] veth0_macvtap: entered promiscuous mode [ 961.999293][T12492] veth1_macvtap: entered promiscuous mode [ 962.113576][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.124446][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.134386][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.145473][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.155316][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.185018][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.216765][T12492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.227541][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.245255][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.261058][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.276550][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.286529][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.297266][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.307348][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.317981][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.313707][T12492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.344062][T12492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.353703][T12492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.362442][T12492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.371225][T12492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.410550][T11935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.422174][T11935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.527802][T12884] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 964.549201][T11895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.557475][T11895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.204073][T12894] No such timeout policy "syz1" [ 965.288420][T12879] netlink: ct family unspecified [ 965.295724][T12879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.654951][T12995] Invalid source name [ 982.489890][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 982.987754][T13017] netlink: 'syz.4.1687': attribute type 4 has an invalid length. [ 983.829001][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 983.840658][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 983.849445][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 983.858387][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 983.866208][ T5822] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 983.878395][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 985.052941][T13024] bridge0: port 4(syz_tun) entered blocking state [ 985.060012][T13024] bridge0: port 4(syz_tun) entered disabled state [ 985.067121][T13024] syz_tun: entered allmulticast mode [ 985.076927][T13024] syz_tun: entered promiscuous mode [ 985.679066][T13019] chnl_net:caif_netlink_parms(): no params data found [ 985.788247][T13041] overlayfs: failed to resolve '/øÿÿÿ·': -2 [ 986.071709][ T5822] Bluetooth: hci2: command tx timeout [ 986.871089][T13019] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.879545][T13019] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.906549][T13019] bridge_slave_0: entered allmulticast mode [ 986.922436][T13019] bridge_slave_0: entered promiscuous mode [ 986.990500][T13019] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.998060][T13019] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.030282][T13019] bridge_slave_1: entered allmulticast mode [ 987.062926][T13019] bridge_slave_1: entered promiscuous mode [ 989.360224][ T5822] Bluetooth: hci2: command tx timeout [ 989.589686][T13019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.610305][T13019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.059227][T13019] team0: Port device team_slave_0 added [ 991.152822][T13019] team0: Port device team_slave_1 added [ 991.544114][ T55] Bluetooth: hci2: command tx timeout [ 991.811662][ T5867] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 991.925539][T13019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.038812][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.150701][T13019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.244945][T13019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.266536][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.292459][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.335369][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.348133][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.372711][T13019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.399574][ T5867] usb 9-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 992.452956][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.481250][ T5867] usb 9-1: config 0 descriptor?? [ 992.606377][T13019] hsr_slave_0: entered promiscuous mode [ 992.621044][T13019] hsr_slave_1: entered promiscuous mode [ 992.647122][T13019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.676610][T13019] Cannot create hsr debugfs directory [ 992.717047][ T974] hid-generic 0000:0001:FFFFFFFF.0003: item fetching failed at offset 0/1 [ 992.728620][ T974] hid-generic 0000:0001:FFFFFFFF.0003: probe with driver hid-generic failed with error -22 [ 993.250424][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.436509][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.551708][ T5867] pantherlord 0003:0F30:0111.0004: item fetching failed at offset 6/7 [ 993.561709][ T5867] pantherlord 0003:0F30:0111.0004: parse failed [ 993.568363][ T5867] pantherlord 0003:0F30:0111.0004: probe with driver pantherlord failed with error -22 [ 993.570897][T13093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.706928][T13019] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 993.736293][T13019] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 993.747202][T13019] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 993.768298][ T55] Bluetooth: hci2: command 0x0419 tx timeout [ 993.783062][T13019] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 993.831950][ T52] usb 9-1: USB disconnect, device number 2 [ 993.903626][T13019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.920921][T13019] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.937555][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.944754][T11895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.993899][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.001054][T11895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.035436][T13019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 994.046131][T13019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.443108][T13127] dlm: no local IP address has been set [ 995.443182][T13127] dlm: cannot start dlm midcomms -107 [ 995.833544][T13019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.111109][ T55] Bluetooth: hci2: command 0x0419 tx timeout [ 996.712026][T13122] tty tty29: ldisc open failed (-12), clearing slot 28 [ 999.468869][T13019] veth0_vlan: entered promiscuous mode [ 999.479679][T13019] veth1_vlan: entered promiscuous mode [ 999.502105][T13019] veth0_macvtap: entered promiscuous mode [ 999.511063][T13019] veth1_macvtap: entered promiscuous mode [ 999.526081][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.536642][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.546559][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.557190][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.567148][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.578557][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.628342][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.638950][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.650252][T13019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.862382][T13172] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.963662][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.005915][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.427894][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.438392][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.759797][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.850957][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.118862][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.349891][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.547392][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.583716][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.613189][T13019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.665075][T13019] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.665116][T13019] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.665144][T13019] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.665172][T13019] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.481297][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 1005.675674][T11905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.683753][T11905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.932887][T11905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.987657][T11905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.397649][T13212] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1726'. [ 1009.726397][T13234] input: syz1 as /devices/virtual/input/input16 [ 1010.977331][T13237] netlink: 'syz.5.1730': attribute type 9 has an invalid length. [ 1014.275314][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.282418][T13249] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1733'. [ 1017.586477][T13274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1738'. [ 1018.996033][T13286] binder: 13283:13286 ioctl c018620c 20001180 returned -22 [ 1020.566324][T10721] kernel write not supported for file /cpu/0/msr (pid: 10721 comm: kworker/1:2) [ 1021.622925][T13313] new mount options do not match the existing superblock, will be ignored [ 1022.515019][T13316] Invalid source name [ 1034.311447][T13374] Invalid source name [ 1035.152245][T13377] Invalid source name [ 1037.703247][T13396] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 1037.711186][T13396] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1767'. [ 1039.527869][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 1047.017323][T13498] xt_nat: multiple ranges no longer supported [ 1047.097462][T13498] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1782'. [ 1048.087752][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.229335][T13504] ------------[ cut here ]------------ [ 1049.236962][T13504] WARNING: CPU: 0 PID: 13504 at drivers/gpu/drm/vkms/vkms_crtc.c:98 vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.248580][T13504] Modules linked in: [ 1049.252789][T13504] CPU: 0 UID: 0 PID: 13504 Comm: syz.5.1786 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1049.263865][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1049.274239][T13504] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.280750][T13504] Code: 42 80 3c 30 00 74 08 48 89 ef e8 c8 98 0e fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 1e bb aa fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 1049.301310][T13504] RSP: 0018:ffffc900055076a8 EFLAGS: 00010293 [ 1049.307772][T13504] RAX: ffffffff85f4b8c2 RBX: 000000e7802af888 RCX: ffff88802cb90000 [ 1049.315877][T13504] RDX: 0000000000000000 RSI: 000000e7802af888 RDI: 000000e7802af888 [ 1049.324067][T13504] RBP: ffffc90005507840 R08: ffffffff85f4b82f R09: 0000000000000000 [ 1049.332228][T13504] R10: ffffc90003509000 R11: ffffffff85f4b740 R12: 000000e7802af888 [ 1049.340653][T13504] R13: ffff888021b45950 R14: 1ffff92000aa0f08 R15: ffff888024b30000 [ 1049.349285][T13504] FS: 0000555556e8e500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1049.358340][T13504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1049.365161][T13504] CR2: 0000001b2d90aff8 CR3: 000000004e27e000 CR4: 00000000003526f0 [ 1049.373376][T13504] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 1049.381620][T13504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1049.389674][T13504] Call Trace: [ 1049.393134][T13504] [ 1049.396130][T13504] ? __warn+0x165/0x4d0 [ 1049.400373][T13504] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.406436][T13504] ? report_bug+0x2b3/0x500 [ 1049.411033][T13504] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.417078][T13504] ? handle_bug+0x60/0x90 [ 1049.421498][T13504] ? exc_invalid_op+0x1a/0x50 [ 1049.426373][T13504] ? asm_exc_invalid_op+0x1a/0x20 [ 1049.431492][T13504] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1049.438006][T13504] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 1049.443844][T13504] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1049.450188][T13504] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.456236][T13504] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1049.462132][T13504] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1049.468604][T13504] drm_crtc_next_vblank_start+0x229/0x490 [ 1049.474517][T13504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1049.480746][T13504] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1049.487321][T13504] drm_atomic_helper_wait_for_fences+0x277/0x8e0 [ 1049.493791][T13504] ? __asan_memcpy+0x40/0x70 [ 1049.498704][T13504] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1049.505677][T13504] ? drm_atomic_helper_prepare_planes+0x65f/0xb50 [ 1049.512360][T13504] drm_atomic_helper_commit+0x53a/0x9f0 [ 1049.518008][T13504] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1049.524316][T13504] drm_atomic_commit+0x294/0x2f0 [ 1049.529348][T13504] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1049.535146][T13504] ? __pfx___drm_printfn_info+0x10/0x10 [ 1049.540945][T13504] drm_client_modeset_commit_atomic+0x670/0x7d0 [ 1049.547314][T13504] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1049.554344][T13504] ? __mutex_lock+0x398/0xee0 [ 1049.559264][T13504] ? __pfx___mutex_lock+0x10/0x10 [ 1049.564551][T13504] ? drm_client_dev_restore+0xae/0x270 [ 1049.570118][T13504] drm_client_modeset_commit_locked+0xe0/0x520 [ 1049.576593][T13504] drm_client_modeset_commit+0x4a/0x70 [ 1049.582168][T13504] drm_fb_helper_lastclose+0xbb/0x180 [ 1049.587782][T13504] drm_fbdev_client_restore+0x34/0x40 [ 1049.593247][T13504] drm_client_dev_restore+0x132/0x270 [ 1049.598897][T13504] drm_release+0x335/0x410 [ 1049.603404][T13504] ? __pfx_drm_release+0x10/0x10 [ 1049.608560][T13504] __fput+0x23c/0xa50 [ 1049.612651][T13504] task_work_run+0x24f/0x310 [ 1049.617697][T13504] ? _raw_spin_unlock+0x28/0x50 [ 1049.622680][T13504] ? __pfx_task_work_run+0x10/0x10 [ 1049.628005][T13504] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1049.633840][T13504] syscall_exit_to_user_mode+0x13f/0x340 [ 1049.639782][T13504] do_syscall_64+0x100/0x230 [ 1049.644478][T13504] ? clear_bhb_loop+0x35/0x90 [ 1049.649338][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.655376][T13504] RIP: 0033:0x7f6a6d185d29 [ 1049.660016][T13504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.679844][T13504] RSP: 002b:00007fffa5a80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1049.688307][T13504] RAX: 0000000000000000 RBX: 00000000000f27d6 RCX: 00007f6a6d185d29 [ 1049.696443][T13504] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1049.704885][T13504] RBP: 00007f6a6d377ba0 R08: 0000000000000001 R09: 00007fffa5a8031f [ 1049.713286][T13504] R10: 00007f6a6d000000 R11: 0000000000000246 R12: 00000000000f2c15 [ 1049.721296][T13504] R13: 00007f6a6d375fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1049.729779][T13504] [ 1049.733210][T13504] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1049.740523][T13504] CPU: 0 UID: 0 PID: 13504 Comm: syz.5.1786 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1049.751311][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1049.761393][T13504] Call Trace: [ 1049.764695][T13504] [ 1049.767639][T13504] dump_stack_lvl+0x241/0x360 [ 1049.772347][T13504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.777578][T13504] ? __pfx__printk+0x10/0x10 [ 1049.782448][T13504] ? _printk+0xd5/0x120 [ 1049.786627][T13504] ? __init_begin+0x41000/0x41000 [ 1049.791676][T13504] ? vscnprintf+0x5d/0x90 [ 1049.796025][T13504] panic+0x349/0x880 [ 1049.800031][T13504] ? __warn+0x174/0x4d0 [ 1049.804203][T13504] ? __pfx_panic+0x10/0x10 [ 1049.808658][T13504] __warn+0x344/0x4d0 [ 1049.812702][T13504] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.818576][T13504] report_bug+0x2b3/0x500 [ 1049.822935][T13504] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.828770][T13504] handle_bug+0x60/0x90 [ 1049.832961][T13504] exc_invalid_op+0x1a/0x50 [ 1049.837495][T13504] asm_exc_invalid_op+0x1a/0x20 [ 1049.842376][T13504] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 1049.848822][T13504] Code: 42 80 3c 30 00 74 08 48 89 ef e8 c8 98 0e fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 1e bb aa fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 1049.868461][T13504] RSP: 0018:ffffc900055076a8 EFLAGS: 00010293 [ 1049.874562][T13504] RAX: ffffffff85f4b8c2 RBX: 000000e7802af888 RCX: ffff88802cb90000 [ 1049.882553][T13504] RDX: 0000000000000000 RSI: 000000e7802af888 RDI: 000000e7802af888 [ 1049.890542][T13504] RBP: ffffc90005507840 R08: ffffffff85f4b82f R09: 0000000000000000 [ 1049.898539][T13504] R10: ffffc90003509000 R11: ffffffff85f4b740 R12: 000000e7802af888 [ 1049.906545][T13504] R13: ffff888021b45950 R14: 1ffff92000aa0f08 R15: ffff888024b30000 [ 1049.914559][T13504] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1049.920749][T13504] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 1049.926491][T13504] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1049.932325][T13504] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 1049.938157][T13504] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1049.944330][T13504] drm_crtc_next_vblank_start+0x229/0x490 [ 1049.950077][T13504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1049.956081][T13504] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1049.962360][T13504] drm_atomic_helper_wait_for_fences+0x277/0x8e0 [ 1049.968706][T13504] ? __asan_memcpy+0x40/0x70 [ 1049.973319][T13504] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1049.980193][T13504] ? drm_atomic_helper_prepare_planes+0x65f/0xb50 [ 1049.986641][T13504] drm_atomic_helper_commit+0x53a/0x9f0 [ 1049.992211][T13504] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1049.998307][T13504] drm_atomic_commit+0x294/0x2f0 [ 1050.003274][T13504] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1050.008746][T13504] ? __pfx___drm_printfn_info+0x10/0x10 [ 1050.014329][T13504] drm_client_modeset_commit_atomic+0x670/0x7d0 [ 1050.020605][T13504] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1050.027381][T13504] ? __mutex_lock+0x398/0xee0 [ 1050.032097][T13504] ? __pfx___mutex_lock+0x10/0x10 [ 1050.037137][T13504] ? drm_client_dev_restore+0xae/0x270 [ 1050.042621][T13504] drm_client_modeset_commit_locked+0xe0/0x520 [ 1050.048795][T13504] drm_client_modeset_commit+0x4a/0x70 [ 1050.054269][T13504] drm_fb_helper_lastclose+0xbb/0x180 [ 1050.059667][T13504] drm_fbdev_client_restore+0x34/0x40 [ 1050.065060][T13504] drm_client_dev_restore+0x132/0x270 [ 1050.070464][T13504] drm_release+0x335/0x410 [ 1050.074897][T13504] ? __pfx_drm_release+0x10/0x10 [ 1050.079849][T13504] __fput+0x23c/0xa50 [ 1050.083857][T13504] task_work_run+0x24f/0x310 [ 1050.088462][T13504] ? _raw_spin_unlock+0x28/0x50 [ 1050.093341][T13504] ? __pfx_task_work_run+0x10/0x10 [ 1050.098478][T13504] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1050.104224][T13504] syscall_exit_to_user_mode+0x13f/0x340 [ 1050.109879][T13504] do_syscall_64+0x100/0x230 [ 1050.114486][T13504] ? clear_bhb_loop+0x35/0x90 [ 1050.119180][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.125089][T13504] RIP: 0033:0x7f6a6d185d29 [ 1050.129514][T13504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.149135][T13504] RSP: 002b:00007fffa5a80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1050.157576][T13504] RAX: 0000000000000000 RBX: 00000000000f27d6 RCX: 00007f6a6d185d29 [ 1050.165560][T13504] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1050.173549][T13504] RBP: 00007f6a6d377ba0 R08: 0000000000000001 R09: 00007fffa5a8031f [ 1050.181533][T13504] R10: 00007f6a6d000000 R11: 0000000000000246 R12: 00000000000f2c15 [ 1050.189515][T13504] R13: 00007f6a6d375fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1050.197523][T13504] [ 1050.200839][T13504] Kernel Offset: disabled [ 1050.205257][T13504] Rebooting in 86400 seconds..