last executing test programs: 27.850646537s ago: executing program 0 (id=149): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_pidfd_open(0x0, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x21) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x21) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r6], 0x30}, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r6], 0x30}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d3, &(0x7f00000000c0)="1be39db33d157630e7b889ac521b70c3") r10 = dup(r8) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',privport']) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',privport']) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.998612027s ago: executing program 0 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000140)={0x3, "ad260bf5df12ccb9448aa80084d85fecf966a9cf89ddb0b86c563760ead89caedbce89a2ac7bb81b0ecb87ab02c0400d3fd2c6c8d8b5aa8bd5202ba47089e5d9", {0x8, 0x6}}) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x9, 0x206, 0xec6b, 0x3, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000004c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32=r4], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/223, 0xdf}], 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) socket(0x10, 0x3, 0x0) 19.095007429s ago: executing program 0 (id=167): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x101, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x26f01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 17.162338152s ago: executing program 3 (id=172): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) 15.946162793s ago: executing program 4 (id=174): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002400128009000100697069700000000014000280050009"], 0x44}}, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "a95972fc5ec50719", "8e0870e9a5e9c2f133d700", "6a3a05b9", "12772541f8eb02bb"}, 0x28) sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) setresuid(0x0, 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) 15.861529804s ago: executing program 2 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="73e7b6227500000000368642c53e1a43a7d0f6915719", 0x16}], 0x1}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$HIDIOCGRDESC(r4, 0x40305829, &(0x7f00000006c0)={0xc9, "1dc32e2600080000000000006d461e57de8b7eed2d0322e9c0a02f8f25ab500865419eb25f7f436e0319f413ee6a4a2885cbe663166a977325cfb98ad9893086012da4169d44a31cd0e27081be3537b86c400cdec388a36f5ee7fda3a55e9c068a255c10ba3548e0e380f1447103fce572f128c3fdfce4e4e403e1cd95dd8cf0905577ff11d4dfd3970602eca87edf5eaf58af05888f2eca0ebd89b13afcd1d756de7a34abebb3b517ac60ce458eff3778c0c353903af636f31bdbda7d5c76a93d15d63a35f8fb648a"}) r6 = syz_open_dev$vbi(&(0x7f0000000600), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x6, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0xffffffff, 0x30323953, [0x0, 0x8000001], [0x8200, 0x1]}}}) sendmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000000c0)="d8958b659b70d4", 0x7}, {&(0x7f0000000100)="5a32d47b11c24def722247cf5277191c62ad2da1b778c59b01de2c08d03f3407af57e8", 0x23}, {&(0x7f0000000180)="253e749760721cbb01fe8e55ce4ed62a60", 0x11}, {&(0x7f0000000200)}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f649737701031dd868e6c41585a07ad4587fa940d2ad8687c64726b0da5c5beba9598f58ec2f675ed8258c2defdac65e2b0acf8f3aa994e8a2d437445239a031cab8dd82fff203edd94396c24daf64dbec93567b9e78e37a15fb69c6271cf2b2e608bf7f7441a8779b906e2b"], 0x10}}], 0x2, 0x48d4) inotify_init1(0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0x40084146, &(0x7f0000000080)) 15.472543413s ago: executing program 1 (id=176): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) (fail_nth: 5) 14.383002929s ago: executing program 4 (id=177): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) uname(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000001c0)=0x200003) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 14.186012764s ago: executing program 2 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000000c0)={[0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) stat(0x0, &(0x7f0000000300)) r4 = getpid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x0, 0x1, 0x0, 0x1, 0x8009}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x30, 0x1, 0xade}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 12.612475181s ago: executing program 0 (id=179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000088a800000e7be770c1686ff333523efa78516ff715bb3dd31227151323b7a30e378ae800000000000000005cad5dfac0b884a3f0072074c90bc820f4166179377f69ab6fd3428001376dc133ca47b4d0800b71f0268953a96dca800c17cfe98739f8c6bee346c2ab686ef6"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x20008040) 12.336150683s ago: executing program 2 (id=180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r7, 0x0, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000088a800000e7be770c1686ff333523efa78516ff715bb3dd31227151323b7a30e378ae800000000000000005cad5dfac0b884a3f0072074c90bc820f4166179377f69ab6fd3428001376dc133ca47b4d0800b71f0268953a96dca800c17cfe98739f8c6bee346c2ab686ef6"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x20008040) 12.335742739s ago: executing program 1 (id=181): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}]}, 0x20}}, 0x0) r5 = dup2(r3, r3) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x4, 0xc95d, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x49, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0xa, 0x400, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x5f31, 0x8, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xc, 0xff7f, 0xa, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3fc, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x1af9, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x5, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x5, 0x120000, 0x3, 0x6, 0x800aaed, 0x4, 0x65], [0x9, 0xbbb1, 0x3, 0xb, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xc, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0x1a, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x6, 0xedf6, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0xffff, 0x0, 0x3dfb, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0x1c) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, 0x0) fsetxattr$smack_xattr_label(r6, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000080)=ANY=[@ANYRES64=r8], 0xb, 0x2) 11.334683873s ago: executing program 4 (id=182): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 11.303489495s ago: executing program 3 (id=183): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x800}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 5.905986863s ago: executing program 1 (id=184): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) 5.573279912s ago: executing program 3 (id=185): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f00000004000000040020000c"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r8, &(0x7f0000000040), 0x10) io_submit(r9, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 5.570840867s ago: executing program 2 (id=186): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000280)="2664f8", 0x3, 0x0, &(0x7f00000000c0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x9, 0xfff}, 0x10) creat(&(0x7f0000000180)='./bus\x00', 0x5d) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0xf, 0x8, 0x10000000000002) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 5.569827564s ago: executing program 4 (id=187): socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000280)='configfs\x00', 0x4004, &(0x7f0000000300)='(\xff\xff\xff\x7f\x00\x00\x00\x00b') socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x800, 0x48, &(0x7f0000000480)={0xfffffffffffffffb, 0x81, 0x5, 0x5}) mq_timedreceive(r2, 0x0, 0x0, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0) syz_clone(0x104080, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000004c0)={0x8, {"554384f92636861a4b538ffef82c839ddc6f43beac025611bee209c90c7a0c8d2b8fbaa8a68acbb56f64ff2ca14b59225c321ffc63dd1739a2cdb98f352e2b171703e16879919b3faed216392b6708210fdb0f740a626542014c2d89733ed6873a8b744e6cd8b663cc022092bf434c6979b7406f651b1dcd73812ab78099ef85d61e94c404859e07938364fc8887a13e5511968696c5c04e00df7393f1a66428f313b866d9cac2849b2ffa4e234f40b9d71015d217d88faa1580fc387ecc11fd5ca5ff8e595577125136c05521a871a22df7d2fe9cff802840c606d3a0df2b946a178bb619b097e12f1e2af20707719a536c66f16b40fb93e34c64dc5db31af39e89f506de4a66ed99e71c0264b31d3b54313655b44240070b4c9fc31c773bfe067419ea64be94fb11a83094403e22a89548eac078475a9eb84ab1dec61a019c0c4bfa05a736d7f26beed6fa2e361dcb1da0de4e9b6b425ba2f15582af7836fea347fbd832d9763c62b0600f03e934ac60f13fb8e281cf2786eafba28e46c5842f0885be54564b4a8c5012a7577cb418b73571d6020a38aebc3904db1b2af5f7d3a10631732e16437a8b755cb88e27bb41762dd02d702cd0ff5d2ad1058f54c2987dce9bef22f09c715582b21a2f5a7f0e6cd900f100ba1342d292fcf6f70fa1438777791c20925119191de36ef79aadabc97e85f1e1d6e0d14c1fd7445211ce3828332b49a3fdccfb2f28373b1a48b2d56a1dde7aef3eccde7a56b7ee3d63506dc3240174acb4abdd6e9792ca273595c2a4c48a9e6fcb8b38ac4edff1d782adaf56b20f1113e9205a2c29044677b5bd8341a194b8a1bb78748ef746853bbe720ea199048422868dae31ef4daf3215136de705a8da88ea341e6b796c8a0f765f3b1b9ae643ae373e8c85179cede86922b64e04e99c6b90ed1845df47d68293cb1b989eeb689d4ae781d2733043244b05d3e3151194d971178fa815e99b8e156147b5c499a9e3d3f9d31fefea1551f9cd79d9ed33b60cf0631d9b0d034b0ab4319da330dd858f074d97a7cf1a83973665b2da0d0e3edd6e92318dad0e8ad3208ec164305850b4657210cb9b4227840be8df4efb4a03d84d134df868a6034d17a458d5f97634f20290029fd0786060e0904740c1c101f4d5f472e4413872f6bb9fad4d5ade3b3550faaa639f56e76271d51916471d4f0ca7cc6cbf0886b7606a534778487fdf1e8f545f91905cfaa27613a445f74e47c52991d94ef40cc4eb311c8886d16a676f83fbdc4f00baaaacb80ca825dc122d9d4cef883e63deb7ef85766db053ac20735efcdcee400e7df34db16cfae63a56aaf9ecd8d65522a87922ee4ccfbb47ea0a16d3c7f0b718d2d03a7653876ea71b780b59e4cfc17e31dad528d6ff97418a02577cb42f43647fff236c670f7a33e8bd3ec3879c82ea44798f0a06b90c813d5420e91ea6ea659cb18e6104ee355dc87c8465d03b9da0d27b46a466ade9ea6cf375bf68cfaa83d65ecc261131d5eb76ee064562949bc66f6f012318bfb9dee19346ef0e8fc7b02f0da367692cd24cbf12162247c93be4a8f831a9fe4d4191c04dd9a2fc95f644a0001340be6457c26f1eea6dceb5497f9a5df2e4d6c9466cfbfc7007ff71e1bf33f981f3c14d116fd932fbbca82b2ff1912d5a67635a35ed2516bea61cb243aa556cac08b70f440c4edbecd38ad435c5493c665c5305ff6b5ddc38a81ec7230455be8d8fd5527796d0d53f343f415c4127482f7592ed6db15552b798dffb6baf679afc8c77dae834ad1aef6fc1937719e713cb3f0406fae2d032a5bf96faccc50e8f7e62ed1ccaa05bae6cb091338f85f3b213d516c988de419b765884c026b2f2cb49c07e53e19ff75c57935a75d2f68d8b8f69c9420f5b7b7e3c9dec32af1f5ea6d5b4fe26cef8bb5026777cbb9e51834f9b65cb99842200258427eee20c6368b4e010f7f997456a0e60279b653bfa91b8a56b16b7db8bb571aeed0c9e2da9df7aee3a24988a4760d0f0e3eb41a954b5ee992e401c2b4ca52a2da520488216540303747eaa7784facde32a662539fb0ac0c0f381008e242bdd2f4b651b302f67c04f0ba14b544630866d12f613d4e8f087da1616a6bcde0654d11c833ffb07eee055d89b6e009a4fa1423fd643da229fec106a3ccb8708a80c16cc5d02a1f40d35c43739eb40508dca1f7d96eb1d743f307ecb31a963b4ab718234a0494c62552e29665c8570a4574cf45a27463e578dc7f41fbf15956ba14ed80bc39eda51f6b1f7f6784375f718b942c3396e1cf399edb0db6d0aa70b4ddc39451e66213a0312b09f5401f74c9f858a55628b83dfdeaf5947bee0e40438dfcdc9f645e811585ddeb69deba2527abbb71181a8659d19e09e06fade776cdba7bfff72b3f1d8615955025a1368eb5ebc4c756f5c2c2a0e85ac01c1c03c38d1d470e0bf5d69dafb1e007f58d9c3fe42164bfe00ae9acb8d5aa526d4e8b74f42a18e6c83d7d207e2717a9c632716961101117948b2318d344847b832d05c26b10d485ff21aed2f8f4bf5c87981d7d5e494dfa1a093c7eb307391183d38569e2dc5723d45b9f07233cdc0531ea9403489eba5c175fd8a74aa85a4bb54ca36c6f70ee5d45693f6a5f28a546bf9a74a438691be9a9f3ab7c164c1f0fbfd73264629be79d9be06342b8318509ef737aa02b9b98dcb79aeeb15ed17e8c769dddf38e716dd0f15893e75ab2870d79aa080dc609072283fc93c769ce7c7a8f9ac471dd0b659a34331c8c344ee949c2cc8d733bc021e3cbb10047527fcbe219cde366910e3e43b587bbf95deef96a4fb5905a64731fb0b45fb57fb92a18a163633647870f003579d2e5779467b95c9be5e2f181f338479ae2d2c88f67b9fbbb88f73bcc03fa631c2cac9869137bdc563aa5557f39537ae842b15f8f0503f77c908a503b214df45bcd1c22fac807e3363927f87259ad7685119a2e1fa0de3d6fadb8746885b07290171057954005d402a546485683a4ebc1730b6959203f4903680b0f24f9d5d1b9c412ec4f629f92ae73dc4b310493b0fc4dc7a735b01e482475bec56743cee2e14c5104143167e444cda813785dc70055553e0cb3c9f472fec2f0c222b399c35c6191b322794de40eb6fa360d713799312602561b1f4ca02a6d4d3240ff6473da2dc4b0887d89c1322932ad6ee9a3847c7db5a9e4537365585df5d3e8514fbf2512e0daf5971582702d985de342702850002cc705ae5828fa836cb0bbfdf32f62c9f058de24c7efacf217ad2790db4168eeff4d70b3d397e859fe3262b6376f70bee051116f0cf98508c06e719fd12e0f3569c4f8951a6531b1be1c128b3075b402421845274aa47fd1071984799d550dc32ff39c29cb88f10877a1693b09940d6046045e187cc6d120e5695862f3efdae642d5f38884237633ddcf178828780c8b54fad411b55022b8790764219fd632b9f39bbc6e7d2d20f83a078456ab0c6984bf9d356910b41d7377292b3e9d33c6f7ddb80f41890dbb311b5cd1e50ec3899468ba8790293c23a51d78dde9dc1c0eb8ef1381f6f9f05f002cb12eccbaa4dd0055006c6b50ed0f505bcbdcef83c3abc8da4aa97201951d349f756948dca46b6c8c6105fef81ae587f69870dde1bee0731152d89a16e1ad9058a8ab55d480c914d85d3c7a2e134d78b462a58266ebcf263e998b2a10706cbb40476d81d55b00f4bcfe3cb1f1b65b24b3300f5ac2cb5886cac1800f23062d671cd32d8eecb971ba5b990717f621b3a66de6daccb5f1d6becfd509620fe9575b71109a96674face7193d9e0b7bba5c9e3c5018b50ebd89a6b9649bb24f24fdeb2ce18d14a43fed530198ebb2428fc27730908b29326c8f74ee18bd64a2242c28829c12f1105707e9e42d2aaee43771977c5c616595fb11414bae6aa5e84da1e26a84bc9cccbd685fbcf354e9db4ecdf713951ef5cd000a1b0d18da50ee5fb000127e7f76b2e0353d7bfcb3e766104c077aace6a0e20dca6db29780529f128832ca4797d551bbdcb53399d0525b490ad04db7825eda410e8ececca0bfdf7671334c9cb3e5319bfea001242090ac80ae05193389edaa255b3dbbc29c84daec39c7d57f2df28a358558efa8e647eecff84504346408d0459870f7dc4ceaafde8bb1d8c09d122c26b0c71fd144165b84f217c9f2b06bb4768506bc11d2a860ad7c1aba4edb493ab2cfcbcefe9be666bef604f4b16b1a69a2031d56adb2a73b33884a28a9cb94cd4fdcd5794c213a2b83450181db0f16e0fb4d4abfe7a5bec26a6b5f5683d489dda286663c2fb02ff60af62ae9cea64c730f775bfb6961d2170c36f7fea7fbba023694b9a83271eb04fbd337393dbd0caa79e802f58b4e3ce5214167644c81f5647b9233184a37a98eb2b7a5aba82163f15074cbc8b590da52aa4937916c744d03b741538f2b2801aceec6ccff298c47b8ed54d8eaaaa63225b9c54d7a828c66821581e7aec1b194afc0743050464d1fb16ab8a6bbb832fd299c5050edbf9a3889a96a70ce34467b0ded5730147e5303fdeb5cef509afb5486c840426f277485c6b57b3204f8c3c45ecbc22f4ab9a99e0483399a9d4f0dbeec942612d8224047d3eb5c6ea65dc5a8c8fee9f620f3767196a40e9caa82ae212372deb6221c6176568de256785de311692ef8a7af7f48e34767593fdac7e20f44e3f6230c66e34a8c506288f4d72ba451d973778889d13e2681bb72d265a7240f312455c35c3edd53b263cc30102a226456c8cdb3c5b227e075bcddd182e01ff72095222a5844fe1159b031bf2daf7c1910a15cdcb062415d0dc25e7c598c06616cfed94b7e903f27fe1ac0c59e820c4271c14fea61237e645c73348f2f1450a737f33e77e82baedb8e1fec408c1a9e36347c9e08701e74899828393d6ef425e17f20a3ccd86394affc9b5e13713ba7e534cd6975f9152eab21e326f4a17d9eb09883979e78bc23c399ec29338396ec8ee4d92a574c2b109d6c5c544af338658744a0b2b6ce159298476b1e7dee9909b6159aa8b8d28825eceb949e684b0653cee539a2f67ab873960723183e66ae48ce4af8eae467815cfc9f7db926a77e66e7ea139c21441e9e7e036724cef3afd2a74432b630d2632fc890fd23b3d5ceec8cdfa62f51984f9fca76ebf8fd91a2e62aed5b8ef0d0a4b7fd88b5ab9b20ffc67850189004c86a6487f1c77a90fe44910234942817087b4ab91ff1105c03db672d93e9258c6c6687ea069f8b7ec6d893136edd9ed6994c1cff4059e8a1d1567d388f7c1e0a8ccd122bcaeba76455709114a83c2fcd59102c71f4c575f8b9a35161aa7247fc025f97343d1981e8b6362d6f24c8e3edeb886d8e7c3097d16670b088ef35c6e9e174b4ba07dd1a98916e4652de74c53119d2138df536bbb969431fc20657f9c03d685eeb581d99873c1f651f8114846c9008cd06df91c0673c259adce45dc10d24bf5538490e2406ec504755c1d0449f97c5a5427c9001b76d24d355860a64d29248c9adaaf7757196f7381b8577459e9a7b96f723b6b6b0df90f7da111067e5d42b21185001aa82c6c5519ffbd79129e60690f6336499d0381243c2269a677455d5df0d1cdc312076364fbde651aceb4e84570d96d4610e6ee6cfc3a88107e71b876d76af721906514d7f8de9ec48ce6cde2a1fee196800f06bd1fe0381879e6d88481a9cc59b047ac5f5d322ea5ca91f70b3f3a76198b10d06ed65525330cc099a53fbae687113fbf4b6f5058d3e36f855fe4cd2411a898cb75fb5737", 0x1000}}, 0x1006) 4.208107404s ago: executing program 0 (id=188): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0) epoll_create1(0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 3.850674335s ago: executing program 3 (id=189): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = epoll_create1(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x20000011}) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x18, 0x3f9, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4048800) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.856903289s ago: executing program 1 (id=190): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x101, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x26f01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.816374498s ago: executing program 2 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) 2.652592497s ago: executing program 4 (id=192): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) setpriority(0x2, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0xc0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.673815636s ago: executing program 2 (id=193): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) uname(&(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000001c0)=0x200003) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 1.671658891s ago: executing program 3 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x19) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast1}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r6, &(0x7f0000000080)={0x21, 0x37, 0x1, {0x2, 0x8, 0x7, r7, 0x3, ',-/'}}, 0x21) recvmmsg(r5, &(0x7f00000072c0)=[{{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000003840)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f00000034c0)=""/223, 0xdf}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000035c0)=""/180, 0xb4}, {&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f0000003740)=""/84, 0x54}, {&(0x7f00000037c0)=""/80, 0x50}, {&(0x7f00000003c0)=""/16, 0x10}], 0xa}, 0x5}, {{&(0x7f0000003900)=@isdn, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000003980)=""/115, 0x73}, {&(0x7f0000003a00)=""/118, 0x76}, {&(0x7f0000003a80)=""/1, 0x1}, {&(0x7f0000003ac0)=""/97, 0x61}, {&(0x7f0000003b40)=""/101, 0x65}, {&(0x7f0000003bc0)=""/71, 0x47}], 0x7, &(0x7f0000003cc0)=""/253, 0xfd}, 0x80}, {{&(0x7f0000003dc0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003e40)=""/45, 0x2d}, {&(0x7f0000003e80)=""/171, 0xab}, {&(0x7f0000003f40)=""/11, 0xb}, {&(0x7f0000003f80)=""/225, 0xe1}, {&(0x7f0000004080)=""/81, 0x51}, {&(0x7f0000004100)=""/208, 0xd0}, {&(0x7f0000004200)=""/40, 0x28}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/98, 0x62}], 0x9, &(0x7f0000005380)=""/231, 0xe7}, 0x80000000}, {{&(0x7f0000005480), 0x80, &(0x7f0000005600)=[{&(0x7f0000005500)=""/44, 0x2c}, {&(0x7f0000005540)=""/92, 0x5c}, {&(0x7f0000007440)=""/48, 0x30}], 0x3, &(0x7f0000005640)=""/121, 0x79}, 0x4}, {{&(0x7f00000056c0)=@alg, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005740)=""/212, 0xd4}, {&(0x7f0000005840)=""/223, 0xdf}, {&(0x7f0000005940)=""/37, 0x25}, {&(0x7f0000005980)=""/80, 0x50}, {&(0x7f0000005a00)=""/78, 0x4e}], 0x5, &(0x7f0000005b00)=""/248, 0xf8}, 0x608}, {{0x0, 0x0, &(0x7f0000007140)=[{0x0}, {&(0x7f0000005d40)=""/234, 0xea}, {&(0x7f0000005e40)=""/15, 0xf}, {&(0x7f0000005e80)=""/183, 0xb7}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/247, 0xf7}, {&(0x7f0000007040)=""/2, 0x2}, {&(0x7f0000007080)=""/80, 0x50}, {&(0x7f0000007100)=""/58, 0x3a}], 0x9, &(0x7f0000007200)=""/133, 0x85}, 0x25c47463}], 0x6, 0x40010163, 0x0) 1.163607998s ago: executing program 1 (id=195): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x800}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 933.584183ms ago: executing program 0 (id=196): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f00000001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff000000000000000000000200000077feee8704d86107672db88e8c14865b37d2c110a85b10f1350814bc016c808cd0361e2a279775992e65c8b268f1ddcd0932b2f1d30139f594246b60b0fa99eefdff535f75aba4a3", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000004002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x0) 178.74844ms ago: executing program 1 (id=197): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe79b18", 0x0, 0x1a}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xc, 0x3, 0x9, 0x0, 0x0, 0x6, 0x2, 0x7, 0x0, 0x2000000000d1, 0x10, 0x30000000000, 0x5], 0x0, 0x8340}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000f880030000000000000100000000009b716c0000937af486a4ff9b9419ea070020842477c73c3ef7c92cd652aa7513ff96f46f"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.27868ms ago: executing program 4 (id=198): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x100000}}, 0x40) 0s ago: executing program 3 (id=199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1}, 0xfffff70b}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb", 0x74}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 86.382476][ T5824] cgroup: Unknown subsys name 'net' [ 86.493328][ T5824] cgroup: Unknown subsys name 'cpuset' [ 86.503200][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.295899][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.100926][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.109448][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.117775][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.126255][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.134975][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.142721][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.147695][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.150303][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.164869][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.169941][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.178771][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.181084][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.194665][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.205162][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.212513][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.218719][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.220907][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.235738][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.249024][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.260555][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.269945][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.279028][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.287735][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.299868][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.314780][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.895218][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.193019][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.225783][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.254895][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.285733][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 92.554365][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.561929][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.569763][ T5838] bridge_slave_0: entered allmulticast mode [ 92.578163][ T5838] bridge_slave_0: entered promiscuous mode [ 92.594291][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.601647][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.609289][ T5838] bridge_slave_1: entered allmulticast mode [ 92.616871][ T5838] bridge_slave_1: entered promiscuous mode [ 92.764208][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.771513][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.778982][ T5835] bridge_slave_0: entered allmulticast mode [ 92.786539][ T5835] bridge_slave_0: entered promiscuous mode [ 92.827997][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.841763][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.883856][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.891407][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.899346][ T5835] bridge_slave_1: entered allmulticast mode [ 92.906776][ T5835] bridge_slave_1: entered promiscuous mode [ 92.914079][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.921827][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.930047][ T5836] bridge_slave_0: entered allmulticast mode [ 92.937586][ T5836] bridge_slave_0: entered promiscuous mode [ 92.945618][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.952900][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.960589][ T5844] bridge_slave_0: entered allmulticast mode [ 92.968034][ T5844] bridge_slave_0: entered promiscuous mode [ 92.991402][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.998692][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.006087][ T5834] bridge_slave_0: entered allmulticast mode [ 93.014172][ T5834] bridge_slave_0: entered promiscuous mode [ 93.036244][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.043922][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.051575][ T5836] bridge_slave_1: entered allmulticast mode [ 93.059633][ T5836] bridge_slave_1: entered promiscuous mode [ 93.067639][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.075343][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.083018][ T5844] bridge_slave_1: entered allmulticast mode [ 93.090824][ T5844] bridge_slave_1: entered promiscuous mode [ 93.111278][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.119257][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.126572][ T5834] bridge_slave_1: entered allmulticast mode [ 93.134428][ T5834] bridge_slave_1: entered promiscuous mode [ 93.205509][ T5838] team0: Port device team_slave_0 added [ 93.230907][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.243316][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.256389][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.282992][ T5838] team0: Port device team_slave_1 added [ 93.334353][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.346670][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.350288][ T5853] Bluetooth: hci3: command tx timeout [ 93.361931][ T5856] Bluetooth: hci1: command tx timeout [ 93.361941][ T5841] Bluetooth: hci2: command tx timeout [ 93.362666][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.372811][ T5850] Bluetooth: hci0: command tx timeout [ 93.396665][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.428626][ T5850] Bluetooth: hci4: command tx timeout [ 93.474356][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.482038][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.508899][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.525203][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.537854][ T5835] team0: Port device team_slave_0 added [ 93.547612][ T5836] team0: Port device team_slave_0 added [ 93.557993][ T5836] team0: Port device team_slave_1 added [ 93.579285][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.586300][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.612744][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.662328][ T5835] team0: Port device team_slave_1 added [ 93.685409][ T5844] team0: Port device team_slave_0 added [ 93.695616][ T5844] team0: Port device team_slave_1 added [ 93.704515][ T5834] team0: Port device team_slave_0 added [ 93.786144][ T5834] team0: Port device team_slave_1 added [ 93.793411][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.800585][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.827815][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.841915][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.849242][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.875852][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.893728][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.900896][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.927873][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.940994][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.948021][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.974878][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.061892][ T5838] hsr_slave_0: entered promiscuous mode [ 94.069263][ T5838] hsr_slave_1: entered promiscuous mode [ 94.077490][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.084952][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.111867][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.125162][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.132341][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.158959][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.185350][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.192668][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.219031][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.262364][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.269713][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.296471][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.365222][ T5835] hsr_slave_0: entered promiscuous mode [ 94.372472][ T5835] hsr_slave_1: entered promiscuous mode [ 94.380046][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.387991][ T5835] Cannot create hsr debugfs directory [ 94.471962][ T5836] hsr_slave_0: entered promiscuous mode [ 94.483622][ T5836] hsr_slave_1: entered promiscuous mode [ 94.490410][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.498059][ T5836] Cannot create hsr debugfs directory [ 94.615887][ T5834] hsr_slave_0: entered promiscuous mode [ 94.622726][ T5834] hsr_slave_1: entered promiscuous mode [ 94.630510][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.638231][ T5834] Cannot create hsr debugfs directory [ 94.657053][ T5844] hsr_slave_0: entered promiscuous mode [ 94.663793][ T5844] hsr_slave_1: entered promiscuous mode [ 94.670532][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.678229][ T5844] Cannot create hsr debugfs directory [ 95.216513][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.242034][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.260767][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.273489][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.365825][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.381961][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.414177][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.425660][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.429673][ T5850] Bluetooth: hci0: command tx timeout [ 95.438143][ T5850] Bluetooth: hci3: command tx timeout [ 95.439844][ T5853] Bluetooth: hci1: command tx timeout [ 95.443906][ T5856] Bluetooth: hci2: command tx timeout [ 95.509130][ T5850] Bluetooth: hci4: command tx timeout [ 95.536336][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.548403][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.560649][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.572600][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.704552][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.712403][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.726232][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.740613][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.775881][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.862207][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.877902][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.885413][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.927281][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.934918][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.016757][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.036680][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.056269][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.089906][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.115670][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.171988][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.222927][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.230298][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.252081][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.259342][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.292084][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.380803][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.397808][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.416099][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.423410][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.465343][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.472611][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.528195][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.588378][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.595882][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.647218][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.654479][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.767225][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.795301][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.857395][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.951336][ T5838] veth0_vlan: entered promiscuous mode [ 96.988618][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.026645][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.048458][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.055907][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.104209][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.111556][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.133376][ T5838] veth1_vlan: entered promiscuous mode [ 97.275400][ T9] cfg80211: failed to load regulatory.db [ 97.292238][ T5838] veth0_macvtap: entered promiscuous mode [ 97.323772][ T5838] veth1_macvtap: entered promiscuous mode [ 97.390321][ T5836] veth0_vlan: entered promiscuous mode [ 97.411071][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.444183][ T5836] veth1_vlan: entered promiscuous mode [ 97.474351][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.510492][ T5850] Bluetooth: hci1: command tx timeout [ 97.516167][ T5850] Bluetooth: hci0: command tx timeout [ 97.522812][ T5856] Bluetooth: hci3: command tx timeout [ 97.522838][ T5853] Bluetooth: hci2: command tx timeout [ 97.540537][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.561420][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.590290][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.599871][ T5853] Bluetooth: hci4: command tx timeout [ 97.605822][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.628515][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.685760][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.734356][ T5836] veth0_macvtap: entered promiscuous mode [ 97.763752][ T5836] veth1_macvtap: entered promiscuous mode [ 97.853672][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.890660][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.981947][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.992057][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.002360][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.011838][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.037224][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.053993][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.075994][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.085744][ T5844] veth0_vlan: entered promiscuous mode [ 98.175022][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.184126][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.214420][ T5844] veth1_vlan: entered promiscuous mode [ 98.243550][ T5834] veth0_vlan: entered promiscuous mode [ 98.305748][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.326457][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.339324][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.363054][ T5834] veth1_vlan: entered promiscuous mode [ 98.477459][ T5835] veth0_vlan: entered promiscuous mode [ 98.496233][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.538995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.548038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 98.557872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.566758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.575856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.623024][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.632698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.643329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.668997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.691025][ T5844] veth0_macvtap: entered promiscuous mode [ 98.746236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.860145][ T5844] veth1_macvtap: entered promiscuous mode [ 98.944105][ T5834] veth0_macvtap: entered promiscuous mode [ 98.990137][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.028571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 99.172943][ T5834] veth1_macvtap: entered promiscuous mode [ 99.387093][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.453905][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.506629][ T5965] Zero length message leads to an empty skb [ 99.521457][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.555780][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.588559][ T5853] Bluetooth: hci0: command tx timeout [ 99.594877][ T5841] Bluetooth: hci3: command tx timeout [ 99.594897][ T5850] Bluetooth: hci1: command tx timeout [ 99.601333][ T5853] Bluetooth: hci2: command tx timeout [ 99.606632][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.669488][ T5853] Bluetooth: hci4: command tx timeout [ 99.851887][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.868338][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.160709][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.201417][ T5835] veth1_vlan: entered promiscuous mode [ 100.213538][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.254336][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.271454][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.290989][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.302978][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.344581][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 100.385584][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.417072][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.429983][ T5899] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 100.440514][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.487956][ T5899] usb 1-1: config 0 descriptor?? [ 100.497777][ T5835] veth0_macvtap: entered promiscuous mode [ 100.664609][ T5835] veth1_macvtap: entered promiscuous mode [ 100.712926][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.724271][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.733750][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.746535][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.771211][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.784493][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.837334][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.847240][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.855282][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.885955][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.928641][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.937914][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.952033][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.963424][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.007608][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.028242][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.038360][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.040885][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.051504][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.063686][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.067420][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.085058][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.152532][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 101.165622][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.208384][ T5899] usb 1-1: USB disconnect, device number 2 [ 101.452286][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.534237][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.568532][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.701330][ T30] audit: type=1326 audit(1754596759.723:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5984 comm="syz.3.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fc078ebe9 code=0x0 [ 101.717743][ T5899] kernel read not supported for file /video37 (pid: 5899 comm: kworker/1:3) [ 101.765918][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.786312][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.047219][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.088868][ T980] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.449176][ T5837] usb 3-1: device descriptor read/64, error -71 [ 102.601057][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 102.642124][ T980] usb 2-1: config 2 has an invalid interface number: 21 but max is 0 [ 102.751025][ T980] usb 2-1: config 2 has no interface number 0 [ 102.757690][ T980] usb 2-1: config 2 interface 21 has no altsetting 0 [ 103.128637][ T5837] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.137640][ T980] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=31.1e [ 103.288674][ T5837] usb 3-1: device descriptor read/64, error -71 [ 103.409121][ T5837] usb usb3-port1: attempt power cycle [ 103.916286][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.949872][ T980] usb 2-1: Product: syz [ 103.954212][ T980] usb 2-1: Manufacturer: syz [ 103.959009][ T980] usb 2-1: SerialNumber: syz [ 103.978886][ T5837] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.097233][ T5837] usb 3-1: device descriptor read/8, error -71 [ 104.261266][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.390490][ T5837] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.419145][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.501272][ T980] quatech2 2-1:2.21: Quatech 2nd gen USB to Serial Driver converter detected [ 104.509882][ T5837] usb 3-1: device descriptor read/8, error -71 [ 104.612251][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 104.664734][ T5837] usb usb3-port1: unable to enumerate USB device [ 105.377570][ T980] usb 2-1: qt2_attach - failed to power on unit: -71 [ 105.384822][ T980] quatech2 2-1:2.21: probe with driver quatech2 failed with error -71 [ 105.447354][ T980] usb 2-1: USB disconnect, device number 2 [ 105.697456][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.706806][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.717752][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.727029][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.736280][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.745825][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.755258][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.764510][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.773806][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 108.897702][ T6041] random: crng reseeded on system resumption [ 109.127139][ T24] libceph: connect (1)[c::]:6789 error -101 [ 109.145338][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 109.424871][ T24] libceph: connect (1)[c::]:6789 error -101 [ 109.453476][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 109.779840][ T6057] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 109.963386][ T6040] ceph: No mds server is up or the cluster is laggy [ 110.066282][ T6059] __nla_validate_parse: 45 callbacks suppressed [ 110.066303][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 110.569891][ T1210] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.940742][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 110.955870][ T1210] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 110.977013][ T1210] usb 3-1: New USB device found, idVendor=e449, idProduct=60a1, bcdDevice=a1.4f [ 111.002155][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.044809][ T1210] usb 3-1: Product: syz [ 111.069745][ T1210] usb 3-1: Manufacturer: syz [ 111.095274][ T1210] usb 3-1: SerialNumber: syz [ 111.142925][ T1210] usb 3-1: config 0 descriptor?? [ 111.402792][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 114.339987][ T5837] usb 3-1: USB disconnect, device number 6 [ 114.491679][ T6085] Bluetooth: MGMT ver 1.23 [ 114.928008][ T6100] xt_hashlimit: size too large, truncated to 1048576 [ 115.332340][ T6104] process 'syz.2.36' launched './file2' with NULL argv: empty string added [ 115.628645][ T6108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.031513][ T6118] fuse: Bad value for 'fd' [ 117.529248][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 119.389182][ T6126] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 119.788392][ T6130] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.811101][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.902894][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.231768][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 121.251936][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.270826][ T6147] syz.3.46: attempt to access beyond end of device [ 121.270826][ T6147] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 121.298562][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.315804][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.328359][ T5837] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.342661][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.361417][ T5837] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.370838][ T5837] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.383560][ T5837] usb 1-1: Manufacturer: syz [ 121.399388][ T5837] usb 1-1: config 0 descriptor?? [ 121.698722][ T5837] rc_core: IR keymap rc-hauppauge not found [ 121.704797][ T5837] Registered IR keymap rc-empty [ 121.714991][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.738699][ T1210] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.746976][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.781414][ T5837] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 121.798572][ T5837] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 121.817228][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.827314][ C0] mceusb 1-1:0.0: long-range (0x1) receiver active [ 121.840025][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.869029][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.889969][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.908749][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 121.925591][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.934223][ T1210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.954401][ T1210] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 121.969367][ T1210] usb 2-1: config 7 has no interface number 0 [ 121.988897][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.015546][ T1210] usb 2-1: language id specifier not provided by device, defaulting to English [ 122.053942][ T1210] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 122.063506][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.083940][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.098772][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.133222][ T1210] usb 2-1: Product: syz [ 122.137475][ T1210] usb 2-1: SerialNumber: syz [ 122.168856][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.208797][ T5837] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.282398][ T5837] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 122.293150][ T5837] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 122.366870][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 122.746911][ T5837] usb 1-1: USB disconnect, device number 3 [ 124.719891][ T1210] usb 2-1: USB disconnect, device number 3 [ 124.775489][ T30] audit: type=1326 audit(1754596782.803:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6181 comm="syz.3.56" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fc078ebe9 code=0x0 [ 126.376556][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 127.465644][ T6208] qrtr: Invalid version 47 [ 127.821015][ T1210] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.001801][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 128.010376][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.020910][ T1210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.033433][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.045003][ T1210] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 128.066575][ T1210] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 128.199091][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 128.278720][ T1210] usb 3-1: Product: syz [ 128.283179][ T1210] usb 3-1: Manufacturer: syz [ 128.288092][ T1210] usb 3-1: SerialNumber: syz [ 128.355505][ T1210] usb 3-1: config 0 descriptor?? [ 128.388223][ T1210] usb 3-1: NFC: intf ffff88801a515000 id ffffffff8eb3fac0 [ 128.864668][ T1210] nfcmrvl 3-1:0.0: NFC: registered with nci successfully [ 128.882244][ T1210] usb 3-1: USB disconnect, device number 7 [ 128.916898][ T1210] usb 3-1: NFC: intf ffff88801a515000 [ 129.086280][ T6229] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.66'. [ 129.450194][ T6230] warning: `syz.0.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.035438][ T6234] No control pipe specified [ 130.622804][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 130.643273][ T6242] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 130.643273][ T6242] program syz.0.73 not setting count and/or reply_len properly [ 130.925395][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 131.837040][ T6242] sg_write: data in/out 8156/154 bytes for SCSI command 0x0-- guessing data in; [ 131.837040][ T6242] program syz.0.73 not setting count and/or reply_len properly [ 133.350256][ T6267] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 134.759981][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 135.541749][ T6291] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.83'. [ 135.816615][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 136.726645][ T5853] Bluetooth: hci4: link tx timeout [ 136.733270][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.370289][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.378708][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.512656][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 138.678697][ T980] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 138.781382][ T6306] syz.2.86 (6306) used greatest stack depth: 16936 bytes left [ 138.804834][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 139.512087][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.538549][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.554124][ T6330] overlayfs: failed to resolve './file0': -2 [ 139.566182][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 139.789971][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.810256][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.821234][ T980] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.829685][ T980] usb 5-1: Manufacturer: syz [ 139.847483][ T980] usb 5-1: config 0 descriptor?? [ 139.945242][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 140.896739][ T980] rc_core: IR keymap rc-hauppauge not found [ 140.909204][ T980] Registered IR keymap rc-empty [ 140.925126][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 141.046891][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 141.068636][ T6352] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.101'. [ 141.080005][ T980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 141.309258][ T980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 141.704471][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 141.780119][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 141.831298][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 141.879932][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 141.919530][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 142.019091][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 142.072115][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 142.459483][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 142.790960][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 142.830494][ T980] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 142.863756][ T980] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 143.014072][ T980] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 144.195881][ T6371] bridge_slave_0: left allmulticast mode [ 144.202541][ T6371] bridge_slave_0: left promiscuous mode [ 144.220916][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.257611][ T6371] bridge_slave_1: left allmulticast mode [ 144.278088][ T6371] bridge_slave_1: left promiscuous mode [ 144.291132][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.318899][ T6371] bond0: (slave bond_slave_0): Releasing backup interface [ 144.360375][ T6371] bond0: (slave bond_slave_1): Releasing backup interface [ 144.436424][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 145.710151][ T6371] team0: Port device team_slave_0 removed [ 145.796588][ T6371] team0: Port device team_slave_1 removed [ 145.804638][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.812903][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.827268][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.836752][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.037177][ T6383] Smack: duplicate mount options [ 146.378960][ T5935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.447681][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 147.188779][ T5935] usb 1-1: device descriptor read/64, error -71 [ 147.458728][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.418510][ T5935] usb 1-1: device descriptor read/64, error -71 [ 148.648783][ T5935] usb usb1-port1: attempt power cycle [ 148.807238][ T24] usb 5-1: USB disconnect, device number 2 [ 149.799050][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.851284][ T5935] usb 1-1: device descriptor read/8, error -71 [ 150.842188][ T6415] geneve2: entered allmulticast mode [ 152.153661][ T6428] No control pipe specified [ 152.448603][ T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.662794][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.742596][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.043398][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.100047][ T980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.130762][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.163856][ T980] usb 4-1: config 0 descriptor?? [ 153.264402][ T6436] random: crng reseeded on system resumption [ 153.874331][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 153.883322][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 153.947929][ T980] usb 4-1: USB disconnect, device number 2 [ 154.097985][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.125'. [ 155.294719][ T6463] mmap: syz.1.128 (6463) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.949648][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 157.960251][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 158.600524][ T6498] geneve2: entered allmulticast mode [ 158.947851][ T6499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.082287][ T6543] xt_hashlimit: size too large, truncated to 1048576 [ 163.840977][ T1210] libceph: connect (1)[c::]:6789 error -101 [ 163.847103][ T1210] libceph: mon0 (1)[c::]:6789 connect error [ 163.972497][ T6532] ceph: No mds server is up or the cluster is laggy [ 164.109943][ T1210] libceph: connect (1)[c::]:6789 error -101 [ 164.248678][ T1210] libceph: mon0 (1)[c::]:6789 connect error [ 164.265361][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.150'. [ 164.275546][ T6550] netlink: zone id is out of range [ 164.658313][ T6552] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.151'. [ 165.594280][ T6556] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.152'. [ 166.457752][ T30] audit: type=1326 audit(1754596824.483:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62d8f8ebe9 code=0x0 [ 168.213642][ T6587] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.162'. [ 168.476445][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 170.477312][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.163190][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.169249][ T6606] random: crng reseeded on system resumption [ 171.258488][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.285896][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.347786][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.415631][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.469038][ T43] usb 3-1: config 0 descriptor?? [ 172.709163][ T43] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 173.749069][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.758954][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.676306][ T6636] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.175'. [ 174.718597][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.802802][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.090617][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 176.072564][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.072850][ T5899] usb 3-1: USB disconnect, device number 8 [ 176.149445][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.559673][ T6647] random: crng reseeded on system resumption [ 176.650389][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.050080][ T6648] FAULT_INJECTION: forcing a failure. [ 177.050080][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.159338][ T6652] program syz.2.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.469222][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.1.176 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 177.469254][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.469270][ T6648] Call Trace: [ 177.469280][ T6648] [ 177.469288][ T6648] dump_stack_lvl+0x189/0x250 [ 177.469317][ T6648] ? irqentry_exit+0x74/0x90 [ 177.469335][ T6648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.469366][ T6648] should_fail_ex+0x414/0x560 [ 177.469387][ T6648] _copy_from_iter+0x1db/0x16f0 [ 177.469409][ T6648] ? sock_alloc_send_pskb+0x875/0x990 [ 177.469429][ T6648] ? __pfx__copy_from_iter+0x10/0x10 [ 177.469455][ T6648] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 177.469474][ T6648] skb_copy_datagram_from_iter+0xf5/0x720 [ 177.469492][ T6648] ? __lock_acquire+0xab9/0xd20 [ 177.469507][ T6648] ? skb_put+0x11b/0x210 [ 177.469532][ T6648] queue_oob+0x11e/0x5a0 [ 177.469571][ T6648] ? __pfx_queue_oob+0x10/0x10 [ 177.469594][ T6648] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 177.469620][ T6648] unix_stream_sendmsg+0xaf9/0xc90 [ 177.469650][ T6648] ? is_bpf_text_address+0x26/0x2b0 [ 177.469667][ T6648] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 177.469697][ T6648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.469712][ T6648] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 177.469734][ T6648] __sock_sendmsg+0x21c/0x270 [ 177.469755][ T6648] ____sys_sendmsg+0x505/0x830 [ 177.469783][ T6648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.469816][ T6648] ? import_iovec+0x74/0xa0 [ 177.469841][ T6648] ___sys_sendmsg+0x21f/0x2a0 [ 177.469867][ T6648] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.469918][ T6648] ? __fget_files+0x2a/0x420 [ 177.469935][ T6648] ? __fget_files+0x3a0/0x420 [ 177.469960][ T6648] __x64_sys_sendmsg+0x19b/0x260 [ 177.469986][ T6648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.470017][ T6648] ? __pfx_ksys_write+0x10/0x10 [ 177.470029][ T6648] ? rcu_is_watching+0x15/0xb0 [ 177.470051][ T6648] ? do_syscall_64+0xbe/0x3b0 [ 177.470072][ T6648] do_syscall_64+0xfa/0x3b0 [ 177.470088][ T6648] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.470103][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.470118][ T6648] ? clear_bhb_loop+0x60/0xb0 [ 177.470137][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.470152][ T6648] RIP: 0033:0x7f0f79f8ebe9 [ 177.470173][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.470256][ T6648] RSP: 002b:00007f0f7ad44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.470279][ T6648] RAX: ffffffffffffffda RBX: 00007f0f7a1b5fa0 RCX: 00007f0f79f8ebe9 [ 177.470297][ T6648] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000004 [ 177.470310][ T6648] RBP: 00007f0f7ad44090 R08: 0000000000000000 R09: 0000000000000000 [ 177.470323][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.470334][ T6648] R13: 00007f0f7a1b6038 R14: 00007f0f7a1b5fa0 R15: 00007ffd7a3d2a18 [ 177.470368][ T6648] [ 177.791367][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.799645][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.872998][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.136558][ T6656] geneve2: entered allmulticast mode [ 180.369847][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.414392][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 180.424278][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 182.968577][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.215501][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.490252][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.725555][ T6665] geneve2: entered allmulticast mode [ 185.549504][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.222851][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.231677][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.749434][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.957208][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.304069][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.324509][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.351333][ T1210] libceph: connect (1)[c::]:6789 error -101 [ 189.357627][ T1210] libceph: mon0 (1)[c::]:6789 connect error [ 189.524774][ T6713] random: crng reseeded on system resumption [ 189.583036][ T6704] ceph: No mds server is up or the cluster is laggy [ 189.804116][ T1210] libceph: connect (1)[c::]:6789 error -101 [ 189.939701][ T1210] libceph: mon0 (1)[c::]:6789 connect error [ 190.314974][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.504057][ T6721] ------------[ cut here ]------------ [ 190.510160][ T6721] WARNING: CPU: 0 PID: 6721 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 190.520172][ T6721] Modules linked in: [ 190.524348][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.1.197 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 190.534243][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.544381][ T6721] RIP: 0010:folio_memcg+0x1a8/0x310 [ 190.549849][ T6721] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 190.569912][ T6721] RSP: 0018:ffffc9001c027250 EFLAGS: 00010283 [ 190.576016][ T6721] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 190.584066][ T6721] RDX: ffffc9000bfb9000 RSI: 00000000000019d8 RDI: 00000000000019d9 [ 190.592197][ T6721] RBP: 0000000000000000 R08: ffffea00009e9187 R09: 1ffffd400013d230 [ 190.601417][ T6721] R10: dffffc0000000000 R11: fffff9400013d231 R12: ffffea00009e91b0 [ 190.610851][ T6721] R13: dffffc0000000000 R14: ffff888028685180 R15: 0000000000000002 [ 190.619066][ T6721] FS: 00007f0f7ad446c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 190.628266][ T6721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.635664][ T6721] CR2: 0000000000000000 CR3: 0000000034e88000 CR4: 00000000003526f0 [ 190.643838][ T6721] Call Trace: [ 190.647248][ T6721] [ 190.650354][ T6721] workingset_activation+0x5f/0x4a0 [ 190.655712][ T6721] ? folio_mark_accessed+0x361/0x4a0 [ 190.661217][ T6721] folio_mark_accessed+0x3b5/0x4a0 [ 190.666546][ T6721] kvm_release_page_clean+0x9a/0xe0 [ 190.671894][ T6721] kvm_tdp_page_fault+0x2dd/0x370 [ 190.676994][ T6721] kvm_mmu_do_page_fault+0x2c5/0x640 [ 190.682433][ T6721] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 190.688339][ T6721] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 190.694074][ T6721] kvm_mmu_page_fault+0x22f/0xb70 [ 190.699223][ T6721] ? __pfx_handle_ept_violation+0x10/0x10 [ 190.705791][ T6721] vmx_handle_exit+0x1090/0x18a0 [ 190.711428][ T6721] ? vcpu_run+0x361c/0x6f70 [ 190.716006][ T6721] ? rcu_is_watching+0x15/0xb0 [ 190.721034][ T6721] vcpu_run+0x432e/0x6f70 [ 190.725416][ T6721] ? vcpu_run+0x361c/0x6f70 [ 190.730144][ T6721] ? __pfx_vcpu_run+0x10/0x10 [ 190.735010][ T6721] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 190.740936][ T6721] ? rcu_is_watching+0x15/0xb0 [ 190.745764][ T6721] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 190.751659][ T6721] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 190.757433][ T6721] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 190.763738][ T6721] ? rcu_is_watching+0x15/0xb0 [ 190.768753][ T6721] ? look_up_lock_class+0x74/0x170 [ 190.774009][ T6721] ? register_lock_class+0x51/0x320 [ 190.779440][ T6721] ? __lock_acquire+0xab9/0xd20 [ 190.784348][ T6721] kvm_vcpu_ioctl+0x95c/0xe90 [ 190.789193][ T6721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.794596][ T6721] ? __lock_acquire+0xab9/0xd20 [ 190.799824][ T6721] ? __asan_memset+0x22/0x50 [ 190.805768][ T6721] ? smack_file_ioctl+0x302/0x340 [ 190.812812][ T6721] ? __pfx_smack_file_ioctl+0x10/0x10 [ 190.818307][ T6721] ? __fget_files+0x2a/0x420 [ 190.823441][ T6721] ? __fget_files+0x3a0/0x420 [ 190.828299][ T6721] ? __fget_files+0x2a/0x420 [ 190.833273][ T6721] ? bpf_lsm_file_ioctl+0x9/0x20 [ 190.838327][ T6721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.843680][ T6721] __se_sys_ioctl+0xfc/0x170 [ 190.848557][ T6721] do_syscall_64+0xfa/0x3b0 [ 190.853425][ T6721] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.858982][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.865634][ T6721] ? clear_bhb_loop+0x60/0xb0 [ 190.870553][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.876978][ T6721] RIP: 0033:0x7f0f79f8ebe9 [ 190.881908][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.902279][ T6721] RSP: 002b:00007f0f7ad44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.912455][ T6721] RAX: ffffffffffffffda RBX: 00007f0f7a1b5fa0 RCX: 00007f0f79f8ebe9 [ 190.921905][ T6721] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 190.930737][ T6721] RBP: 00007f0f7a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.938932][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.947200][ T6721] R13: 00007f0f7a1b6038 R14: 00007f0f7a1b5fa0 R15: 00007ffd7a3d2a18 [ 190.955640][ T6721] [ 190.958805][ T6721] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.966141][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.1.197 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 190.976175][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.986455][ T6721] Call Trace: [ 190.989784][ T6721] [ 190.992826][ T6721] dump_stack_lvl+0x99/0x250 [ 190.997537][ T6721] ? __asan_memcpy+0x40/0x70 [ 191.002164][ T6721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.007395][ T6721] ? __pfx__printk+0x10/0x10 [ 191.012057][ T6721] panic+0x2db/0x790 [ 191.015985][ T6721] ? __pfx_panic+0x10/0x10 [ 191.020447][ T6721] __warn+0x31b/0x4b0 [ 191.024610][ T6721] ? folio_memcg+0x1a8/0x310 [ 191.029776][ T6721] ? folio_memcg+0x1a8/0x310 [ 191.034404][ T6721] report_bug+0x2be/0x4f0 [ 191.038777][ T6721] ? folio_memcg+0x1a8/0x310 [ 191.043661][ T6721] ? folio_memcg+0x1a8/0x310 [ 191.048560][ T6721] ? folio_memcg+0x1aa/0x310 [ 191.053232][ T6721] handle_bug+0x84/0x160 [ 191.057558][ T6721] exc_invalid_op+0x1a/0x50 [ 191.062387][ T6721] asm_exc_invalid_op+0x1a/0x20 [ 191.067544][ T6721] RIP: 0010:folio_memcg+0x1a8/0x310 [ 191.072788][ T6721] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 191.093224][ T6721] RSP: 0018:ffffc9001c027250 EFLAGS: 00010283 [ 191.099431][ T6721] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 191.107824][ T6721] RDX: ffffc9000bfb9000 RSI: 00000000000019d8 RDI: 00000000000019d9 [ 191.116102][ T6721] RBP: 0000000000000000 R08: ffffea00009e9187 R09: 1ffffd400013d230 [ 191.124649][ T6721] R10: dffffc0000000000 R11: fffff9400013d231 R12: ffffea00009e91b0 [ 191.132659][ T6721] R13: dffffc0000000000 R14: ffff888028685180 R15: 0000000000000002 [ 191.140677][ T6721] ? folio_memcg+0x1a7/0x310 [ 191.145348][ T6721] workingset_activation+0x5f/0x4a0 [ 191.150664][ T6721] ? folio_mark_accessed+0x361/0x4a0 [ 191.156001][ T6721] folio_mark_accessed+0x3b5/0x4a0 [ 191.161352][ T6721] kvm_release_page_clean+0x9a/0xe0 [ 191.166648][ T6721] kvm_tdp_page_fault+0x2dd/0x370 [ 191.172054][ T6721] kvm_mmu_do_page_fault+0x2c5/0x640 [ 191.177467][ T6721] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 191.183405][ T6721] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 191.188981][ T6721] kvm_mmu_page_fault+0x22f/0xb70 [ 191.194039][ T6721] ? __pfx_handle_ept_violation+0x10/0x10 [ 191.199877][ T6721] vmx_handle_exit+0x1090/0x18a0 [ 191.204843][ T6721] ? vcpu_run+0x361c/0x6f70 [ 191.209398][ T6721] ? rcu_is_watching+0x15/0xb0 [ 191.214197][ T6721] vcpu_run+0x432e/0x6f70 [ 191.218577][ T6721] ? vcpu_run+0x361c/0x6f70 [ 191.223155][ T6721] ? __pfx_vcpu_run+0x10/0x10 [ 191.228034][ T6721] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 191.233788][ T6721] ? rcu_is_watching+0x15/0xb0 [ 191.238758][ T6721] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 191.244349][ T6721] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 191.250101][ T6721] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 191.256115][ T6721] ? rcu_is_watching+0x15/0xb0 [ 191.260905][ T6721] ? look_up_lock_class+0x74/0x170 [ 191.266062][ T6721] ? register_lock_class+0x51/0x320 [ 191.271301][ T6721] ? __lock_acquire+0xab9/0xd20 [ 191.276202][ T6721] kvm_vcpu_ioctl+0x95c/0xe90 [ 191.281013][ T6721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.286231][ T6721] ? __lock_acquire+0xab9/0xd20 [ 191.291117][ T6721] ? __asan_memset+0x22/0x50 [ 191.295735][ T6721] ? smack_file_ioctl+0x302/0x340 [ 191.300783][ T6721] ? __pfx_smack_file_ioctl+0x10/0x10 [ 191.306188][ T6721] ? __fget_files+0x2a/0x420 [ 191.310927][ T6721] ? __fget_files+0x3a0/0x420 [ 191.315646][ T6721] ? __fget_files+0x2a/0x420 [ 191.320277][ T6721] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.325338][ T6721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.330576][ T6721] __se_sys_ioctl+0xfc/0x170 [ 191.335201][ T6721] do_syscall_64+0xfa/0x3b0 [ 191.339822][ T6721] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.345040][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.351132][ T6721] ? clear_bhb_loop+0x60/0xb0 [ 191.355876][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.361820][ T6721] RIP: 0033:0x7f0f79f8ebe9 [ 191.366282][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.386091][ T6721] RSP: 002b:00007f0f7ad44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.394534][ T6721] RAX: ffffffffffffffda RBX: 00007f0f7a1b5fa0 RCX: 00007f0f79f8ebe9 [ 191.402534][ T6721] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 191.410533][ T6721] RBP: 00007f0f7a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 191.418651][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.427063][ T6721] R13: 00007f0f7a1b6038 R14: 00007f0f7a1b5fa0 R15: 00007ffd7a3d2a18 [ 191.435440][ T6721] [ 191.452941][ T6721] Kernel Offset: disabled [ 191.457406][ T6721] Rebooting in 86400 seconds..