last executing test programs: 20m12.171814183s ago: executing program 0 (id=672): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x13) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x1c, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0) 20m10.779055529s ago: executing program 0 (id=675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000000}], 0x2, 0xa0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) statx(r2, &(0x7f0000001500)='./file1\x00', 0x0, 0x7ff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="2f2c7270635f706970656673002c6673757569643d386b3739303565632d353236392d3934d8372d323065342d30333836366e", @ANYRESDEC=r8, @ANYBLOB='uid=\x00'/15, @ANYRESDEC=0xee00]) 20m6.172707398s ago: executing program 0 (id=692): socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200f, 0xfffffffffffffffe}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x100000c3, 0x2, {}, 0x20800}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x4076e2, 0x8000}, 0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)=0x32) read(r4, &(0x7f00000019c0)=""/4107, 0x100b) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) 20m1.708512858s ago: executing program 0 (id=690): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\f\x05\x17\x99\x93\x86\x8a\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x82\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000000)='./file1\x00', &(0x7f0000000580)={[&(0x7f00000002c0)='system_u:object_r:hugetlbfs_t:s0\x00', &(0x7f0000000300)='\x00', &(0x7f00000003c0)='system_u:object_r:hugetlbfs_t:s0\x00', &(0x7f0000000440)=',-:#Q+\\{\\/{{{\x00', &(0x7f0000000480)='/proc/thread-self/attr/exec\x00', 0x0, &(0x7f0000000500)='*-&-+#[\x00', &(0x7f0000000540)='autofs\x00']}, &(0x7f0000000640)={[&(0x7f0000000600)='!):\x00']}, 0x100) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x200020, 0x0) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000540)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}, 0x8000) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 19m59.849479805s ago: executing program 0 (id=695): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13, 0x1000c8}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f00000001c0), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 19m57.094009864s ago: executing program 0 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000000000000005000900", 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 19m56.002508673s ago: executing program 32 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000000000000005000900", 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 14m0.187258935s ago: executing program 1 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d4a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x1, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) 13m57.359787109s ago: executing program 1 (id=1493): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d4a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x1, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x90, 0x70, ""/112}, &(0x7f0000000400)=0x90, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) 13m54.814988054s ago: executing program 1 (id=1498): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, 0x0) syz_emit_vhci(0x0, 0x4d) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) mkdir(0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, 0x0, 0x24068814) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) 13m52.941321773s ago: executing program 1 (id=1502): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 13m52.526963549s ago: executing program 1 (id=1505): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, 0x0) syz_emit_vhci(0x0, 0x4d) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) mkdir(0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, 0x0, 0x24068814) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) 13m50.126092899s ago: executing program 1 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 13m35.006299584s ago: executing program 33 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 12m7.289997363s ago: executing program 3 (id=1702): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r3, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61105c00"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m56.278789908s ago: executing program 3 (id=1716): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x1000, 0x34325842, 0x500, 0x2d0, 0x0, @discrete={0x7, 0x4}}) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x3fc, 0x4000, 0x0, 0x161}, &(0x7f0000000240), &(0x7f0000000100)) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000009f3f92e84ba51e030b9ae5630c83a1abfc462041d2f1832ffe4056d0"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x10, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100f4ff00000000bf91000000000000b5020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x202000) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000580)={0x4, 0x40, "1f14dcbf2f27ec39797b4896095e2c8b70d402d52071b470", {0x8, 0x9}, 0x6}) msync(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) syz_clone(0xa0201400, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r7, 0x4a0, 0x6, 0x6, 0xa5, 0x5}, &(0x7f0000000240)=0x14) 11m51.485865584s ago: executing program 3 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x24044000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getroute={0x14, 0x1a, 0x200, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x42) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x30840, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) 11m49.819909461s ago: executing program 3 (id=1728): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 11m48.68547669s ago: executing program 3 (id=1730): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d4a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x1, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x90, 0x70, ""/112}, &(0x7f0000000400)=0x90, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x21, 0x2, 0x2) io_destroy(0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 11m46.486560199s ago: executing program 3 (id=1737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 11m31.222754028s ago: executing program 34 (id=1737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 18.22653181s ago: executing program 5 (id=3094): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r2 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r2, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) 15.786532931s ago: executing program 5 (id=3101): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 14.739879433s ago: executing program 6 (id=3103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, 0x0, 0x0) shutdown(r5, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 14.388162739s ago: executing program 5 (id=3104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x121041) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, 0x0, 0x0) shutdown(r5, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 11.49970529s ago: executing program 2 (id=3109): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x0) memfd_secret(0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) 11.236609731s ago: executing program 6 (id=3111): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 11.073729718s ago: executing program 5 (id=3112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r5, 0x4, 0x0, 0x0, @void, @value}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0700000000000000000000000000000000004817095d"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r3}, 0x20) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x34000811) 10.516332928s ago: executing program 2 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, 0x0, 0x0) shutdown(r5, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10.318492464s ago: executing program 6 (id=3114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) 8.599306752s ago: executing program 2 (id=3116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x121041) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.598296384s ago: executing program 6 (id=3117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 7.214490232s ago: executing program 7 (id=3118): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, &(0x7f0000000040)=0x4, 0xfed, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.214092057s ago: executing program 4 (id=3119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x2, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0xbd, 0x8, 0x4, 0x3}, 0x6) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) 7.135512369s ago: executing program 6 (id=3120): r0 = syz_open_dev$audion(0x0, 0x1ff, 0x0) ioctl$LOOP_SET_FD(r0, 0x8004500f, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 6.072735035s ago: executing program 7 (id=3121): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, 0x0, 0x0) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 5.757727673s ago: executing program 4 (id=3122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, 0x0, 0x0) shutdown(r5, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.752463917s ago: executing program 2 (id=3123): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, 0x0, 0x0) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 4.296546626s ago: executing program 7 (id=3124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000000000000005000900", 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 4.230176467s ago: executing program 2 (id=3125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x988, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0xbd, 0x8, 0x4, 0x3}, 0x6) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) 4.138809741s ago: executing program 4 (id=3126): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.040271969s ago: executing program 2 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, &(0x7f0000000040)=0x4, 0xfed, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) 3.015225982s ago: executing program 6 (id=3128): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioperm(0x284, 0x7f, 0xe3) r3 = memfd_secret(0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x7000) fchmod(r3, 0x0) 2.85545243s ago: executing program 7 (id=3129): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 2.808204247s ago: executing program 4 (id=3130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000001a00)={&(0x7f00000015c0)={{@any, 0x7ff}, {@host, 0x9}, 0x400, "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"}, 0x418, 0x7f867be1}) r6 = openat$cgroup_pressure(r4, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f00000001c0)={'some', 0x20, 0x6, 0x20, 0x10000100ffffd}, 0x2f) 2.073007765s ago: executing program 5 (id=3131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x2, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0xbd, 0x8, 0x4, 0x3}, 0x6) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket(0x15, 0x5, 0x0) 1.401326651s ago: executing program 4 (id=3132): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, 0x0, 0x0) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.300108101s ago: executing program 7 (id=3133): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x2, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000950000004621dd2f93014a360b62e856856a0c61e2e2b22de16321f3a27e8716a90fdd78168a36f5100e2e02f8f99f50c08cbb2852cd7760de0182cab05cd89d37bdc28c6256bcb8f183eb98907e2271f1cc702b49bbc7e19b3c05d5a23cde766536371fe7373d3989b1891fc9e435021408626a98f1541031e46bdca238b2ec4f93e60670772d1a08fe2223b3b65f8d31e8b787fdca3df71eaec1de1d682c430a07f8d259506625ad105b6811a0000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0xbd, 0x8, 0x4, 0x3}, 0x6) close(r0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000580)=@md5={0x1, "e20c9fbf5e40fba0dd356e23434fab5b"}, 0x11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x702, 0x36, 0x0, &(0x7f0000000000)="e460334470d8d4006b00c15286dd4b0c233547f2cbfa947001bd9e27f289c147631f7be047c25d7639d79d8b588340e30d0cb1837e9a", 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) 205.601703ms ago: executing program 4 (id=3134): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) connect$pppl2tp(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xe3, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x5, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x5, 0x8004, 0x5, 0xfffffff3, 0x129432e5, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x7, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1000008, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x100bc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xba, 0xfffffffe, 0x102, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xfffffff9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1c9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x0, 0x7fff, 0x101, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x40, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x8, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x10007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x80000200, 0xffff3441, 0xfff]}, 0x45c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d0000000014000280080001000100000008000200118000000500210000", @ANYRES32], 0x140}}, 0x40) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) 151.406393ms ago: executing program 7 (id=3135): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 0s ago: executing program 5 (id=3136): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0xa508}, &(0x7f0000000340)=0x8) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): short [ 490.918122][ T5874] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 490.985889][ T5874] usb 4-1: config 0 has no interface number 0 [ 491.182094][ T2957] Bluetooth: Error in BCSP hdr checksum [ 491.301287][ T5874] usb 4-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 491.306579][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 491.328852][ T5874] usb 4-1: config 0 interface 143 has no altsetting 0 [ 491.436442][ T5874] usb 4-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 491.449505][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.457835][ T5874] usb 4-1: Product: syz [ 491.462177][ T5874] usb 4-1: Manufacturer: syz [ 491.466769][ T5874] usb 4-1: SerialNumber: syz [ 491.597724][ T1118] Bluetooth: Error in BCSP hdr checksum [ 491.617958][T11067] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 491.625805][T11067] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1121'. [ 491.642490][T11067] team0: Port device geneve0 added [ 491.659135][T11067] CUSE: unknown device info "ÿ" [ 491.664215][T11067] CUSE: zero length info key specified [ 491.679239][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 491.787263][ T2920] Bluetooth: Error in BCSP hdr checksum [ 491.870227][ T5874] r8152-cfgselector 4-1: Unknown version 0x0000 [ 491.876500][ T5874] r8152-cfgselector 4-1: config 0 descriptor?? [ 492.061861][ T2920] Bluetooth: Error in BCSP hdr checksum [ 492.076287][ T5874] r8152 4-1:0.143: Expected endpoints are not found [ 492.292793][T11075] veth0_vlan: left promiscuous mode [ 492.300573][ T1118] Bluetooth: Error in BCSP hdr checksum [ 492.300595][T11075] veth0_vlan: entered promiscuous mode [ 492.343888][T11075] C speed is unknown, defaulting to 1000 [ 492.557474][ T5922] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 492.562181][ T2957] Bluetooth: Error in BCSP hdr checksum [ 494.010073][T11091] /dev/nullb0: Can't open blockdev [ 494.198371][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'. [ 494.273767][T11085] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 494.281655][T11085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'. [ 494.381081][T11085] CUSE: unknown device info "ÿ" [ 494.386010][T11085] CUSE: zero length info key specified [ 494.869704][T11107] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 497.593097][T11135] veth0_vlan: left promiscuous mode [ 497.599576][T11135] veth0_vlan: entered promiscuous mode [ 497.631314][T11135] C speed is unknown, defaulting to 1000 [ 499.462262][T11146] NILFS (nullb0): couldn't find nilfs on the device [ 499.804326][ T2920] Bluetooth: Error in BCSP hdr checksum [ 499.909690][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 500.050946][ T2957] Bluetooth: Error in BCSP hdr checksum [ 500.102461][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 500.305554][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.314197][ T10] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 500.323233][ T2957] Bluetooth: Error in BCSP hdr checksum [ 500.333708][ T10] usb 2-1: config 0 has no interface number 0 [ 500.345968][ T10] usb 2-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 500.365187][ T10] usb 2-1: config 0 interface 143 has no altsetting 0 [ 500.376492][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 500.386145][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.394521][ T10] usb 2-1: Product: syz [ 500.399638][ T10] usb 2-1: Manufacturer: syz [ 500.406452][ T10] usb 2-1: SerialNumber: syz [ 500.445005][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 500.499756][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 500.540622][ T10] r8152 2-1:0.143: Expected endpoints are not found [ 500.583195][ T13] Bluetooth: Error in BCSP hdr checksum [ 500.842648][ T13] Bluetooth: Error in BCSP hdr checksum [ 500.929675][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 500.930296][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 501.001574][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.110396][ T5922] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 502.266509][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 502.662838][T11168] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 502.670719][T11168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1144'. [ 503.427302][T11171] CUSE: unknown device info "ÿ" [ 503.449740][T11171] CUSE: zero length info key specified [ 503.734736][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1149'. [ 504.222505][T11185] netlink: 'syz.5.1149': attribute type 10 has an invalid length. [ 504.230353][T11185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1149'. [ 504.241234][T11185] CUSE: unknown device info "ÿ" [ 504.246151][T11185] CUSE: zero length info key specified [ 504.610744][T11202] veth0_vlan: left promiscuous mode [ 504.619785][T11202] veth0_vlan: entered promiscuous mode [ 504.731112][T11202] C speed is unknown, defaulting to 1000 [ 508.050507][ T1118] Bluetooth: Error in BCSP hdr checksum [ 508.312837][ T1156] Bluetooth: Error in BCSP hdr checksum [ 508.647307][T11235] /dev/nullb0: Can't open blockdev [ 509.299895][ T5875] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 509.459651][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 509.857731][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 509.869497][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 510.083093][ T1156] Bluetooth: Error in BCSP hdr checksum [ 510.090838][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.099470][ T5875] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 510.108606][ T5875] usb 5-1: config 0 has no interface number 0 [ 510.139633][ T5875] usb 5-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 510.150811][ T5875] usb 5-1: config 0 interface 143 has no altsetting 0 [ 510.169239][ T5875] usb 5-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 510.197945][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.262570][T11241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11241 comm=syz.3.1160 [ 510.285221][ T5875] usb 5-1: Product: syz [ 510.305437][ T5875] usb 5-1: Manufacturer: syz [ 510.333735][ T5875] usb 5-1: SerialNumber: syz [ 510.343926][ T1156] Bluetooth: Error in BCSP hdr checksum [ 510.468618][T11247] veth0_vlan: left promiscuous mode [ 510.478329][T11247] veth0_vlan: entered promiscuous mode [ 510.590541][T11247] C speed is unknown, defaulting to 1000 [ 510.941404][ T1118] Bluetooth: Error in BCSP hdr checksum [ 511.138450][ T5875] r8152-cfgselector 5-1: Unknown version 0x0000 [ 511.144785][ T5875] r8152-cfgselector 5-1: config 0 descriptor?? [ 511.156099][ T5875] r8152-cfgselector 5-1: can't set config #0, error -71 [ 511.309896][ T5875] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 512.250624][ T5834] Bluetooth: hci6: command 0x1003 tx timeout [ 512.279845][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 513.651929][T11276] veth0_vlan: left promiscuous mode [ 513.659694][T11276] veth0_vlan: entered promiscuous mode [ 513.679240][T11276] C speed is unknown, defaulting to 1000 [ 514.113826][T11281] veth0_vlan: left promiscuous mode [ 514.123060][T11281] veth0_vlan: entered promiscuous mode [ 514.699106][T11281] C speed is unknown, defaulting to 1000 [ 514.939321][ T8896] Bluetooth: Error in BCSP hdr checksum [ 515.450124][ T2957] Bluetooth: Error in BCSP hdr checksum [ 515.591858][ T52] Bluetooth: Error in BCSP hdr checksum [ 515.929643][ T5903] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 515.963359][ T1156] Bluetooth: Error in BCSP hdr checksum [ 515.988602][T11297] C speed is unknown, defaulting to 1000 [ 516.665054][ T1156] Bluetooth: Error in BCSP hdr checksum [ 516.699690][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 516.709079][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 516.769446][ T52] Bluetooth: Error in BCSP hdr checksum [ 516.775444][ T5903] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 516.784083][ T5903] usb 2-1: config 0 has no interface number 0 [ 516.791518][ T5903] usb 2-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 516.829605][ T5903] usb 2-1: config 0 interface 143 has no altsetting 0 [ 516.840994][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 516.847232][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 516.865232][ T5903] usb 2-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 516.874635][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.911105][ T13] Bluetooth: Error in BCSP hdr checksum [ 516.918352][ T5903] usb 2-1: Product: syz [ 516.923426][ T5903] usb 2-1: Manufacturer: syz [ 516.928171][ T5903] usb 2-1: SerialNumber: syz [ 516.938127][ T5903] r8152-cfgselector 2-1: Unknown version 0x0000 [ 516.945076][ T5903] r8152-cfgselector 2-1: config 0 descriptor?? [ 517.015473][T11309] veth0_vlan: left promiscuous mode [ 517.023577][T11309] veth0_vlan: entered promiscuous mode [ 517.129251][ T52] Bluetooth: Error in BCSP hdr checksum [ 517.421031][ T52] Bluetooth: Error in BCSP hdr checksum [ 517.440867][T11309] C speed is unknown, defaulting to 1000 [ 517.449752][ T5875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 517.466745][ T13] Bluetooth: Error in BCSP hdr checksum [ 517.497609][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 517.611563][ T5903] r8152 2-1:0.143: Expected endpoints are not found [ 517.624799][ T5903] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 517.640401][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 517.650626][ T13] Bluetooth: Error in BCSP hdr checksum [ 517.692391][T11316] netlink: 'syz.4.1174': attribute type 10 has an invalid length. [ 517.700213][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1174'. [ 517.753915][ T5875] usb 6-1: unable to get BOS descriptor or descriptor too short [ 517.762804][ T5875] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 517.771153][T11318] CUSE: unknown device info "ÿ" [ 517.776098][T11318] CUSE: zero length info key specified [ 517.825757][ T5875] usb 6-1: config 0 has no interface number 0 [ 517.855884][ T5875] usb 6-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 517.903530][ T5875] usb 6-1: config 0 interface 143 has no altsetting 0 [ 517.918171][ T5875] usb 6-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 517.931591][ T61] Bluetooth: Error in BCSP hdr checksum [ 517.940079][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.980845][ T5875] usb 6-1: Product: syz [ 517.999650][ T5875] usb 6-1: Manufacturer: syz [ 518.004255][ T5875] usb 6-1: SerialNumber: syz [ 518.043933][ T5875] r8152-cfgselector 6-1: Unknown version 0x0000 [ 518.065332][ T5875] r8152-cfgselector 6-1: config 0 descriptor?? [ 518.267569][ T61] Bluetooth: Error in BCSP hdr checksum [ 518.278722][ T5875] r8152 6-1:0.143: Expected endpoints are not found [ 518.327304][T11329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11329 comm=syz.2.1177 [ 518.424984][ T5875] r8152-cfgselector 6-1: USB disconnect, device number 9 [ 518.759992][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 519.957124][T11345] veth0_vlan: left promiscuous mode [ 519.963144][T11345] veth0_vlan: entered promiscuous mode [ 519.990377][T11345] C speed is unknown, defaulting to 1000 [ 520.137683][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 520.464660][T11350] veth0_vlan: left promiscuous mode [ 520.471153][T11350] veth0_vlan: entered promiscuous mode [ 520.500633][T11350] C speed is unknown, defaulting to 1000 [ 520.516564][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 520.524444][T11304] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 522.095534][T11362] veth0_vlan: left promiscuous mode [ 522.102617][T11362] veth0_vlan: entered promiscuous mode [ 522.143945][T11373] C speed is unknown, defaulting to 1000 [ 523.285171][T11384] veth0_vlan: left promiscuous mode [ 523.294743][T11384] veth0_vlan: entered promiscuous mode [ 525.050193][T11384] C speed is unknown, defaulting to 1000 [ 525.890922][T11403] veth0_vlan: left promiscuous mode [ 525.897824][T11403] veth0_vlan: entered promiscuous mode [ 525.912355][T11405] C speed is unknown, defaulting to 1000 [ 526.957256][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1194'. [ 528.249640][ T5874] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 528.459696][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 528.478536][ T5874] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 528.489780][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.497784][ T5874] usb 5-1: Product: syz [ 528.502433][ T5874] usb 5-1: Manufacturer: syz [ 528.507062][ T5874] usb 5-1: SerialNumber: syz [ 528.520452][ T5874] r8152-cfgselector 5-1: Unknown version 0x0000 [ 528.530328][ T5874] r8152-cfgselector 5-1: config 0 descriptor?? [ 529.430964][ T5903] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 531.269686][T11461] veth0_vlan: left promiscuous mode [ 531.279254][T11461] veth0_vlan: entered promiscuous mode [ 531.380122][T11461] C speed is unknown, defaulting to 1000 [ 532.175716][T11467] veth0_vlan: left promiscuous mode [ 532.185129][T11467] veth0_vlan: entered promiscuous mode [ 532.287358][T11467] C speed is unknown, defaulting to 1000 [ 534.009108][T11483] veth0_vlan: left promiscuous mode [ 534.018895][T11483] veth0_vlan: entered promiscuous mode [ 534.423135][T11483] C speed is unknown, defaulting to 1000 [ 537.349935][T11514] tmpfs: Unknown parameter 'usrquota' [ 542.821017][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 543.302342][T11574] veth0_vlan: left promiscuous mode [ 543.311619][T11574] veth0_vlan: entered promiscuous mode [ 543.417269][T11574] C speed is unknown, defaulting to 1000 [ 543.980030][T11572] netlink: 'syz.4.1230': attribute type 10 has an invalid length. [ 543.987955][T11572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1230'. [ 544.000615][T11572] CUSE: unknown device info "ÿ" [ 544.005751][T11572] CUSE: zero length info key specified [ 545.814465][T11594] veth0_vlan: left promiscuous mode [ 545.824831][T11594] veth0_vlan: entered promiscuous mode [ 545.856118][T11594] C speed is unknown, defaulting to 1000 [ 551.212945][ T2957] Bluetooth: Error in BCSP hdr checksum [ 551.340231][T11651] veth0_vlan: left promiscuous mode [ 551.350305][T11651] veth0_vlan: entered promiscuous mode [ 551.459640][T11651] C speed is unknown, defaulting to 1000 [ 551.876060][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 551.970939][ T2957] Bluetooth: Error in BCSP hdr checksum [ 552.573811][ T2920] Bluetooth: Error in BCSP hdr checksum [ 552.616885][ T5874] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 552.628222][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 552.738448][T11662] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 552.746515][T11662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1254'. [ 552.773110][T11662] CUSE: unknown device info "ÿ" [ 552.778151][T11662] CUSE: zero length info key specified [ 552.791801][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 552.805416][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 552.820792][ T5874] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 552.830054][ T61] Bluetooth: Error in BCSP hdr checksum [ 552.944618][T11669] veth0_vlan: left promiscuous mode [ 552.954578][T11669] veth0_vlan: entered promiscuous mode [ 553.358811][ T5874] usb 4-1: config 0 has no interface number 0 [ 553.369251][ T5874] usb 4-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 553.380351][ T5874] usb 4-1: config 0 interface 143 has no altsetting 0 [ 553.388518][T11304] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 553.396257][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 553.403474][ T5874] usb 4-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 553.476724][T11669] C speed is unknown, defaulting to 1000 [ 553.496540][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.525704][ T5874] usb 4-1: Product: syz [ 553.538411][ T5874] usb 4-1: Manufacturer: syz [ 553.800090][T11675] veth0_vlan: left promiscuous mode [ 553.810282][T11675] veth0_vlan: entered promiscuous mode [ 553.928342][T11675] C speed is unknown, defaulting to 1000 [ 554.256511][ T5874] usb 4-1: SerialNumber: syz [ 554.267036][ T13] Bluetooth: Error in BCSP hdr checksum [ 554.364254][ T2920] Bluetooth: Error in BCSP hdr checksum [ 554.464541][ T5874] r8152-cfgselector 4-1: Unknown version 0x0000 [ 554.481514][ T5874] r8152-cfgselector 4-1: config 0 descriptor?? [ 554.518193][ T5874] r8152-cfgselector 4-1: can't set config #0, error -71 [ 554.852878][ T5874] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 558.553282][T11718] veth0_vlan: left promiscuous mode [ 558.570109][T11718] veth0_vlan: entered promiscuous mode [ 558.828529][T11718] C speed is unknown, defaulting to 1000 [ 559.731244][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'. [ 559.824830][T11724] netlink: 'syz.5.1267': attribute type 10 has an invalid length. [ 559.832814][T11724] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1267'. [ 559.844939][T11724] CUSE: unknown device info "ÿ" [ 559.849994][T11724] CUSE: zero length info key specified [ 559.977532][T11726] veth0_vlan: left promiscuous mode [ 559.987070][T11726] veth0_vlan: entered promiscuous mode [ 560.095789][T11726] C speed is unknown, defaulting to 1000 [ 562.441774][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.811667][ T52] Bluetooth: Error in BCSP hdr checksum [ 562.966716][T11748] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 563.083587][ T2920] Bluetooth: Error in BCSP hdr checksum [ 563.119842][ T5930] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 563.642660][ T2920] Bluetooth: Error in BCSP hdr checksum [ 563.660672][ T2920] Bluetooth: Error in BCSP hdr checksum [ 563.729739][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 563.739916][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 563.757143][ T5930] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 563.775654][ T5930] usb 6-1: config 0 has no interface number 0 [ 563.789818][ T5930] usb 6-1: config 0 interface 143 has no altsetting 0 [ 563.903941][ T5930] usb 6-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 563.915555][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.920906][ T2920] Bluetooth: Error in BCSP hdr checksum [ 563.943148][ T5930] usb 6-1: Product: syz [ 563.957522][ T5930] usb 6-1: Manufacturer: syz [ 563.966124][ T5930] usb 6-1: SerialNumber: syz [ 563.985608][ T5930] r8152-cfgselector 6-1: Unknown version 0x0000 [ 563.996850][ T5930] r8152-cfgselector 6-1: config 0 descriptor?? [ 564.017564][ T5930] r8152 6-1:0.143: Expected endpoints are not found [ 564.272708][ T61] Bluetooth: Error in BCSP hdr checksum [ 564.417439][ T5903] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 564.847134][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 564.851598][T11304] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 565.697373][T11767] veth0_vlan: left promiscuous mode [ 565.703997][T11767] veth0_vlan: entered promiscuous mode [ 565.890074][T11767] C speed is unknown, defaulting to 1000 [ 566.291402][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 566.723751][T11774] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 571.114876][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 572.382650][T11837] veth0_vlan: left promiscuous mode [ 572.392712][T11837] veth0_vlan: entered promiscuous mode [ 572.510833][T11837] C speed is unknown, defaulting to 1000 [ 574.699810][T11865] veth0_vlan: left promiscuous mode [ 574.710048][T11865] veth0_vlan: entered promiscuous mode [ 574.830702][T11865] C speed is unknown, defaulting to 1000 [ 578.793279][T11905] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 582.623641][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 583.270735][T11945] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 583.279051][T11945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1317'. [ 583.295418][T11945] CUSE: unknown device info "ÿ" [ 583.300474][T11945] CUSE: zero length info key specified [ 586.446192][T11953] veth0_vlan: left promiscuous mode [ 586.456270][T11953] veth0_vlan: entered promiscuous mode [ 586.811915][T11953] C speed is unknown, defaulting to 1000 [ 595.360886][T12024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12024 comm=syz.3.1335 [ 596.053028][ T61] Bluetooth: Error in BCSP hdr checksum [ 596.609254][ T2957] Bluetooth: Error in BCSP hdr checksum [ 596.634531][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 596.870847][ T1118] Bluetooth: Error in BCSP hdr checksum [ 597.118653][ T1118] Bluetooth: Error in BCSP hdr checksum [ 597.128411][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 597.138975][ T2920] Bluetooth: Error in BCSP hdr checksum [ 597.318319][T11304] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 598.180110][ T2920] Bluetooth: Error in BCSP hdr checksum [ 598.328492][ T1118] Bluetooth: Error in BCSP hdr checksum [ 598.339647][ T5947] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 598.347492][ T10] usb 4-1: device descriptor read/all, error -71 [ 598.453867][ T1118] Bluetooth: Error in BCSP hdr checksum [ 598.609617][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 598.641760][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 598.891937][ T5947] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 598.999771][ T5828] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 599.007378][ T61] Bluetooth: Error in BCSP hdr checksum [ 599.027071][ T5947] usb 3-1: config 0 has no interface number 0 [ 599.035603][ T5947] usb 3-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 599.050883][ T5947] usb 3-1: config 0 interface 143 has no altsetting 0 [ 599.063472][ T5947] usb 3-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 599.078939][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.246695][T12062] NILFS (nullb0): couldn't find nilfs on the device [ 599.543109][ T8896] Bluetooth: Error in BCSP hdr checksum [ 599.628051][ T5947] usb 3-1: Product: syz [ 599.646067][ T5947] usb 3-1: Manufacturer: syz [ 599.664463][ T5947] usb 3-1: SerialNumber: syz [ 599.720843][ T2920] Bluetooth: Error in BCSP hdr checksum [ 599.753418][ T5947] r8152-cfgselector 3-1: Unknown version 0x0000 [ 599.760530][ T5947] r8152-cfgselector 3-1: config 0 descriptor?? [ 599.779060][ T5947] r8152 3-1:0.143: Expected endpoints are not found [ 599.850801][T12072] veth0_vlan: left promiscuous mode [ 599.901132][T12072] veth0_vlan: entered promiscuous mode [ 600.181257][ T2920] Bluetooth: Error in BCSP hdr checksum [ 600.241554][T12072] C speed is unknown, defaulting to 1000 [ 601.174514][ T2957] Bluetooth: Error in BCSP hdr checksum [ 601.192945][ T5874] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 601.632472][T12086] erofs (device nbd3): cannot find valid erofs superblock [ 602.689177][T12094] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1354'. [ 602.972221][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'. [ 603.125046][T12102] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 603.132945][T12102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1356'. [ 603.144136][T12102] CUSE: unknown device info "ÿ" [ 603.149090][T12102] CUSE: zero length info key specified [ 617.041312][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1384'. [ 617.054721][T12212] veth0_vlan: left promiscuous mode [ 617.398300][T12231] netlink: 'syz.5.1384': attribute type 10 has an invalid length. [ 617.406442][T12231] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1384'. [ 617.626025][T12212] veth0_vlan: entered promiscuous mode [ 617.668624][T12231] CUSE: unknown device info "ÿ" [ 617.673882][T12231] CUSE: zero length info key specified [ 620.059923][T12215] C speed is unknown, defaulting to 1000 [ 620.233995][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1387'. [ 622.059705][T12264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12264 comm=syz.5.1393 [ 624.511964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.337468][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 625.909662][T12296] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 625.917662][T12296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1399'. [ 625.932335][T12296] CUSE: unknown device info "ÿ" [ 625.937370][T12296] CUSE: zero length info key specified [ 626.772830][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 627.667153][ T2920] Bluetooth: Error in BCSP hdr checksum [ 627.776622][ T5930] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 628.479844][ T1118] Bluetooth: Error in BCSP hdr checksum [ 629.208405][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 629.229646][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 629.488931][ T13] Bluetooth: Error in BCSP hdr checksum [ 629.509122][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 629.537077][ T5930] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 629.551709][ T5930] usb 2-1: config 0 has no interface number 0 [ 629.558860][ T5930] usb 2-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 629.680513][ T5930] usb 2-1: config 0 interface 143 has no altsetting 0 [ 629.691276][ T5930] usb 2-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 629.700511][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.708474][ T5930] usb 2-1: Product: syz [ 629.712875][ T5930] usb 2-1: Manufacturer: syz [ 629.717447][ T5930] usb 2-1: SerialNumber: syz [ 629.746532][ T5930] r8152-cfgselector 2-1: Unknown version 0x0000 [ 629.820048][ T1118] Bluetooth: Error in BCSP hdr checksum [ 629.980697][ T2957] Bluetooth: Error in BCSP hdr checksum [ 630.044824][ T5930] r8152-cfgselector 2-1: config 0 descriptor?? [ 630.101951][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 630.173817][T12345] netlink: 'syz.3.1412': attribute type 10 has an invalid length. [ 630.181760][T12345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'. [ 630.192865][T12345] CUSE: unknown device info "ÿ" [ 630.197839][T12345] CUSE: zero length info key specified [ 631.051191][ T5930] r8152-cfgselector 2-1: can't set config #0, error -71 [ 631.059254][ T5930] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 631.200081][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 632.641397][T12359] erofs (device nbd1): cannot find valid erofs superblock [ 633.029849][ T5903] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 633.229743][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 633.619474][ T5903] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 633.639932][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.667619][ T5903] usb 5-1: Product: syz [ 634.515781][ T5903] usb 5-1: Manufacturer: syz [ 634.551218][ T5903] usb 5-1: SerialNumber: syz [ 634.714737][ T5903] r8152-cfgselector 5-1: Unknown version 0x0000 [ 634.807677][ T5903] r8152-cfgselector 5-1: config 0 descriptor?? [ 635.684680][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 636.502108][T12401] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 636.511675][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1426'. [ 636.524145][T12401] CUSE: unknown device info "ÿ" [ 636.529278][T12401] CUSE: zero length info key specified [ 638.156501][ T5903] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 639.653511][T12439] erofs (device nbd4): cannot find valid erofs superblock [ 641.171974][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 641.569709][T12454] C speed is unknown, defaulting to 1000 [ 641.973675][T12455] netlink: 'syz.5.1436': attribute type 10 has an invalid length. [ 641.981688][T12455] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1436'. [ 642.042526][T12455] CUSE: unknown device info "ÿ" [ 642.047664][T12455] CUSE: zero length info key specified [ 645.770482][T12489] veth0_vlan: left promiscuous mode [ 645.777166][T12489] veth0_vlan: entered promiscuous mode [ 645.808577][T12489] C speed is unknown, defaulting to 1000 [ 649.419849][T12519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1451'. [ 649.434682][T12515] veth0_vlan: left promiscuous mode [ 649.441101][T12515] veth0_vlan: entered promiscuous mode [ 649.487162][T12516] C speed is unknown, defaulting to 1000 [ 652.039467][T12551] input: syz1 as /devices/virtual/input/input19 [ 652.223849][T12553] veth0_vlan: left promiscuous mode [ 652.229938][T12553] veth0_vlan: entered promiscuous mode [ 652.258554][T12553] C speed is unknown, defaulting to 1000 [ 653.855251][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1464'. [ 654.198394][T12575] netlink: 'syz.5.1464': attribute type 10 has an invalid length. [ 654.206633][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1464'. [ 654.219303][T12575] CUSE: unknown device info "ÿ" [ 654.224492][T12575] CUSE: zero length info key specified [ 655.608784][T12587] erofs (device nbd3): cannot find valid erofs superblock [ 658.593498][ T2957] Bluetooth: Error in BCSP hdr checksum [ 658.719761][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 658.920684][ T2920] Bluetooth: Error in BCSP hdr checksum [ 658.925317][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 659.009762][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 659.018882][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.160973][ T2957] Bluetooth: Error in BCSP hdr checksum [ 659.167393][ T10] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 659.264009][ T10] usb 2-1: config 0 has no interface number 0 [ 659.273080][ T10] usb 2-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 659.285727][ T10] usb 2-1: config 0 interface 143 has no altsetting 0 [ 659.294868][T12636] input: syz1 as /devices/virtual/input/input20 [ 659.847398][ T2920] Bluetooth: Error in BCSP hdr checksum [ 659.861720][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 659.959782][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 659.976674][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 660.013122][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.042219][ T10] usb 2-1: Product: syz [ 660.047008][ T10] usb 2-1: Manufacturer: syz [ 660.052238][ T10] usb 2-1: SerialNumber: syz [ 660.068989][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 660.079399][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 660.093089][ T10] r8152 2-1:0.143: Expected endpoints are not found [ 660.093451][ T1156] Bluetooth: Error in BCSP hdr checksum [ 660.739150][ T1156] Bluetooth: Error in BCSP hdr checksum [ 660.818207][ T971] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 661.578509][T12659] input: syz1 as /devices/virtual/input/input21 [ 666.190814][T12701] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 667.006205][T12705] input: syz1 as /devices/virtual/input/input23 [ 668.474641][ T13] Bluetooth: Error in BCSP hdr checksum [ 668.480580][T12720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12720 comm=syz.2.1494 [ 668.692531][T12712] input: syz1 as /devices/virtual/input/input24 [ 668.693073][ T52] Bluetooth: Error in BCSP hdr checksum [ 668.858444][T12729] input: syz1 as /devices/virtual/input/input25 [ 669.144255][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 669.155415][ T52] Bluetooth: Error in BCSP hdr checksum [ 669.662675][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 669.678504][ T2920] Bluetooth: Error in BCSP hdr checksum [ 669.899759][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 670.040262][T12738] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1499'. [ 670.069728][ T5874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 670.086581][ T52] Bluetooth: Error in BCSP hdr checksum [ 670.097247][ T5874] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 670.105711][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 670.125968][ T5874] usb 3-1: config 0 has no interface number 0 [ 670.461143][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 670.467904][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 670.569604][ T5874] usb 3-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 670.585870][ T52] Bluetooth: Error in BCSP hdr checksum [ 670.589557][ T5874] usb 3-1: config 0 interface 143 has no altsetting 0 [ 670.608412][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 670.611803][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 670.632849][ T5874] usb 3-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 670.644070][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.658260][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.696438][ T10] usb 4-1: Product: syz [ 670.714482][T12746] netlink: 'syz.5.1501': attribute type 10 has an invalid length. [ 670.722820][T12746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1501'. [ 670.752146][T12746] CUSE: unknown device info "ÿ" [ 670.757138][T12746] CUSE: zero length info key specified [ 670.780788][ T5874] usb 3-1: Product: syz [ 670.785015][ T5874] usb 3-1: Manufacturer: syz [ 670.789873][ T10] usb 4-1: Manufacturer: syz [ 670.805654][ T10] usb 4-1: SerialNumber: syz [ 671.706489][ T13] Bluetooth: Error in BCSP hdr checksum [ 671.712547][ T5874] usb 3-1: SerialNumber: syz [ 671.873064][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 671.901618][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 671.907981][ T5874] r8152-cfgselector 3-1: Unknown version 0x0000 [ 671.936669][ T5874] r8152-cfgselector 3-1: config 0 descriptor?? [ 671.961742][ T10] r8152-cfgselector 4-1: can't set config #0, error -71 [ 671.996864][ T5874] r8152-cfgselector 3-1: can't set config #0, error -71 [ 672.013211][ T10] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 673.075163][T12762] veth0_vlan: left promiscuous mode [ 673.085559][T12762] veth0_vlan: entered promiscuous mode [ 673.162732][T12762] C speed is unknown, defaulting to 1000 [ 673.404389][ T5874] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 675.646705][T12787] erofs (device nbd5): cannot find valid erofs superblock [ 676.109812][T12792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1511'. [ 676.126597][T12790] veth0_vlan: left promiscuous mode [ 676.141962][T12790] veth0_vlan: entered promiscuous mode [ 676.696793][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 676.968624][T12804] veth0_vlan: left promiscuous mode [ 676.981035][T12804] veth0_vlan: entered promiscuous mode [ 677.045160][T12804] C speed is unknown, defaulting to 1000 [ 677.655497][T12806] netlink: 'syz.5.1513': attribute type 10 has an invalid length. [ 677.663600][T12806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1513'. [ 677.675233][T12806] CUSE: unknown device info "ÿ" [ 677.680358][T12806] CUSE: zero length info key specified [ 679.904269][T12790] C speed is unknown, defaulting to 1000 [ 680.249478][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1519'. [ 681.090274][T12820] erofs (device nbd4): cannot find valid erofs superblock [ 681.478769][T12809] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 683.542605][T12848] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1525'. [ 683.657476][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 684.169899][T12858] netlink: 'syz.4.1527': attribute type 10 has an invalid length. [ 684.857841][T12853] input: syz1 as /devices/virtual/input/input26 [ 684.930598][T12858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1527'. [ 684.942660][T12852] CUSE: unknown device info "ÿ" [ 684.947637][T12852] CUSE: zero length info key specified [ 685.780232][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.914125][T12879] input: syz1 as /devices/virtual/input/input27 [ 688.246333][T12892] input: syz1 as /devices/virtual/input/input28 [ 688.392244][T12894] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 690.198881][ T5875] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 690.405226][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 690.425729][ T5875] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 690.967802][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.976592][ T5875] usb 5-1: Product: syz [ 690.981118][ T5875] usb 5-1: Manufacturer: syz [ 690.985777][ T5875] usb 5-1: SerialNumber: syz [ 691.041042][ T5875] r8152-cfgselector 5-1: Unknown version 0x0000 [ 691.059649][ T5875] r8152-cfgselector 5-1: config 0 descriptor?? [ 691.182754][T12919] C: renamed from lo (while UP) [ 691.211164][T12919] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 691.243649][T12922] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1540'. [ 691.345150][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.355582][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.364389][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.373617][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.381383][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.425572][T12924] C speed is unknown, defaulting to 1000 [ 691.856022][ T5903] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 692.439967][T12941] input: syz1 as /devices/virtual/input/input29 [ 692.798578][T12924] chnl_net:caif_netlink_parms(): no params data found [ 693.401037][ T5828] Bluetooth: hci5: command tx timeout [ 694.225858][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.674077][T12961] input: syz1 as /devices/virtual/input/input30 [ 695.479611][ T5828] Bluetooth: hci5: command tx timeout [ 696.167379][T12974] input: syz1 as /devices/virtual/input/input31 [ 696.644288][T12982] input: syz1 as /devices/virtual/input/input32 [ 697.268824][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.379871][T12924] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.387011][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.540744][T12924] bridge_slave_0: entered allmulticast mode [ 697.549705][T12967] block nbd4: shutting down sockets [ 697.559661][ T5828] Bluetooth: hci5: command tx timeout [ 697.563628][T12924] bridge_slave_0: entered promiscuous mode [ 697.647367][T12996] input: syz1 as /devices/virtual/input/input33 [ 698.019610][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.026751][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.035012][T12924] bridge_slave_1: entered allmulticast mode [ 698.085385][T12924] bridge_slave_1: entered promiscuous mode [ 698.207672][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.348426][ T52] bridge0: port 3(netdevsim0) entered disabled state [ 698.508571][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 698.537428][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 698.574313][ T52] bridge0: port 3(netdevsim0) entered disabled state [ 699.078713][T13012] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 699.086734][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1557'. [ 699.121033][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.145110][T13013] CUSE: unknown device info "ÿ" [ 699.156761][T13013] CUSE: zero length info key specified [ 699.640174][ T5828] Bluetooth: hci5: command tx timeout [ 700.227024][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.329052][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.507142][T13021] input: syz1 as /devices/virtual/input/input34 [ 701.382212][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 701.650221][T12924] team0: Port device team_slave_0 added [ 701.790564][T12924] team0: Port device team_slave_1 added [ 702.223022][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.746534][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.772455][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.779589][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.800978][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.809013][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.837240][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.858786][T13034] veth0_vlan: left promiscuous mode [ 702.868846][T13034] veth0_vlan: entered promiscuous mode [ 703.871008][T12924] hsr_slave_0: entered promiscuous mode [ 704.027312][T12924] hsr_slave_1: entered promiscuous mode [ 704.034888][T12924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.048235][T12924] Cannot create hsr debugfs directory [ 704.179064][T13055] input: syz1 as /devices/virtual/input/input35 [ 704.892068][ T52] bridge_slave_1: left allmulticast mode [ 704.900327][ T52] bridge_slave_1: left promiscuous mode [ 704.906121][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.044612][ T52] bridge_slave_0: left allmulticast mode [ 705.076927][ T52] bridge_slave_0: left promiscuous mode [ 705.131436][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.164651][T13065] input: syz1 as /devices/virtual/input/input36 [ 707.156122][ T52] team0: Port device geneve0 removed [ 707.443123][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.452174][ T52] bond_slave_0: left promiscuous mode [ 707.464185][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.473992][ T52] bond_slave_1: left promiscuous mode [ 707.480676][ T52] bond0 (unregistering): Released all slaves [ 707.504706][T13038] C speed is unknown, defaulting to 1000 [ 707.554824][T13076] veth0_vlan: left promiscuous mode [ 707.561505][T13076] veth0_vlan: entered promiscuous mode [ 708.472639][T13077] C speed is unknown, defaulting to 1000 [ 709.743017][T13111] veth0_vlan: left promiscuous mode [ 709.772974][T13120] input: syz1 as /devices/virtual/input/input37 [ 709.832520][T13111] veth0_vlan: entered promiscuous mode [ 710.975281][T13114] C speed is unknown, defaulting to 1000 [ 711.597737][T12924] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 711.615980][T12924] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.620135][T13133] block nbd4: shutting down sockets [ 711.654795][T12924] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 711.688382][T12924] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 711.746563][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1579'. [ 711.870178][T13150] netlink: 'syz.5.1579': attribute type 10 has an invalid length. [ 711.878038][T13150] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1579'. [ 711.925872][T13152] CUSE: unknown device info "ÿ" [ 711.930998][T13152] CUSE: zero length info key specified [ 712.813592][T13158] input: syz1 as /devices/virtual/input/input38 [ 713.900112][ T52] hsr_slave_0: left promiscuous mode [ 713.913842][ T52] hsr_slave_1: left promiscuous mode [ 714.656199][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.679344][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.931326][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.948914][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.069233][ T52] veth1_macvtap: left promiscuous mode [ 715.105194][ T52] veth0_macvtap: left promiscuous mode [ 715.117144][ T52] veth1_vlan: left promiscuous mode [ 715.127697][ T52] veth0_vlan: left promiscuous mode [ 716.114283][T13198] input: syz1 as /devices/virtual/input/input39 [ 717.089066][T13206] input: syz1 as /devices/virtual/input/input40 [ 717.508285][ T52] team0 (unregistering): Port device team_slave_1 removed [ 717.552732][ T52] team0 (unregistering): Port device team_slave_0 removed [ 718.764863][T13195] veth0_vlan: left promiscuous mode [ 718.771683][T13195] veth0_vlan: entered promiscuous mode [ 718.793359][T13196] C speed is unknown, defaulting to 1000 [ 718.944850][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.196847][T13222] input: syz1 as /devices/virtual/input/input41 [ 719.583367][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.927306][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.927389][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.931170][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.931251][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.557714][ T52] IPVS: stop unused estimator thread 0... [ 721.594629][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.680033][T13258] input: syz1 as /devices/virtual/input/input42 [ 722.152651][T13259] veth0_vlan: left promiscuous mode [ 722.175295][T13259] veth0_vlan: entered promiscuous mode [ 722.338193][T13265] C speed is unknown, defaulting to 1000 [ 722.602593][T12924] veth0_vlan: entered promiscuous mode [ 722.651058][T12924] veth1_vlan: entered promiscuous mode [ 722.704135][T12924] veth0_macvtap: entered promiscuous mode [ 722.761444][T12924] veth1_macvtap: entered promiscuous mode [ 722.787801][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.980575][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.990576][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.019759][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.029721][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.040637][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.052827][T13276] input: syz1 as /devices/virtual/input/input43 [ 723.053740][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.179772][T13284] input: syz1 as /devices/virtual/input/input44 [ 723.275751][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.580945][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.683072][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.713771][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.739998][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.764921][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.785290][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.825953][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.836214][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.847316][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.861052][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.891327][T12924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.909573][T12924] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.918651][T12924] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.949592][T12924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.720031][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.731604][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.837619][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.874073][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.089602][T13302] input: syz1 as /devices/virtual/input/input45 [ 726.008231][T13316] erofs (device nbd3): cannot find valid erofs superblock [ 726.972245][T13317] input: syz1 as /devices/virtual/input/input46 [ 727.858621][T13339] input: syz1 as /devices/virtual/input/input47 [ 729.074237][T13340] input: syz1 as /devices/virtual/input/input48 [ 729.484189][T13352] input: syz1 as /devices/virtual/input/input49 [ 730.137073][T13361] input: syz1 as /devices/virtual/input/input50 [ 730.535484][T12927] udevd[12927]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 730.546304][T12927] udevd[12927]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 730.872133][T13373] input: syz1 as /devices/virtual/input/input51 [ 732.154645][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1614'. [ 732.767468][T13393] netlink: 'syz.5.1614': attribute type 10 has an invalid length. [ 732.775619][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1614'. [ 732.789095][T13393] CUSE: unknown device info "ÿ" [ 732.794339][T13393] CUSE: zero length info key specified [ 734.101520][T13410] input: syz1 as /devices/virtual/input/input52 [ 736.210498][T13431] input: syz1 as /devices/virtual/input/input53 [ 739.174252][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 739.300079][T13472] netlink: 'syz.4.1629': attribute type 10 has an invalid length. [ 739.308005][T13472] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1629'. [ 739.319886][T13472] CUSE: unknown device info "ÿ" [ 739.324852][T13472] CUSE: zero length info key specified [ 740.555945][T13478] input: syz1 as /devices/virtual/input/input54 [ 746.772166][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.012817][T13579] input: syz1 as /devices/virtual/input/input55 [ 755.275758][T13620] input: syz1 as /devices/virtual/input/input56 [ 755.294051][T13608] input: syz1 as /devices/virtual/input/input57 [ 755.724780][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1658'. [ 756.047704][T13634] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 756.064295][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1658'. [ 756.086128][T13634] CUSE: unknown device info "ÿ" [ 756.091705][T13634] CUSE: zero length info key specified [ 761.943887][T13673] input: syz1 as /devices/virtual/input/input58 [ 764.694581][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1673'. [ 764.780193][T13710] netlink: 'syz.6.1673': attribute type 10 has an invalid length. [ 764.788083][T13710] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1673'. [ 764.852187][T13711] CUSE: unknown device info "ÿ" [ 764.857181][T13711] CUSE: zero length info key specified [ 765.748877][T13710] team0: Port device geneve0 added [ 767.282913][T13731] erofs (device nbd3): cannot find valid erofs superblock [ 769.863064][ T5822] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 770.639577][ T5822] usb 7-1: Using ep0 maxpacket: 16 [ 770.761669][ T5822] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 770.777541][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.789063][ T5822] usb 7-1: Product: syz [ 770.793450][ T5822] usb 7-1: Manufacturer: syz [ 770.798073][ T5822] usb 7-1: SerialNumber: syz [ 770.838900][ T5822] r8152-cfgselector 7-1: Unknown version 0x0000 [ 771.290685][ T5822] r8152-cfgselector 7-1: config 0 descriptor?? [ 773.971095][T13815] input: syz1 as /devices/virtual/input/input59 [ 774.310132][ T10] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 774.554014][T13827] input: syz1 as /devices/virtual/input/input60 [ 776.595964][T13845] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1699'. [ 779.399689][T13846] wg1: entered promiscuous mode [ 779.473094][T13846] wg1: entered allmulticast mode [ 781.566014][T13887] input: syz1 as /devices/virtual/input/input61 [ 782.788826][T13902] veth0_vlan: left promiscuous mode [ 782.795284][T13902] veth0_vlan: entered promiscuous mode [ 782.809390][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 782.903942][T13909] netlink: 'syz.2.1709': attribute type 10 has an invalid length. [ 782.912318][T13909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1709'. [ 782.924274][T13909] CUSE: unknown device info "ÿ" [ 782.929378][T13909] CUSE: zero length info key specified [ 785.078994][T13901] C speed is unknown, defaulting to 1000 [ 787.861178][T13937] input: syz1 as /devices/virtual/input/input62 [ 788.710965][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'. [ 788.983581][T13955] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 788.991640][T13955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1719'. [ 789.078609][T13966] input: syz1 as /devices/virtual/input/input63 [ 790.039770][T13955] CUSE: unknown device info "ÿ" [ 790.044824][T13955] CUSE: zero length info key specified [ 791.623608][T13986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13986 comm=syz.4.1720 [ 791.671709][ T2957] Bluetooth: Error in BCSP hdr checksum [ 792.689087][T13191] Bluetooth: Error in BCSP hdr checksum [ 793.003411][ T13] Bluetooth: Error in BCSP hdr checksum [ 793.040003][T13295] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 793.421400][T14008] input: syz1 as /devices/virtual/input/input64 [ 793.902744][ T5828] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 793.912548][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 794.217964][T13295] usb 5-1: Using ep0 maxpacket: 32 [ 794.255557][T13295] usb 5-1: unable to get BOS descriptor or descriptor too short [ 794.802984][T13295] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 794.848025][T13295] usb 5-1: can't read configurations, error -71 [ 796.222330][T14033] veth0_vlan: entered allmulticast mode [ 796.238818][T14033] veth0_vlan: left promiscuous mode [ 796.245558][T14033] veth0_vlan: entered promiscuous mode [ 796.271871][T14033] C speed is unknown, defaulting to 1000 [ 796.574625][T14041] input: syz1 as /devices/virtual/input/input65 [ 798.074957][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 798.345948][T14061] NILFS (nullb0): couldn't find nilfs on the device [ 798.608996][T14056] netlink: 'syz.4.1733': attribute type 10 has an invalid length. [ 798.617245][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1733'. [ 799.111856][T14070] CUSE: unknown device info "ÿ" [ 799.116847][T14070] CUSE: zero length info key specified [ 800.469358][T14065] veth0_vlan: left promiscuous mode [ 800.552522][T14065] veth0_vlan: entered promiscuous mode [ 800.887400][T14065] C speed is unknown, defaulting to 1000 [ 802.231835][T14105] input: syz1 as /devices/virtual/input/input66 [ 806.945731][T14146] input: syz1 as /devices/virtual/input/input67 [ 808.273359][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.772124][T14158] input: syz1 as /devices/virtual/input/input68 [ 810.286549][T14178] input: syz1 as /devices/virtual/input/input69 [ 811.328293][T11304] Bluetooth: hci0: command 0x0406 tx timeout [ 811.355247][T14186] veth0_vlan: left promiscuous mode [ 811.367563][T14186] veth0_vlan: entered promiscuous mode [ 813.381976][T14186] C speed is unknown, defaulting to 1000 [ 814.941870][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 814.953072][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 814.961851][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 814.980212][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 814.990288][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.641266][T14238] C speed is unknown, defaulting to 1000 [ 816.578599][T14252] input: syz1 as /devices/virtual/input/input70 [ 817.079586][ T5828] Bluetooth: hci1: command tx timeout [ 818.402236][ T8896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.448350][ T8896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.097098][ T8896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.107830][ T8896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.160724][ T5828] Bluetooth: hci1: command tx timeout [ 819.341000][ T8896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.401621][ T8896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.030999][T14294] input: syz1 as /devices/virtual/input/input71 [ 820.892703][ T8896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.909922][ T8896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.936258][T14238] chnl_net:caif_netlink_parms(): no params data found [ 821.240658][ T5828] Bluetooth: hci1: command tx timeout [ 823.143456][T14238] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.284446][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.294625][T14238] bridge_slave_0: entered allmulticast mode [ 823.311161][T14238] bridge_slave_0: entered promiscuous mode [ 823.319981][ T5828] Bluetooth: hci1: command tx timeout [ 823.818736][T14238] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.839448][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.872555][T14238] bridge_slave_1: entered allmulticast mode [ 823.913650][T14238] bridge_slave_1: entered promiscuous mode [ 825.662277][T14238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.556354][T14344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1782'. [ 826.602594][T14238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.827945][ T8896] bridge_slave_1: left allmulticast mode [ 826.932122][ T8896] bridge_slave_1: left promiscuous mode [ 827.064891][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.112542][ T8896] bridge_slave_0: left allmulticast mode [ 827.134196][ T8896] bridge_slave_0: left promiscuous mode [ 827.170074][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.208780][ T8896] batman_adv: batadv0: Interface deactivated: geneve2 [ 827.285206][T14358] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1784'. [ 827.787084][T14369] input: syz1 as /devices/virtual/input/input72 [ 828.502551][ T8896] batman_adv: batadv0: Removing interface: geneve2 [ 828.602418][ T8896] team0: Port device geneve0 removed [ 829.474966][ T8896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.552224][ T8896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.601387][ T8896] bond0 (unregistering): Released all slaves [ 829.811404][T14353] veth0_vlan: left promiscuous mode [ 829.817985][T14353] veth0_vlan: entered promiscuous mode [ 829.841540][T14354] C speed is unknown, defaulting to 1000 [ 830.007520][T14238] team0: Port device team_slave_0 added [ 830.123098][T14238] team0: Port device team_slave_1 added [ 830.598444][T14390] input: syz1 as /devices/virtual/input/input73 [ 831.588420][T14238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.661218][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.697519][T14238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.773610][T14238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.849349][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.987240][T14238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.387121][T14238] hsr_slave_0: entered promiscuous mode [ 833.407382][T14238] hsr_slave_1: entered promiscuous mode [ 833.511110][T14238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.518715][T14238] Cannot create hsr debugfs directory [ 839.436918][T14469] netlink: 'syz.5.1799': attribute type 10 has an invalid length. [ 839.445395][T14469] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1799'. [ 839.597481][T14471] CUSE: unknown device info "ÿ" [ 839.602676][T14471] CUSE: zero length info key specified [ 839.869621][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1799'. [ 841.772874][T14472] input: syz1 as /devices/virtual/input/input74 [ 843.204942][ T8896] hsr_slave_0: left promiscuous mode [ 843.222227][ T8896] hsr_slave_1: left promiscuous mode [ 843.232297][T14474] block nbd4: shutting down sockets [ 843.246605][ T8896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.483268][T14487] input: syz1 as /devices/virtual/input/input75 [ 843.849952][ T8896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.878601][ T8896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.900111][T14486] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1806'. [ 843.910639][ T8896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.030575][ T8896] veth1_macvtap: left promiscuous mode [ 844.055812][ T8896] veth0_macvtap: left promiscuous mode [ 844.069952][ T8896] veth1_vlan: left promiscuous mode [ 844.079499][ T8896] veth0_vlan: left promiscuous mode [ 852.092931][ T8896] team0 (unregistering): Port device team_slave_1 removed [ 852.146486][ T8896] team0 (unregistering): Port device team_slave_0 removed [ 853.377273][T14560] input: syz1 as /devices/virtual/input/input76 [ 854.003211][ T2920] smc: removing ib device syz0 [ 854.099333][ T5947] C speed is unknown, defaulting to 1000 [ 854.105373][ T5947] syz0: Port: 1 Link DOWN [ 855.271346][T14552] veth0_vlan: left promiscuous mode [ 855.376462][T14552] veth0_vlan: entered promiscuous mode [ 855.946916][T14576] veth0_vlan: left promiscuous mode [ 855.956710][T14576] veth0_vlan: entered promiscuous mode [ 856.984269][T14238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 857.137242][T14238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 857.185118][T14238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 857.227677][T14238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 857.378778][T14612] C: renamed from lo (while UP) [ 857.399412][T14612] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 857.522891][T14612] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1828'. [ 857.535625][T14238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.578661][T14238] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.625037][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.632241][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.670487][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.677616][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.002260][ T8896] IPVS: stop unused estimator thread 0... [ 858.132659][T14238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.943677][ T52] Bluetooth: Error in BCSP hdr checksum [ 858.988446][T14646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14646 comm=syz.4.1832 [ 859.211866][ T61] Bluetooth: Error in BCSP hdr checksum [ 859.471380][ T61] Bluetooth: Error in BCSP hdr checksum [ 859.731691][ T1118] Bluetooth: Error in BCSP hdr checksum [ 859.828081][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 859.926597][T14238] veth0_vlan: entered promiscuous mode [ 859.971352][T14238] veth1_vlan: entered promiscuous mode [ 859.995995][ T1156] Bluetooth: Error in BCSP hdr checksum [ 860.029672][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 860.066682][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 860.082574][T14238] veth0_macvtap: entered promiscuous mode [ 860.127849][ T5903] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 860.141611][T14238] veth1_macvtap: entered promiscuous mode [ 860.167979][ T5903] usb 5-1: config 0 has no interface number 0 [ 860.320549][ T5903] usb 5-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 860.338969][ T1156] Bluetooth: Error in BCSP hdr checksum [ 860.351551][ T5903] usb 5-1: config 0 interface 143 has no altsetting 0 [ 860.367191][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.477732][T14676] input: syz1 as /devices/virtual/input/input77 [ 860.788033][T11304] Bluetooth: hci4: command 0x1003 tx timeout [ 860.797267][ T36] Bluetooth: Error in BCSP hdr checksum [ 860.803198][ T5828] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 860.830836][ T5903] usb 5-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 860.840212][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.853419][ T5903] usb 5-1: Product: syz [ 860.859661][ T5903] usb 5-1: Manufacturer: syz [ 860.867418][ T5903] usb 5-1: SerialNumber: syz [ 860.879454][ T5903] r8152-cfgselector 5-1: Unknown version 0x0000 [ 860.883089][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.889101][ T5903] r8152-cfgselector 5-1: config 0 descriptor?? [ 860.917928][ T5903] r8152 5-1:0.143: Expected endpoints are not found [ 860.924841][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.953459][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.987908][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.018930][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.041498][ T1118] Bluetooth: Error in BCSP hdr checksum [ 861.058541][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.076290][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.089018][T14238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.304428][ T52] Bluetooth: Error in BCSP hdr checksum [ 861.312648][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.330498][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.517541][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.629394][ T52] Bluetooth: Error in BCSP hdr checksum [ 861.632862][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.663269][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.694353][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.707060][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.717777][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.737987][T14238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.787824][T14238] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.818906][ T9] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 861.827943][T14238] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.848671][T14238] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.969508][T14238] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.651332][T14711] veth0_vlan: left promiscuous mode [ 863.665438][T14711] veth0_vlan: entered promiscuous mode [ 864.047464][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.080366][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.662472][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.801350][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.431014][T14726] input: syz1 as /devices/virtual/input/input78 [ 865.618244][T14725] input: syz1 as /devices/virtual/input/input79 [ 867.329540][T14755] erofs (device nbd2): cannot find valid erofs superblock [ 869.463937][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 869.644535][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.683618][T14792] veth0_vlan: left promiscuous mode [ 869.693914][T14792] veth0_vlan: entered promiscuous mode [ 870.138868][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 870.222450][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 870.251986][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.285302][ T9] usb 3-1: Product: syz [ 870.299514][ T9] usb 3-1: Manufacturer: syz [ 870.314428][ T9] usb 3-1: SerialNumber: syz [ 870.372779][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 870.421822][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 871.131304][T14802] erofs (device nbd6): cannot find valid erofs superblock [ 871.305145][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 871.869764][ T9] r8152-cfgselector 3-1: bad CDC descriptors [ 871.912872][ T9] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 872.591688][T14821] erofs (device nbd2): cannot find valid erofs superblock [ 874.870645][T14843] input: syz1 as /devices/virtual/input/input80 [ 881.528072][T14920] wg1: entered promiscuous mode [ 881.549736][T14920] wg1: entered allmulticast mode [ 881.941548][T14932] erofs (device nbd6): cannot find valid erofs superblock [ 889.622803][T14994] input: syz1 as /devices/virtual/input/input81 [ 889.816167][T15004] erofs (device nbd5): cannot find valid erofs superblock [ 892.023599][T15049] input: syz1 as /devices/virtual/input/input82 [ 892.872656][T13295] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 893.170317][T13295] usb 6-1: Using ep0 maxpacket: 16 [ 893.188319][T13295] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 893.197721][T13295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.249771][T13295] usb 6-1: Product: syz [ 893.342137][T13295] usb 6-1: Manufacturer: syz [ 893.384339][T13295] usb 6-1: SerialNumber: syz [ 893.678724][T13295] r8152-cfgselector 6-1: Unknown version 0x0000 [ 893.700166][T13295] r8152-cfgselector 6-1: config 0 descriptor?? [ 893.760457][T15059] block nbd4: shutting down sockets [ 895.351229][T12776] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 895.933533][T15089] input: syz1 as /devices/virtual/input/input83 [ 896.380020][T15109] input: syz1 as /devices/virtual/input/input84 [ 901.930355][T15172] input: syz1 as /devices/virtual/input/input85 [ 905.741204][T15201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 905.965474][T15205] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 905.973524][T15205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1925'. [ 905.986265][T15205] CUSE: unknown device info "ÿ" [ 905.991295][T15205] CUSE: zero length info key specified [ 908.032453][T15230] input: syz1 as /devices/virtual/input/input87 [ 911.826806][T15257] input: syz1 as /devices/virtual/input/input88 [ 911.903945][T15267] input: syz1 as /devices/virtual/input/input89 [ 913.811800][T15298] erofs (device nbd6): cannot find valid erofs superblock [ 914.242903][T15300] netlink: 'syz.7.1940': attribute type 10 has an invalid length. [ 914.251067][T15300] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1940'. [ 914.296730][T15301] CUSE: unknown device info "ÿ" [ 914.301859][T15301] CUSE: zero length info key specified [ 915.313077][T15300] team0: Port device geneve0 added [ 915.423510][T15308] input: syz1 as /devices/virtual/input/input90 [ 916.764633][T15325] veth0_vlan: entered allmulticast mode [ 916.788571][T15325] veth0_vlan: left promiscuous mode [ 916.795368][T15325] veth0_vlan: entered promiscuous mode [ 917.781644][T15313] block nbd6: shutting down sockets [ 920.734036][T15376] erofs (device nbd2): cannot find valid erofs superblock [ 922.975971][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 924.381382][T15432] input: syz1 as /devices/virtual/input/input91 [ 924.394428][T15431] veth0_vlan: left promiscuous mode [ 924.405044][T15431] veth0_vlan: entered promiscuous mode [ 926.482476][T15446] input: syz1 as /devices/virtual/input/input92 [ 927.318468][T15470] input: syz1 as /devices/virtual/input/input93 [ 927.763356][T15484] veth0_vlan: left promiscuous mode [ 927.771644][T15484] veth0_vlan: entered promiscuous mode [ 930.794345][T15515] netlink: 'syz.5.1977': attribute type 10 has an invalid length. [ 930.802475][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1977'. [ 930.814203][T15515] CUSE: unknown device info "ÿ" [ 930.819360][T15515] CUSE: zero length info key specified [ 931.094317][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.047631][T15519] input: syz1 as /devices/virtual/input/input94 [ 932.642771][T15524] erofs (device nbd6): cannot find valid erofs superblock [ 936.293063][T15565] veth0_vlan: left promiscuous mode [ 936.300549][T15565] veth0_vlan: entered promiscuous mode [ 937.877210][T15575] netlink: 'syz.4.1990': attribute type 10 has an invalid length. [ 937.885190][T15575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1990'. [ 937.931226][T15576] CUSE: unknown device info "ÿ" [ 937.936560][T15576] CUSE: zero length info key specified [ 938.596981][T15584] erofs (device nbd2): cannot find valid erofs superblock [ 940.295553][T15606] veth0_vlan: left promiscuous mode [ 940.302700][T15606] veth0_vlan: entered promiscuous mode [ 942.660676][T15620] veth0_vlan: left promiscuous mode [ 942.666840][T15620] veth0_vlan: entered promiscuous mode [ 944.363796][T15641] netlink: 'syz.5.2005': attribute type 10 has an invalid length. [ 944.371803][T15641] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2005'. [ 944.419926][T15641] CUSE: unknown device info "ÿ" [ 944.425064][T15641] CUSE: zero length info key specified [ 946.096272][T15651] veth0_vlan: left promiscuous mode [ 946.106492][T15651] veth0_vlan: entered promiscuous mode [ 951.200921][T15690] block nbd6: shutting down sockets [ 957.586633][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2029'. [ 957.604486][T15754] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2030'. [ 957.944712][T15756] netlink: 'syz.6.2029': attribute type 10 has an invalid length. [ 957.953791][T15756] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2029'. [ 957.983294][T15764] input: syz1 as /devices/virtual/input/input100 [ 957.993863][T15757] CUSE: unknown device info "ÿ" [ 957.998828][T15757] CUSE: zero length info key specified [ 959.333432][T15772] veth0_vlan: left promiscuous mode [ 959.340881][T15772] veth0_vlan: entered promiscuous mode [ 960.638241][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2039'. [ 961.616424][T15787] netlink: 'syz.7.2039': attribute type 10 has an invalid length. [ 961.624314][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2039'. [ 961.754613][T15787] CUSE: unknown device info "ÿ" [ 961.760173][T15787] CUSE: zero length info key specified [ 961.791332][T15797] erofs (device nbd5): cannot find valid erofs superblock [ 963.715371][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2047'. [ 964.745313][T15832] netlink: 'syz.6.2047': attribute type 10 has an invalid length. [ 964.779516][T15832] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2047'. [ 965.181504][T15835] CUSE: unknown device info "ÿ" [ 965.186588][T15835] CUSE: zero length info key specified [ 968.603857][T15848] block nbd6: shutting down sockets [ 968.774654][T15875] erofs (device nbd7): cannot find valid erofs superblock [ 969.597594][T15885] input: syz1 as /devices/virtual/input/input103 [ 970.848528][T15901] input: syz1 as /devices/virtual/input/input104 [ 971.823150][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2063'. [ 971.966170][T15912] netlink: 'syz.7.2063': attribute type 10 has an invalid length. [ 971.974382][T15912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2063'. [ 971.986901][T15912] CUSE: unknown device info "ÿ" [ 971.992234][T15912] CUSE: zero length info key specified [ 977.023507][T15938] veth0_vlan: left promiscuous mode [ 977.033625][T15938] veth0_vlan: entered promiscuous mode [ 978.835599][T15949] input: syz1 as /devices/virtual/input/input105 [ 981.140407][T15974] erofs (device nbd2): cannot find valid erofs superblock [ 981.309840][T14444] Bluetooth: Error in BCSP hdr checksum [ 981.330192][T15976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15976 comm=syz.6.2075 [ 981.648283][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 981.667667][ T8896] Bluetooth: Error in BCSP hdr checksum [ 982.094246][ T8896] Bluetooth: Error in BCSP hdr checksum [ 982.149676][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 982.172527][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 982.206361][ T9] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 982.222607][ T9] usb 7-1: config 0 has no interface number 0 [ 982.230828][ T9] usb 7-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 982.243160][ T9] usb 7-1: config 0 interface 143 has no altsetting 0 [ 982.255724][ T9] usb 7-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 982.268129][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.292906][ T9] usb 7-1: Product: syz [ 982.415396][T13191] Bluetooth: Error in BCSP hdr checksum [ 982.425317][ T9] usb 7-1: Manufacturer: syz [ 982.430015][ T9] usb 7-1: SerialNumber: syz [ 982.951582][T13191] Bluetooth: Error in BCSP hdr checksum [ 982.960537][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 982.967050][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 982.994191][ T9] r8152 7-1:0.143: Expected endpoints are not found [ 983.079649][ T5828] Bluetooth: hci4: command 0x1003 tx timeout [ 983.086740][T11304] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 983.098943][T15991] C: renamed from lo (while UP) [ 983.116694][T15991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 983.202528][T12776] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 983.210992][ T8896] Bluetooth: Error in BCSP hdr checksum [ 983.223298][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2081'. [ 983.402145][T15996] veth0_vlan: left promiscuous mode [ 983.412224][T15996] veth0_vlan: entered promiscuous mode [ 984.403914][T16001] veth0_vlan: left promiscuous mode [ 984.414177][T16001] veth0_vlan: entered promiscuous mode [ 984.929762][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 985.099339][T16008] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 985.134899][T16008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2084'. [ 985.157209][T16009] CUSE: unknown device info "ÿ" [ 985.166692][T16009] CUSE: zero length info key specified [ 986.422796][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2086'. [ 986.435559][T15943] block nbd5: shutting down sockets [ 986.521523][T16016] input: syz1 as /devices/virtual/input/input106 [ 987.731742][T16028] veth0_vlan: left promiscuous mode [ 987.744337][T16028] veth0_vlan: entered promiscuous mode [ 989.534714][T16045] veth0_vlan: left promiscuous mode [ 989.540897][T16045] veth0_vlan: entered promiscuous mode [ 989.662153][T16049] veth0_vlan: left promiscuous mode [ 989.672385][T16049] veth0_vlan: entered promiscuous mode [ 992.547260][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.676578][T16076] netlink: 'syz.7.2099': attribute type 10 has an invalid length. [ 992.684715][T16076] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2099'. [ 992.752424][T16077] CUSE: unknown device info "ÿ" [ 992.757431][T16077] CUSE: zero length info key specified [ 994.642461][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2099'. [ 994.666358][T16084] veth0_vlan: left promiscuous mode [ 994.673091][T16084] veth0_vlan: entered promiscuous mode [ 994.689976][T16087] veth0_vlan: left promiscuous mode [ 994.696444][T16087] veth0_vlan: entered promiscuous mode [ 996.402176][T16105] input: syz1 as /devices/virtual/input/input107 [ 997.490435][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2107'. [ 997.841733][T16121] input: syz1 as /devices/virtual/input/input108 [ 998.335579][T16112] netlink: 'syz.7.2107': attribute type 10 has an invalid length. [ 998.343795][T16112] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2107'. [ 998.357351][T16112] CUSE: unknown device info "ÿ" [ 998.362524][T16112] CUSE: zero length info key specified [ 1000.670934][T16134] veth0_vlan: left promiscuous mode [ 1000.680893][T16134] veth0_vlan: entered promiscuous mode [ 1002.377972][T16148] netlink: 'syz.6.2113': attribute type 10 has an invalid length. [ 1002.386108][T16148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2113'. [ 1002.397816][T16148] CUSE: unknown device info "ÿ" [ 1002.403031][T16148] CUSE: zero length info key specified [ 1003.687064][T16158] input: syz1 as /devices/virtual/input/input109 [ 1004.781350][T16168] input: syz1 as /devices/virtual/input/input110 [ 1004.930552][T16173] input: syz1 as /devices/virtual/input/input111 [ 1004.992481][T16170] veth0_vlan: left promiscuous mode [ 1004.999166][T16170] veth0_vlan: entered promiscuous mode [ 1006.099001][T16189] input: syz1 as /devices/virtual/input/input112 [ 1007.919337][T16200] input: syz1 as /devices/virtual/input/input113 [ 1013.309829][ T971] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1013.579728][ T971] usb 8-1: Using ep0 maxpacket: 16 [ 1013.620232][ T971] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.646953][ T971] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1013.688298][ T971] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1013.706411][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.827457][T16260] veth0_vlan: left promiscuous mode [ 1013.837831][T16260] veth0_vlan: entered promiscuous mode [ 1014.197260][ T971] usb 8-1: Product: syz [ 1014.217709][ T971] usb 8-1: Manufacturer: syz [ 1014.368144][ T971] usb 8-1: SerialNumber: syz [ 1014.383316][ T971] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1014.401885][ T971] r8152-cfgselector 8-1: config 0 descriptor?? [ 1017.152884][T16288] veth0_vlan: left promiscuous mode [ 1017.159736][T16288] veth0_vlan: entered promiscuous mode [ 1017.754446][T16295] veth0_vlan: left promiscuous mode [ 1017.761221][T16295] veth0_vlan: entered promiscuous mode [ 1019.058166][ T971] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 1023.129852][T16348] veth0_vlan: left promiscuous mode [ 1023.137155][T16348] veth0_vlan: entered promiscuous mode [ 1027.355611][T16375] veth0_vlan: left promiscuous mode [ 1027.363736][T16375] veth0_vlan: entered promiscuous mode [ 1028.511870][ T5874] kworker/0:4 (5874) used greatest stack depth: 20856 bytes left [ 1028.569565][T16399] veth0_vlan: left promiscuous mode [ 1028.579298][T16399] veth0_vlan: entered promiscuous mode [ 1029.267998][T16407] veth0_vlan: left promiscuous mode [ 1029.276947][T16407] veth0_vlan: entered promiscuous mode [ 1032.611031][T16427] block nbd7: shutting down sockets [ 1037.423643][T16473] block nbd7: shutting down sockets [ 1037.553940][T16482] veth0_vlan: left promiscuous mode [ 1037.560851][T16482] veth0_vlan: entered promiscuous mode [ 1039.936928][T16489] veth0_vlan: left promiscuous mode [ 1039.969097][T16489] veth0_vlan: entered promiscuous mode [ 1040.861899][T16503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1041.677024][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 1043.019897][T16523] veth0_vlan: left promiscuous mode [ 1043.026599][T16523] veth0_vlan: entered promiscuous mode [ 1046.177154][T16548] veth0_vlan: left promiscuous mode [ 1046.187849][T16548] veth0_vlan: entered promiscuous mode [ 1048.442651][T16565] input: syz1 as /devices/virtual/input/input114 [ 1051.657875][T16599] erofs (device nbd4): cannot find valid erofs superblock [ 1054.396486][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.870528][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2216'. [ 1058.227357][T16659] veth0_vlan: left promiscuous mode [ 1058.237424][T16659] veth0_vlan: entered promiscuous mode [ 1061.366508][T16673] erofs (device nbd6): cannot find valid erofs superblock [ 1066.844891][T16716] input: syz1 as /devices/virtual/input/input115 [ 1067.948179][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1068.184449][T16731] veth0_vlan: left promiscuous mode [ 1068.195285][T16731] veth0_vlan: entered promiscuous mode [ 1068.630599][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1068.651932][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1068.673578][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.717027][ T9] usb 5-1: Product: syz [ 1068.732789][ T9] usb 5-1: Manufacturer: syz [ 1068.766445][ T9] usb 5-1: SerialNumber: syz [ 1068.800292][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1068.814005][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 1069.096922][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2239'. [ 1069.377134][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1069.401394][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 1069.438371][ T9] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 1069.983398][T16745] input: syz1 as /devices/virtual/input/input116 [ 1071.145841][T16765] erofs (device nbd5): cannot find valid erofs superblock [ 1071.809326][T16773] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1072.679763][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 1073.794134][T16789] veth0_vlan: left promiscuous mode [ 1073.801008][T16789] veth0_vlan: entered promiscuous mode [ 1077.361539][T16817] erofs (device nbd4): cannot find valid erofs superblock [ 1078.958976][T16835] erofs (device nbd6): cannot find valid erofs superblock [ 1079.647672][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 1080.969581][T16867] veth0_vlan: left promiscuous mode [ 1080.978038][T16867] veth0_vlan: entered promiscuous mode [ 1084.517982][T16885] input: syz1 as /devices/virtual/input/input117 [ 1084.679619][T16887] erofs (device nbd2): cannot find valid erofs superblock [ 1085.166842][T16895] erofs (device nbd4): cannot find valid erofs superblock [ 1086.095765][T16912] netlink: 'syz.7.2277': attribute type 10 has an invalid length. [ 1086.103996][T16912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2277'. [ 1086.117310][T16912] CUSE: unknown device info "ÿ" [ 1086.122523][T16912] CUSE: zero length info key specified [ 1089.670376][T16935] input: syz1 as /devices/virtual/input/input118 [ 1092.456455][T16950] input: syz1 as /devices/virtual/input/input119 [ 1093.697811][T16957] input: syz1 as /devices/virtual/input/input120 [ 1098.910753][T17000] erofs (device nbd5): cannot find valid erofs superblock [ 1101.873595][T17032] input: syz1 as /devices/virtual/input/input121 [ 1104.115387][T17053] erofs (device nbd4): cannot find valid erofs superblock [ 1105.921680][T17064] input: syz1 as /devices/virtual/input/input122 [ 1111.092213][T17115] veth0_vlan: left promiscuous mode [ 1111.099657][T17115] veth0_vlan: entered promiscuous mode [ 1113.266467][T17137] erofs (device nbd6): cannot find valid erofs superblock [ 1114.596517][T17155] input: syz1 as /devices/virtual/input/input123 [ 1115.405874][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.399851][T17227] input: syz1 as /devices/virtual/input/input124 [ 1127.035745][T17253] input: syz1 as /devices/virtual/input/input125 [ 1131.511533][T17290] erofs (device nbd2): cannot find valid erofs superblock [ 1134.147199][T17305] block nbd6: shutting down sockets [ 1135.139454][T17333] erofs (device nbd2): cannot find valid erofs superblock [ 1136.459133][T17338] block nbd7: shutting down sockets [ 1136.536885][T17341] block nbd2: shutting down sockets [ 1136.611177][T17344] input: syz1 as /devices/virtual/input/input126 [ 1144.172553][T17399] input: syz1 as /devices/virtual/input/input127 [ 1147.005210][T17430] input: syz1 as /devices/virtual/input/input128 [ 1149.602636][T17449] input: syz1 as /devices/virtual/input/input129 [ 1150.433057][T17457] input: syz1 as /devices/virtual/input/input130 [ 1152.206643][T17470] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1152.323637][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 1152.404016][T17475] erofs (device nbd6): cannot find valid erofs superblock [ 1153.163964][T17484] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1154.281485][ T971] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1154.439763][ T971] usb 7-1: Using ep0 maxpacket: 16 [ 1154.689031][ T971] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1154.707264][ T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.857144][T17502] /dev/nullb0: Can't open blockdev [ 1155.418042][ T971] usb 7-1: Product: syz [ 1155.430397][ T971] usb 7-1: Manufacturer: syz [ 1155.438618][ T971] usb 7-1: SerialNumber: syz [ 1155.459680][ T971] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1155.465989][ T971] r8152-cfgselector 7-1: config 0 descriptor?? [ 1156.317576][T17509] erofs (device nbd2): cannot find valid erofs superblock [ 1156.429313][ T10] r8152-cfgselector 7-1: USB disconnect, device number 4 [ 1157.065964][T17523] erofs (device nbd5): cannot find valid erofs superblock [ 1162.550571][T17565] netlink: 'syz.5.2411': attribute type 10 has an invalid length. [ 1162.558488][T17565] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2411'. [ 1162.570706][T17565] CUSE: unknown device info "ÿ" [ 1162.575697][T17565] CUSE: zero length info key specified [ 1162.917536][T17573] NILFS (nullb0): couldn't find nilfs on the device [ 1164.749436][T17585] erofs (device nbd2): cannot find valid erofs superblock [ 1164.858829][T17564] block nbd7: shutting down sockets [ 1166.344812][T17601] erofs (device nbd6): cannot find valid erofs superblock [ 1171.851614][T17638] erofs (device nbd5): cannot find valid erofs superblock [ 1173.041263][T17648] input: syz1 as /devices/virtual/input/input131 [ 1173.229508][T17576] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1173.587196][T17661] erofs (device nbd7): cannot find valid erofs superblock [ 1174.449719][T17576] usb 7-1: Using ep0 maxpacket: 8 [ 1174.467292][T17576] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1175.395393][T17576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.409620][T17576] usb 7-1: Product: syz [ 1175.413819][T17576] usb 7-1: Manufacturer: syz [ 1175.418410][T17576] usb 7-1: SerialNumber: syz [ 1175.426606][T17576] usb 7-1: config 0 descriptor?? [ 1175.869625][T13174] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1175.913339][T17576] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1176.129525][T13174] usb 5-1: Using ep0 maxpacket: 16 [ 1176.194869][T17678] input: syz1 as /devices/virtual/input/input132 [ 1176.882419][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.672015][T13174] usb 5-1: device descriptor read/all, error -71 [ 1177.690588][T17576] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1177.717799][T17687] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1177.868649][T17576] usb 7-1: USB disconnect, device number 5 [ 1180.876400][T17725] input: syz1 as /devices/virtual/input/input133 [ 1181.384164][T17733] erofs (device nbd5): cannot find valid erofs superblock [ 1182.877049][T17739] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1189.120359][T17791] erofs (device nbd6): cannot find valid erofs superblock [ 1189.479112][T17788] input: syz1 as /devices/virtual/input/input134 [ 1192.849923][T17814] erofs (device nbd5): cannot find valid erofs superblock [ 1193.618821][T17824] input: syz1 as /devices/virtual/input/input135 [ 1194.965241][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2471'. [ 1195.677927][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2471'. [ 1197.317725][T17868] erofs (device nbd5): cannot find valid erofs superblock [ 1198.065176][T17864] block nbd7: shutting down sockets [ 1204.243887][T17925] input: syz1 as /devices/virtual/input/input136 [ 1208.221182][T17963] erofs (device nbd7): cannot find valid erofs superblock [ 1213.041026][T18007] input: syz1 as /devices/virtual/input/input137 [ 1218.499611][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1218.530449][T18068] input: syz1 as /devices/virtual/input/input138 [ 1218.679581][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1218.698045][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1218.715479][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.726892][ T9] usb 6-1: Product: syz [ 1218.740216][ T9] usb 6-1: Manufacturer: syz [ 1218.740958][T18074] input: syz1 as /devices/virtual/input/input139 [ 1218.745590][ T9] usb 6-1: SerialNumber: syz [ 1218.778301][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1218.785645][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 1219.788961][ T5930] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 1220.836472][T18087] block nbd6: shutting down sockets [ 1223.070421][T18108] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1223.097496][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 1223.119455][T18097] block nbd7: shutting down sockets [ 1224.432196][T18132] input: syz1 as /devices/virtual/input/input140 [ 1228.040798][T18162] input: syz1 as /devices/virtual/input/input141 [ 1228.396825][T18172] block nbd2: shutting down sockets [ 1229.487324][T18183] block nbd4: shutting down sockets [ 1229.761145][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1230.039531][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1230.084363][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 1230.151674][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1230.244292][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.361361][ T9] usb 3-1: Product: syz [ 1230.378161][ T9] usb 3-1: Manufacturer: syz [ 1230.392248][ T9] usb 3-1: SerialNumber: syz [ 1230.525010][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1231.078075][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 1231.116304][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1231.467477][T18208] netlink: 'syz.4.2552': attribute type 10 has an invalid length. [ 1231.481139][T18208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1231.500381][T18208] CUSE: unknown device info "ÿ" [ 1231.505472][T18208] CUSE: zero length info key specified [ 1232.476595][T18210] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1232.584708][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 1232.587146][ T5822] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 1237.063335][T18254] input: syz1 as /devices/virtual/input/input142 [ 1238.288748][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.326002][T13295] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1238.919533][T13295] usb 8-1: Using ep0 maxpacket: 16 [ 1239.530203][T13295] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1239.671528][T13295] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.779731][T13295] usb 8-1: Product: syz [ 1239.783941][T13295] usb 8-1: Manufacturer: syz [ 1239.788530][T13295] usb 8-1: SerialNumber: syz [ 1239.901709][T13295] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1239.939417][T13295] r8152-cfgselector 8-1: config 0 descriptor?? [ 1240.945324][T18293] input: syz1 as /devices/virtual/input/input143 [ 1242.145750][T13295] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1242.178350][T13295] r8152-cfgselector 8-1: bad CDC descriptors [ 1242.238445][T13295] r8152-cfgselector 8-1: USB disconnect, device number 3 [ 1243.813966][T18307] input: syz1 as /devices/virtual/input/input144 [ 1244.034537][T18318] input: syz1 as /devices/virtual/input/input145 [ 1244.544093][T17576] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1244.756408][T18324] input: syz1 as /devices/virtual/input/input146 [ 1245.327987][T17576] usb 7-1: Using ep0 maxpacket: 8 [ 1246.363953][T17576] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1246.396112][T17576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.421955][T17576] usb 7-1: Product: syz [ 1246.428289][T17576] usb 7-1: Manufacturer: syz [ 1246.438380][T17576] usb 7-1: SerialNumber: syz [ 1246.451928][T17576] usb 7-1: config 0 descriptor?? [ 1246.575813][T17576] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 1246.608434][T17576] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1247.877139][T17576] usb 7-1: USB disconnect, device number 6 [ 1252.441616][T18379] input: syz1 as /devices/virtual/input/input147 [ 1254.128743][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2597'. [ 1255.386100][T18416] netlink: 'syz.6.2597': attribute type 10 has an invalid length. [ 1255.394351][T18416] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2597'. [ 1255.406261][T18422] CUSE: unknown device info "ÿ" [ 1255.411427][T18422] CUSE: zero length info key specified [ 1256.234190][T18410] block nbd5: shutting down sockets [ 1259.935217][T18466] NILFS (nullb0): couldn't find nilfs on the device [ 1260.366060][T18469] input: syz1 as /devices/virtual/input/input149 [ 1260.973121][T18473] input: syz1 as /devices/virtual/input/input150 [ 1264.647477][T18516] input: syz1 as /devices/virtual/input/input152 [ 1266.125481][T18497] block nbd6: shutting down sockets [ 1266.954919][T18524] input: syz1 as /devices/virtual/input/input153 [ 1266.980304][T18523] input: syz1 as /devices/virtual/input/input154 [ 1269.208648][T18544] block nbd5: shutting down sockets [ 1270.844928][T18571] input: syz1 as /devices/virtual/input/input155 [ 1271.475902][T18585] input: syz1 as /devices/virtual/input/input156 [ 1275.690474][T18630] veth0_vlan: left promiscuous mode [ 1275.696444][T18630] veth0_vlan: entered promiscuous mode [ 1276.547798][ T30] audit: type=1400 audit(1745233267.269:539): avc: denied { read } for pid=18642 comm="syz.6.2647" path="socket:[51954]" dev="sockfs" ino=51954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1277.503798][T18652] input: syz1 as /devices/virtual/input/input157 [ 1282.485931][T18708] input: syz1 as /devices/virtual/input/input158 [ 1284.102783][T18729] No control pipe specified [ 1284.673621][T18737] veth0_vlan: left promiscuous mode [ 1284.679232][T18737] veth0_vlan: entered promiscuous mode [ 1286.720451][T18760] block nbd4: shutting down sockets [ 1288.303568][T18789] input: syz1 as /devices/virtual/input/input159 [ 1288.857653][T18791] input: syz1 as /devices/virtual/input/input160 [ 1289.804791][T18796] veth0_vlan: left promiscuous mode [ 1289.810764][T18796] veth0_vlan: entered promiscuous mode [ 1290.142008][T18802] input: syz1 as /devices/virtual/input/input161 [ 1295.652274][T18859] veth0_vlan: left promiscuous mode [ 1295.670144][T18859] veth0_vlan: entered promiscuous mode [ 1297.320711][T18877] input: syz1 as /devices/virtual/input/input162 [ 1299.723890][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.124378][T18906] input: syz1 as /devices/virtual/input/input163 [ 1304.453112][T18956] input: syz1 as /devices/virtual/input/input164 [ 1305.599211][T18942] input: syz1 as /devices/virtual/input/input165 [ 1306.315806][T18971] veth0_vlan: left promiscuous mode [ 1306.354017][T18971] veth0_vlan: entered promiscuous mode [ 1310.379811][T19007] netlink: 'syz.4.2728': attribute type 10 has an invalid length. [ 1310.387738][T19007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2728'. [ 1310.398819][T19007] CUSE: unknown device info "ÿ" [ 1310.403933][T19007] CUSE: zero length info key specified [ 1312.668798][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 1312.724179][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 1312.860158][T19012] ceph: No mds server is up or the cluster is laggy [ 1317.234065][T19067] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 1317.242168][T19067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2741'. [ 1317.254318][T19067] CUSE: unknown device info "ÿ" [ 1317.259415][T19067] CUSE: zero length info key specified [ 1317.847364][T19057] block nbd6: shutting down sockets [ 1318.743009][T19077] ceph: No mds server is up or the cluster is laggy [ 1320.413860][T19099] input: syz1 as /devices/virtual/input/input166 [ 1322.312166][T19115] input: syz1 as /devices/virtual/input/input167 [ 1322.901910][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2754'. [ 1323.598630][T19122] netlink: 'syz.5.2754': attribute type 10 has an invalid length. [ 1323.606806][T19122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2754'. [ 1323.617745][T19122] CUSE: unknown device info "ÿ" [ 1323.622909][T19122] CUSE: zero length info key specified [ 1325.911120][T17576] libceph: connect (1)[c::]:6789 error -101 [ 1326.072380][T19125] ceph: No mds server is up or the cluster is laggy [ 1326.075604][T17576] libceph: mon0 (1)[c::]:6789 connect error [ 1326.642444][T19142] input: syz1 as /devices/virtual/input/input168 [ 1327.630986][T17576] libceph: connect (1)[c::]:6789 error -101 [ 1327.642506][T17576] libceph: mon0 (1)[c::]:6789 connect error [ 1327.729278][T19145] ceph: No mds server is up or the cluster is laggy [ 1328.566379][T19165] input: syz1 as /devices/virtual/input/input169 [ 1330.135352][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1330.288362][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1330.380035][T19179] ceph: No mds server is up or the cluster is laggy [ 1330.944976][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 1330.977781][T19187] netlink: 'syz.2.2768': attribute type 10 has an invalid length. [ 1330.985721][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2768'. [ 1330.997476][T19187] CUSE: unknown device info "ÿ" [ 1331.002564][T19187] CUSE: zero length info key specified [ 1336.219989][T19246] erofs (device nbd6): cannot find valid erofs superblock [ 1337.795498][T19264] input: syz1 as /devices/virtual/input/input170 [ 1341.579404][T11304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1342.777049][T19300] ceph: No mds server is up or the cluster is laggy [ 1343.667040][T19313] veth0_vlan: left promiscuous mode [ 1343.673717][T19313] veth0_vlan: entered promiscuous mode [ 1344.774322][T19326] ceph: No mds server is up or the cluster is laggy [ 1345.109496][T19336] input: syz1 as /devices/virtual/input/input171 [ 1345.677789][T19331] input: syz1 as /devices/virtual/input/input172 [ 1345.933304][T19345] input: syz1 as /devices/virtual/input/input173 [ 1346.810117][T19353] input: syz1 as /devices/virtual/input/input174 [ 1348.883550][T13174] libceph: connect (1)[c::]:6789 error -101 [ 1348.898180][T13174] libceph: mon0 (1)[c::]:6789 connect error [ 1349.051941][T19365] ceph: No mds server is up or the cluster is laggy [ 1349.950091][T19374] ceph: No mds server is up or the cluster is laggy [ 1350.734453][T19384] input: syz1 as /devices/virtual/input/input175 [ 1354.624235][T19421] input: syz1 as /devices/virtual/input/input176 [ 1355.478030][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1355.494621][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1355.986057][T13174] libceph: connect (1)[c::]:6789 error -101 [ 1355.997760][T13174] libceph: mon0 (1)[c::]:6789 connect error [ 1356.016474][T19425] ceph: No mds server is up or the cluster is laggy [ 1356.016940][T19433] ceph: No mds server is up or the cluster is laggy [ 1356.129589][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1356.471827][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2822'. [ 1356.590219][T19444] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 1356.598029][T19444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1356.607571][T19444] CUSE: unknown device info "ÿ" [ 1356.612536][T19444] CUSE: zero length info key specified [ 1357.280294][T19451] netlink: 'syz.7.2822': attribute type 10 has an invalid length. [ 1357.289527][T19451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2822'. [ 1357.302629][T19451] CUSE: unknown device info "ÿ" [ 1357.307677][T19451] CUSE: zero length info key specified [ 1359.528442][T19471] input: syz1 as /devices/virtual/input/input177 [ 1360.596689][T19482] input: syz1 as /devices/virtual/input/input178 [ 1361.174587][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.407514][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2833'. [ 1362.862564][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1363.109701][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1363.173873][T19502] netlink: 'syz.4.2833': attribute type 10 has an invalid length. [ 1363.182005][T19502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2833'. [ 1363.193263][T19502] CUSE: unknown device info "ÿ" [ 1363.198313][T19502] CUSE: zero length info key specified [ 1364.453259][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1365.404991][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1365.464691][T19503] ceph: No mds server is up or the cluster is laggy [ 1365.706425][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1365.947512][T19516] netlink: 'syz.4.2836': attribute type 10 has an invalid length. [ 1365.955479][T19516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1365.968660][T19516] CUSE: unknown device info "ÿ" [ 1365.973885][T19516] CUSE: zero length info key specified [ 1367.620661][T19524] ceph: No mds server is up or the cluster is laggy [ 1370.391422][T19538] block nbd4: shutting down sockets [ 1371.922438][T19567] input: syz1 as /devices/virtual/input/input179 [ 1372.550129][T19573] erofs (device nbd4): cannot find valid erofs superblock [ 1373.319706][T11304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1376.614897][T19626] erofs (device nbd6): cannot find valid erofs superblock [ 1377.756613][T19628] ceph: No mds server is up or the cluster is laggy [ 1378.518866][T11304] Bluetooth: hci1: command tx timeout [ 1380.739318][T19661] overlayfs: failed to resolve './file0': -2 [ 1381.742498][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1381.752632][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1382.709097][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1383.117249][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1383.154740][T19675] ceph: No mds server is up or the cluster is laggy [ 1386.442044][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'. [ 1386.872572][T19721] netlink: 'syz.4.2881': attribute type 10 has an invalid length. [ 1386.880764][T19721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2881'. [ 1387.492208][T11304] Bluetooth: hci5: command 0x0406 tx timeout [ 1387.576495][T19721] CUSE: unknown device info "ÿ" [ 1387.581711][T19721] CUSE: zero length info key specified [ 1388.534422][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1388.884215][T17576] libceph: connect (1)[c::]:6789 error -101 [ 1388.921317][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1389.034128][T17576] libceph: mon0 (1)[c::]:6789 connect error [ 1389.181601][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1389.206761][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1389.373560][T19741] ceph: No mds server is up or the cluster is laggy [ 1389.381000][T19737] ceph: No mds server is up or the cluster is laggy [ 1392.360974][T19785] input: syz1 as /devices/virtual/input/input180 [ 1393.287978][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1393.497131][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1393.633194][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2896'. [ 1393.652660][T19793] ceph: No mds server is up or the cluster is laggy [ 1393.745656][T19799] netlink: 'syz.5.2896': attribute type 10 has an invalid length. [ 1393.753708][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2896'. [ 1393.766083][T19799] CUSE: unknown device info "ÿ" [ 1393.771128][T19799] CUSE: zero length info key specified [ 1393.917907][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1394.652628][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1395.178096][T19806] input: syz1 as /devices/virtual/input/input181 [ 1395.573799][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1395.799473][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1396.529667][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1396.613739][T19802] ceph: No mds server is up or the cluster is laggy [ 1396.663058][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1398.486661][T19838] erofs (device nbd2): cannot find valid erofs superblock [ 1398.689654][T19843] input: syz1 as /devices/virtual/input/input182 [ 1401.337865][T19856] ceph: No mds server is up or the cluster is laggy [ 1401.655003][T19870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1401.666197][T19870] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1403.470247][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 1404.881478][T13174] libceph: connect (1)[c::]:6789 error -101 [ 1404.888386][T13174] libceph: mon0 (1)[c::]:6789 connect error [ 1405.269474][T13174] libceph: connect (1)[c::]:6789 error -101 [ 1405.282512][T19896] ceph: No mds server is up or the cluster is laggy [ 1405.289654][T13174] libceph: mon0 (1)[c::]:6789 connect error [ 1407.235217][T13295] libceph: connect (1)[c::]:6789 error -101 [ 1407.269633][T13295] libceph: mon0 (1)[c::]:6789 connect error [ 1407.510127][T19912] ceph: No mds server is up or the cluster is laggy [ 1407.584563][T17576] libceph: connect (1)[c::]:6789 error -101 [ 1407.591297][T17576] libceph: mon0 (1)[c::]:6789 connect error [ 1408.194955][T13174] libceph: connect (1)[c::]:6789 error -101 [ 1408.358287][T19934] ceph: No mds server is up or the cluster is laggy [ 1408.370501][T13174] libceph: mon0 (1)[c::]:6789 connect error [ 1408.497655][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1408.607091][T19943] netlink: 'syz.4.2927': attribute type 10 has an invalid length. [ 1408.615227][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1408.629870][T19943] CUSE: unknown device info "ÿ" [ 1408.634891][T19943] CUSE: zero length info key specified [ 1413.807362][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1413.830203][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1413.972748][T19975] ceph: No mds server is up or the cluster is laggy [ 1414.515269][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1414.565433][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1415.402916][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 1415.500350][T19979] block nbd5: shutting down sockets [ 1415.625966][T20000] netlink: 'syz.4.2940': attribute type 10 has an invalid length. [ 1415.642426][T20000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2940'. [ 1415.653994][T20000] CUSE: unknown device info "ÿ" [ 1415.659043][T20000] CUSE: zero length info key specified [ 1418.737973][T20019] ceph: No mds server is up or the cluster is laggy [ 1420.715212][T20025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1420.726557][T20025] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1422.753657][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.797730][T20034] ceph: No mds server is up or the cluster is laggy [ 1424.087144][T20058] ceph: No mds server is up or the cluster is laggy [ 1424.386169][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1424.413677][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1425.731137][T20084] input: syz1 as /devices/virtual/input/input183 [ 1429.217975][T20116] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1429.379640][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2964'. [ 1430.723410][T20131] veth0_vlan: left promiscuous mode [ 1430.730043][T20131] veth0_vlan: entered promiscuous mode [ 1432.061684][T20146] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1432.153188][T20146] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1433.212554][T20154] netlink: 'syz.6.2972': attribute type 10 has an invalid length. [ 1433.238867][T20154] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2972'. [ 1433.256545][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2972'. [ 1433.271882][T20150] CUSE: unknown device info "ÿ" [ 1433.276963][T20150] CUSE: zero length info key specified [ 1434.867327][T20169] input: syz1 as /devices/virtual/input/input184 [ 1436.159613][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1436.166645][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1436.216253][T20174] ceph: No mds server is up or the cluster is laggy [ 1436.620012][T20191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1436.631797][T20191] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1440.203513][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1440.322995][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1440.648503][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1440.654937][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1441.581477][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1441.691352][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1441.743209][T20228] ceph: No mds server is up or the cluster is laggy [ 1444.789488][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1444.789781][T17576] libceph: connect (1)[c::]:6789 error -101 [ 1444.802765][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1444.821156][T20260] ceph: No mds server is up or the cluster is laggy [ 1444.840826][T17576] libceph: mon0 (1)[c::]:6789 connect error [ 1444.865314][T20261] ceph: No mds server is up or the cluster is laggy [ 1448.492435][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1448.589386][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1448.998301][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1449.755531][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1450.159522][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 1450.376764][T20304] ceph: No mds server is up or the cluster is laggy [ 1450.754934][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1450.761168][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1451.023814][T20315] input: syz1 as /devices/virtual/input/input185 [ 1451.766726][T20327] ceph: No mds server is up or the cluster is laggy [ 1453.070377][T20356] input: syz1 as /devices/virtual/input/input186 [ 1454.868550][T20376] veth0_vlan: left promiscuous mode [ 1454.880276][T20376] veth0_vlan: entered promiscuous mode [ 1465.792402][T20486] overlayfs: failed to resolve './file0': -2 [ 1472.467096][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1472.476909][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1472.779745][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1472.798054][T20554] ceph: No mds server is up or the cluster is laggy [ 1472.897466][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1472.985957][ T30] audit: type=1400 audit(1745233463.709:540): avc: denied { listen } for pid=20560 comm="syz.5.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1473.178205][ T30] audit: type=1400 audit(1745233463.709:541): avc: denied { setopt } for pid=20560 comm="syz.5.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1473.814639][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1473.824235][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1474.040907][T20568] ceph: No mds server is up or the cluster is laggy [ 1477.440640][T20612] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1477.590904][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1478.869478][ T5903] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1479.095301][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1479.259440][ T5903] usb 6-1: device descriptor read/64, error -32 [ 1479.332651][T20631] ceph: No mds server is up or the cluster is laggy [ 1479.558028][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1479.806514][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1479.815246][ T5903] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1479.837073][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.529574][ T5903] usb 6-1: Product: syz [ 1480.533776][ T5903] usb 6-1: Manufacturer: syz [ 1480.538369][ T5903] usb 6-1: SerialNumber: syz [ 1480.545432][T20647] ceph: No mds server is up or the cluster is laggy [ 1480.554227][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1480.585156][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1480.683613][ T5903] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1480.691413][ T5903] r8152-cfgselector 6-1: config 0 descriptor?? [ 1481.824950][ T5903] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1481.839558][ T5903] r8152-cfgselector 6-1: bad CDC descriptors [ 1481.853473][ T5903] r8152-cfgselector 6-1: USB disconnect, device number 14 [ 1482.080108][T20674] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1482.091799][T20674] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1484.041710][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.627687][T20705] ceph: No mds server is up or the cluster is laggy [ 1489.809629][T20772] overlayfs: failed to resolve './file1': -2 [ 1491.853044][T20783] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1493.219317][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1493.229693][T13295] libceph: connect (1)[c::]:6789 error -101 [ 1493.235801][T13295] libceph: mon0 (1)[c::]:6789 connect error [ 1493.259564][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1493.294875][T20781] ceph: No mds server is up or the cluster is laggy [ 1493.295718][T20786] ceph: No mds server is up or the cluster is laggy [ 1495.000242][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1495.014391][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1495.237735][T20820] ceph: No mds server is up or the cluster is laggy [ 1497.209709][T20838] veth0_vlan: left promiscuous mode [ 1497.216219][T20838] veth0_vlan: entered promiscuous mode [ 1498.674608][T20846] ceph: No mds server is up or the cluster is laggy [ 1498.684968][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 1498.796832][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 1500.389222][T20871] ceph: No mds server is up or the cluster is laggy [ 1500.968107][T20886] overlayfs: failed to resolve './file1': -2 [ 1504.718362][T20922] erofs (device nbd4): cannot find valid erofs superblock [ 1505.159048][T20926] page: refcount:3 mapcount:0 mapping:ffff888148c0eff8 index:0x2 pfn:0x2854a [ 1505.167948][T20926] memcg:ffff88803522c000 [ 1505.172212][T20926] aops:def_blk_aops ino:fa00000 [ 1505.177059][T20926] flags: 0xfff60000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 1505.186560][T20926] raw: 00fff60000000039 ffffea0000a152c8 ffff88805a28e2e0 ffff888148c0eff8 [ 1505.195158][T20926] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88803522c000 [ 1505.203749][T20926] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 1505.211911][T20926] page_owner tracks the page as allocated [ 1505.217646][T20926] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20923, tgid 20923 (syz.5.3136), ts 1505087560361, free_ts 1504847338845 [ 1505.238763][T20926] post_alloc_hook+0x181/0x1b0 [ 1505.243762][T20926] get_page_from_freelist+0x135c/0x3920 [ 1505.249398][T20926] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1505.255290][T20926] alloc_pages_mpol+0x1fb/0x550 [ 1505.260148][T20926] folio_alloc_noprof+0x20/0x2d0 [ 1505.265106][T20926] filemap_alloc_folio_noprof+0x3a1/0x470 [ 1505.270831][T20926] page_cache_ra_order+0x4c0/0xd00 [ 1505.275938][T20926] filemap_fault+0x147c/0x2740 [ 1505.280715][T20926] __do_fault+0x10a/0x490 [ 1505.285113][T20926] do_pte_missing+0x1a6/0x3fb0 [ 1505.289882][T20926] __handle_mm_fault+0x103d/0x2a40 [ 1505.294998][T20926] handle_mm_fault+0x3fe/0xad0 [ 1505.299768][T20926] do_user_addr_fault+0x60c/0x1370 [ 1505.304891][T20926] exc_page_fault+0x5c/0xc0 [ 1505.309420][T20926] asm_exc_page_fault+0x26/0x30 [ 1505.314272][T20926] page last free pid 14795 tgid 14795 stack trace: [ 1505.320808][T20926] __free_frozen_pages+0x69d/0xff0 [ 1505.325928][T20926] __folio_put+0x329/0x450 [ 1505.330366][T20926] io_ring_exit_work+0xb28/0xf60 [ 1505.335524][T20926] process_one_work+0x9cc/0x1b70 [ 1505.340814][T20926] worker_thread+0x6c8/0xf10 [ 1505.345820][T20926] kthread+0x3c2/0x780 [ 1505.350164][T20926] ret_from_fork+0x45/0x80 [ 1505.354619][T20926] ret_from_fork_asm+0x1a/0x30 [ 1505.393190][T20926] ------------[ cut here ]------------ [ 1505.398640][T20926] kernel BUG at mm/filemap.c:3433! [ 1505.404014][T20926] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1505.410403][T20926] CPU: 0 UID: 0 PID: 20926 Comm: syz.5.3136 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1505.422442][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1505.432472][T20926] RIP: 0010:filemap_fault+0x1862/0x2740 [ 1505.437996][T20926] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 1505.457575][T20926] RSP: 0018:ffffc90004147510 EFLAGS: 00010246 [ 1505.463616][T20926] RAX: 0000000000080000 RBX: ffffea0000a15280 RCX: ffffc9000dc40000 [ 1505.471558][T20926] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff888021f80444 [ 1505.479501][T20926] RBP: ffffc900041477e0 R08: 0000000000000001 R09: 0000000000000001 [ 1505.487443][T20926] R10: ffffffff90864917 R11: 1ffffffff1c79489 R12: ffff888148c0eff8 [ 1505.495386][T20926] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1505.503327][T20926] FS: 00007ff96af286c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 1505.512238][T20926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1505.518801][T20926] CR2: 0000200000001fb3 CR3: 0000000077dbc000 CR4: 00000000003526f0 [ 1505.526770][T20926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1505.534719][T20926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1505.542668][T20926] Call Trace: [ 1505.545922][T20926] [ 1505.548829][T20926] ? __pfx_filemap_fault+0x10/0x10 [ 1505.553925][T20926] __do_fault+0x10a/0x490 [ 1505.558228][T20926] do_pte_missing+0x1031/0x3fb0 [ 1505.563059][T20926] ? __handle_mm_fault+0x1010/0x2a40 [ 1505.568322][T20926] __handle_mm_fault+0x103d/0x2a40 [ 1505.573427][T20926] ? __pfx___handle_mm_fault+0x10/0x10 [ 1505.578873][T20926] ? find_vma+0xbf/0x140 [ 1505.583091][T20926] ? __pfx_find_vma+0x10/0x10 [ 1505.587751][T20926] handle_mm_fault+0x3fe/0xad0 [ 1505.592493][T20926] do_user_addr_fault+0x7a6/0x1370 [ 1505.597598][T20926] ? rcu_is_watching+0x12/0xc0 [ 1505.602336][T20926] exc_page_fault+0x5c/0xc0 [ 1505.606814][T20926] asm_exc_page_fault+0x26/0x30 [ 1505.611637][T20926] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1505.617337][T20926] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 1505.636926][T20926] RSP: 0018:ffffc90004147a78 EFLAGS: 00050202 [ 1505.642986][T20926] RAX: 0000000000000001 RBX: 0000200000001fb3 RCX: 0000000000000001 [ 1505.650932][T20926] RDX: ffffed100f773d9f RSI: 0000200000001fb3 RDI: ffff88807bb9ecf3 [ 1505.658875][T20926] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100f773d9e [ 1505.666818][T20926] R10: ffff88807bb9ecf3 R11: 0000000000000000 R12: 0000000000000000 [ 1505.674761][T20926] R13: ffff88807bb9ecf3 R14: dffffc0000000000 R15: 0000200000001fb3 [ 1505.682709][T20926] _copy_from_user+0x98/0xd0 [ 1505.687278][T20926] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1505.692907][T20926] snd_rawmidi_write+0x26e/0xc10 [ 1505.697817][T20926] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1505.703245][T20926] ? avc_policy_seqno+0x9/0x20 [ 1505.707977][T20926] ? selinux_file_permission+0x11f/0x580 [ 1505.713600][T20926] ? __pfx_default_wake_function+0x10/0x10 [ 1505.719403][T20926] ? bpf_lsm_file_permission+0x9/0x10 [ 1505.724751][T20926] ? security_file_permission+0x71/0x210 [ 1505.730362][T20926] ? rw_verify_area+0xcf/0x680 [ 1505.735100][T20926] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1505.740528][T20926] vfs_writev+0x6c4/0xdc0 [ 1505.744837][T20926] ? __pfx_vfs_writev+0x10/0x10 [ 1505.749682][T20926] ? kmem_cache_free+0x2d4/0x4d0 [ 1505.754591][T20926] ? __fget_files+0x20e/0x3c0 [ 1505.759245][T20926] ? do_writev+0x295/0x330 [ 1505.763648][T20926] do_writev+0x295/0x330 [ 1505.767865][T20926] ? __pfx_do_writev+0x10/0x10 [ 1505.772604][T20926] ? rcu_is_watching+0x12/0xc0 [ 1505.777348][T20926] do_syscall_64+0xcd/0x260 [ 1505.781828][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.787696][T20926] RIP: 0033:0x7ff96a18e169 [ 1505.792082][T20926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1505.811660][T20926] RSP: 002b:00007ff96af28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1505.820039][T20926] RAX: ffffffffffffffda RBX: 00007ff96a3b5fa0 RCX: 00007ff96a18e169 [ 1505.827991][T20926] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 1505.835937][T20926] RBP: 00007ff96a210a68 R08: 0000000000000000 R09: 0000000000000000 [ 1505.843878][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.851820][T20926] R13: 0000000000000000 R14: 00007ff96a3b5fa0 R15: 00007ffd7a8da1c8 [ 1505.859765][T20926] [ 1505.862754][T20926] Modules linked in: [ 1505.868160][T20926] ---[ end trace 0000000000000000 ]--- [ 1505.873622][T20926] RIP: 0010:filemap_fault+0x1862/0x2740 [ 1505.879160][T20926] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 1505.898794][T20926] RSP: 0018:ffffc90004147510 EFLAGS: 00010246 [ 1505.904850][T20926] RAX: 0000000000080000 RBX: ffffea0000a15280 RCX: ffffc9000dc40000 [ 1505.912816][T20926] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff888021f80444 [ 1505.920780][T20926] RBP: ffffc900041477e0 R08: 0000000000000001 R09: 0000000000000001 [ 1505.928739][T20926] R10: ffffffff90864917 R11: 1ffffffff1c79489 R12: ffff888148c0eff8 [ 1505.936702][T20926] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1505.944664][T20926] FS: 00007ff96af286c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 1505.953812][T20926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1505.960394][T20926] CR2: 0000200000001fb3 CR3: 0000000077dbc000 CR4: 00000000003526f0 [ 1505.968355][T20926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1505.976320][T20926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1505.984285][T20926] Kernel panic - not syncing: Fatal exception [ 1505.990511][T20926] Kernel Offset: disabled [ 1505.994806][T20926] Rebooting in 86400 seconds..