last executing test programs: 34m48.421479973s ago: executing program 32 (id=141): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 34m39.206838962s ago: executing program 33 (id=166): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 26m47.321589522s ago: executing program 34 (id=2043): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 26m46.324319614s ago: executing program 35 (id=2050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x21, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x40094) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1, 0x1000, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 26m45.339961219s ago: executing program 36 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 24m37.666253631s ago: executing program 37 (id=2230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) 22m56.993272088s ago: executing program 38 (id=2321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000004f00)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) socket(0x400000000010, 0x3, 0x0) poll(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) read$FUSE(r4, &(0x7f0000000e40)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, 0x0) write$binfmt_elf32(r3, 0x0, 0x4cd) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/55, @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x20000080) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) 14m7.305740232s ago: executing program 39 (id=4047): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x28081, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 14m4.151400967s ago: executing program 40 (id=4060): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x48}]}}]}, 0x3c}}, 0x4080) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m21.842677165s ago: executing program 41 (id=4569): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) pread64(0xffffffffffffffff, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 11m30.935098217s ago: executing program 42 (id=4790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 11m27.022643882s ago: executing program 43 (id=4820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) close_range(r0, 0xffffffffffffffff, 0x0) 9m6.309626529s ago: executing program 44 (id=5313): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000}) 8m32.603195583s ago: executing program 7 (id=5467): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x2, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @private=0xa010102, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m27.79313003s ago: executing program 7 (id=5476): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 8m27.415134539s ago: executing program 7 (id=5481): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b", @ANYRES32], 0x20, 0x2400e044}, 0x0) 8m27.246387171s ago: executing program 7 (id=5482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 8m26.260085954s ago: executing program 7 (id=5484): write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 8m24.48534901s ago: executing program 7 (id=5493): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0006000d0085a168d0bf46d32345653600", 0x36, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44800) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYBLOB="200001"], 0x38}}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x408180, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="65f20f5cbc0d0066b9770a000066b8e1c6d7ae66ba3eefbf6e0f30640f08660ff1df67f30faee93e64650fc7bb00800f01f30f20d86635200000000f22d866b98d0900000f32260f01c3", 0x4a}], 0x1, 0x0, &(0x7f0000000300)=[@cstype3={0x5, 0x7}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x2, 0x0, 0xa, &(0x7f0000000180)}) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) 8m23.54422151s ago: executing program 45 (id=5493): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0006000d0085a168d0bf46d32345653600", 0x36, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44800) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYBLOB="200001"], 0x38}}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x408180, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="65f20f5cbc0d0066b9770a000066b8e1c6d7ae66ba3eefbf6e0f30640f08660ff1df67f30faee93e64650fc7bb00800f01f30f20d86635200000000f22d866b98d0900000f32260f01c3", 0x4a}], 0x1, 0x0, &(0x7f0000000300)=[@cstype3={0x5, 0x7}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140"], 0x118}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x2, 0x0, 0xa, &(0x7f0000000180)}) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) 7m0.775285237s ago: executing program 2 (id=5650): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) clock_getres(0x0, 0x0) 7m0.756649016s ago: executing program 2 (id=5651): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 7m0.094920307s ago: executing program 2 (id=5652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000880)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0xd118, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x800000000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x20000010) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000980)={0x1, 0x1, 0x3, 0xfffffff7, 0x5, 0x100, 0xb26, 0x2, 0x6, 0x3ff, 0x9, 0x300, 0x59, 0x9}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6m57.788146137s ago: executing program 2 (id=5655): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 6m57.662649655s ago: executing program 2 (id=5656): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 6m55.185717344s ago: executing program 2 (id=5660): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x24, 0x9, 0x1}, 0x4e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x7, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x2, 0x8, 0x99, 0x10, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xc8, 0x40003, 0x5, 0x3, 0x36ff, 0x101, 0x1, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x42, 0xb, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x3, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xfffffe, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x800, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x80003], [0x401, 0xc584, 0x9, 0xcd3, 0x4, 0x20, 0x404, 0x4, 0x8, 0x12, 0x7, 0x9, 0xe8b, 0xa, 0x80000001, 0x8, 0x3f93, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x218c, 0x4, 0x47, 0x0, 0x3, 0x4, 0x3, 0xfffff000, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0xa0000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0xc], [0x108e, 0xffff, 0x4, 0xffffffff, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x7, 0x7, 0x0, 0x5, 0x1e2, 0x9, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x7fc, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x7cea, 0x40, 0x40000409, 0x7, 0x4, 0x804, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x4, 0x202, 0x6, 0x2, 0xfffffffd, 0xa, 0xe, 0xff, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 6m54.960023784s ago: executing program 46 (id=5660): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x24, 0x9, 0x1}, 0x4e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x7, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x2, 0x8, 0x99, 0x10, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xc8, 0x40003, 0x5, 0x3, 0x36ff, 0x101, 0x1, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x42, 0xb, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x6, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x3, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xfffffe, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x800, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x5, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x80003], [0x401, 0xc584, 0x9, 0xcd3, 0x4, 0x20, 0x404, 0x4, 0x8, 0x12, 0x7, 0x9, 0xe8b, 0xa, 0x80000001, 0x8, 0x3f93, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x218c, 0x4, 0x47, 0x0, 0x3, 0x4, 0x3, 0xfffff000, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0xa0000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0xc], [0x108e, 0xffff, 0x4, 0xffffffff, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x7, 0x7, 0x0, 0x5, 0x1e2, 0x9, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x7fc, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x7cea, 0x40, 0x40000409, 0x7, 0x4, 0x804, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x4, 0x202, 0x6, 0x2, 0xfffffffd, 0xa, 0xe, 0xff, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 5m19.148346171s ago: executing program 3 (id=5790): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="200f050000001c2bad"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m17.327024405s ago: executing program 3 (id=5793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0b000000f7000000060000007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000)=0x18, &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000280), 0x0}, 0x20) 5m17.290550404s ago: executing program 3 (id=5794): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000180001002dbd7000fcdbdf2502201428ff00ff"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x4000000}, 0x8040) 5m17.222487541s ago: executing program 3 (id=5795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) umount2(0x0, 0xa) 5m17.114654172s ago: executing program 3 (id=5796): socket(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5m14.909154894s ago: executing program 3 (id=5798): r0 = socket(0x28, 0xa, 0xe8cd) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="80057ab76f91c9c34e69d45496f76d51d779867ad50bb46b1853e6bc6dea1a0bb75c", 0x22, 0x400, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000800)={0x8, {"a0244c3c56f5c57f9a13d7400a9fa403466ed9840d40cd47bea741675c25691da329e0200a74d7e1097611785e28d20702b5eac910ea12d1fab5418fe1ac3a62ffa86bd4af04c176ca98f84fa0197ec4e4656214e808bbdb12d9b480e39a3bf1a14ddc72981426e961fc5f05bdfca2ee9a8d0224971facb8ec61baa9331f013ed07fa82293f27cc0c7b4f7ca1d3192c148195e7fad181975b12cce8d157343e3c983087aa6da602da2ccda6e2fd7b9475719ab68da3db4b206d4bc7d74569b0e051faac32e7fbe645d73c1bc19e12b765f652083b65571a0e6ce8e9e4abe4edc6b622be9748d4c969cbd589d02d1eebbbc70cf0e485f1c5535b0a1c196573f91cf652995c50f130a76c5678319221ffdacb9cc7d89330b73a1d557ba5a72bbf35381e13267cbeebde56e6e858b742fdad7335799f7fabb1ebc43607e9625281a454b67ea7fc1fdd6b864fb0845fb69eaed23b40348e61547393aa1252fd85469d644fc03d1c84ddf0557225c75b95fa21faf9a7ae2ec0490ac8afbad471fd906a32b56ecb7ba87832b0a5f01402f14685849ab3f2089dde4b1175620164041610640dcb60ce0616be00620da0f0756477c87579fb2356f0af08e15a1f10b0ad664c37ae93cc5b4dce0cbd04b00c33aeca68810f9d0d0830fd38e712a2cfb2c86a60362f014cca6d966eb6b194cd7e8a6148af2f0fccb8880d6ca82ede8f271c6780b602eed6ae022d0ed20338a5aa5a96623fb210217e78c91f19a7337853a72e36827b69895eb680ea42514e246c5dfd628cc5181709e613ba180fe1b7d5d12acbfe160da8bf051171f4550c31a6effd8fee19cf8c32e3d2471f47e172d000a0f3a600bf80e65b05b107bacc4d4db9bd7b0c90a449e0f0c8746be7f82dfd703cbffcfa4eebace0e07bd035ad51926dbbb8ef566d6ca8c82386c9941ae7a921310c41e5b43e200a87caa66f63a950526c76955c5bec7bb7445958603744af8f79459faf0b3d91ed0065094d39d93faa46467e81108e97ea13d9a75036a01010a6b4eaba4ec4c904ac4cb598e5cbebc759f048210082e4257053478818d8fbbb1291c0499ca5cf82a4db138b1c4a23ac8e023743a6ca11de6f68c6a948a2668aac811e62aa0c17b45ff52adb35463fb9ad804ecdd0c0935d1369c426fd331223042021140dece063a1e943f82cf09381a837bce29c0f6e02601b9e0dba802ac3e640294a7ac0bcda5028cf40da0362badc3dbb7e93e04810685b2cad51e7fc72e1db9e230d5335cf57af6cb4af3b1b9ae362399c69faad88a51683b9a80fd346c2723787428d3a044e73474df3d17657f37c5c76642582a39e31dcf96ce8ffedb6ac46d268e0ca7c0cb68f2fcbdd4ed18a72fd4ddddb869ca5b02fddcf276999ecfba53a0cb906da9ab9d9cb5337e695a54178dcb2eca3041621aeb70cf9d20c2b67cbb8ef16a9a225e260e8888e3d7383981bcb7ce3a67e9b962522abccf799f8c5a0db000217dfdb2c7d86a58c4120f32d90ab7fb24d04fd3717ddaae81eaa19d3af400aab2e29cbca2b68f47bbd737bb34f30e0b664fdd04a081277541d0b125e3aabb94a018b01322ed6b364dac1262602496be93975f969d002c92dba90f16eb924f7e296c8faaabc6ac1be35f9e57e90b64a173949897fbf5e7c750c4656e1784735290fbf0a996b9feb5eefc0c6a09c070375711c5b5dbb28b0d3e2174b997d0bf74a70885495eca946ba92ad68b34ceb1c59e182f078ae774db94d8b91876d4c297abc671885e5cd3f51952552cc4212a6a5813a51545df4a30c5927a1e7272d1ad2e72adecc9102505d4c3e72c0b427a56addedfb8e52a83d381db6c9133717091ed0b6e3a4d36efbdb673dd06746b169a7ec2bb9827cb426c5acf7d5ddd7ef7048b6f941a2d00d9996af68aa6204bfd2fec0ae8d13523431e036d0154bfcebe6b04919c8e3d5246c9b009b0d5991e165cb2860e3d7db777919ef87524498bc4583ad997b24450558f8e75811402c99e59b4faa32ced1b9add3e14a1a1692ae932a7aeb32cd67ec5f0006a48e03c41446933b6fda98a726101612c610ffeb06c7b05fc1352aae953c138ebe55071810ec4f6ae8e381334e81432d848906d64a3e421939326d3d4da2694430eddb13d736d703518d9c3f8dcd129857979a43949fe0b9cfada89241c629545ca3fe5d9b529d76756cbbb5fdeb404b02eab9931d086fe6eaa47aae2e758c099829b65114e28fbb7667138292866575443985a1437a707286e5935dcfec1d6b42494eba9acc134cdd2af069dd076b92dac0661af3c68c90f690fe0beab27f53ba68210779cf8d2ed4affe0670e154250950be34a1f37daaf39d615e80f3ca3ad2a4e2f0086e92889ac082f1effd67a2f12bb090373513c51b745e27c6355b576cfd5947735508184b254aefef406c1b18f2b8bf8d5e582e4c91f96f6a8aead748ec133956f00136493b152d67c2e6b4802d1e2c100383186593affc050cc73d12f319bd2061778ba2b8e1bba9c2aebfab12662258f036860dfae92c2adcbcd36ef82391570a00fd152d68d15325a840aff6210a54e5d325db0b59550ca88dfdb3b62794bf66e9f2e75342f1fbd7c307ab1f96f28a8f9ef6c3fc4cd0b1f41b8ad8108b9847f90baad3db4387f0dc45350d39607bc57da34e2b99bbf2ba2a43aa05ab748db06e946a9c74f3963912c0362cddaf380098a0341289835d025c58920570a77f9e49dfa964860a15854690b210b08cd26041259bda4d90908b76acc04d533070633605b2522ed68269a66c3b6ca8fa352e23ae11d13f0a6f5c8a4107287284aa255876c912147d60e8847a62398d84cf8eda9d9ab17d801a7660aa3ec5c049a801ab533d4b24656999d8fe11472985b8504adc52be7020de1ab9d9433daee68a68fc2ba660a6921f3c40ff82f46ee33a691759d2323fcbfe0d76a466a5a70e31f6a440bc095c4e97e64fd60276ba9c71d30180232554809094652c03f576337e395192f074603bdaadc49c63226264103838a2cb588c7d954e2a20a1e90b970bde62f418aad75fb9ee0a755694bf4e919610557f0f1723121bc51c686fd32eb42a9044169b260c25e377d1accb8b11fafa1ecc668ef7d3da0192b1e2fb6f7b279e739df2b6caa77d97f7097790a36e2436efd6fc53402ab144d90a16938da07404ab5282c1df458b50b0bf5a57d6a7369d92f37a5673730e64a2bf4d171c7d8d3e1163286b346f7017ee03ab6a865080ed15706eb1995c3b9ef5205b1ea060f91d58532787f960001e76c4f245f66e63d8c11a68486a160c9a2728387f07983a2a7a4da31d476d23c0e42b2483b3c31e4579bcb65fb94843a4bd7cf8f59077bcd35a9d22dc17102a533314c7166b989c6e6fe790eb5d8c66b75aa80b6b5603bb1a4925c7f8b15dd0baf66ad0980a05fbe1a188cf23f43c5c626c08290ccc53fe0870134cd252091ee9eedcc787f6d5b943c9871812e806ce29ff02a9bd471369e3f5b9a031d27fd4a656d7cf1c6beb409531b1b98c62cd6197eba11f2315312e82db5a736146e663c4150f26e442c5b10ca4ef750c452c47d7a942b4cb0f4645807d4c68006098f854f564d00da3feedce53bd3d660bd4fae6b4ae40fe9af6c3b6e2d7c28d882bb5e20b209cf418e59f2ccb7a34669268bc9a6f7ded64daa083bc5f8a3c8cc5dafe81049951c5f3d71714b814ff109d61e3846b22f0e4dd6bd4c998b6f7eac512e21c92cec4128b58c807bfbd4ba2fce52ae42c8652760ce601889a0658378d7cc8a7a6edac6a4e906cc2741b67f7b4bf5b475f5d0077964c0c90326d922b629c129c386e8ee3a94e36ff88a3389152e2ad7415e2c23dcb650f1ad6b9fb785ec2a492b662250c11675b9296b1122cbf67cdfed6f8b0daa367b9a3995a6c90dc1cab7c1d3245de61a6d73ed85a698a94590228e07d6f0a1306f04150cb7a9b186b0fbfb9561e3fecfa30544cd3db5fe44aaa9b06d8603f78db8d516c4664081d796cf1f03c4ef46ccf3db38def2b12b849709eec11c42aa49cfa3a8f4e3c03ac1db96d49b9d5c41c014e26bfd9d0a00fc43fa14051a07e4371153877e07033800d79c198068d77455e48fa39f7689136f0a1d74cfded74837476206ae74545030d0391a91edc58d470cec2a3024eb24d8a06ffcfef5ca40288bad7102728af64e8704f7283e0b44ab481764ce8bd4b73b640c01931641f6b6621818cbb7f5fa18d45e098dd093dd657d36ef277a55904b57a0f4ac1cd8b0fdc7194c85ea9c37a8012b469a790cae0af595b3c688e60cd387f0774464f02225faf4742152cbb93a342e105a80565dfdc4ab9d868ee6291d6950eb25313655346de261dfd15addfc8e0f172d5f4cc2ac970cf1325d2d6c57f1148a31f5f54358b42191df15072091c1d85ae130606f06599af19f44a813fe3f562bffe84d50a5181bb6317ea4148f8192516106f546d214f68f5b5468c088af42e7fe905287e19153bd20c84f0ccfcd2ad07e9f1f65a12a1319a9f4dd7bdbf97631f9683a6f9682d2e5cdf9f048d4c1b1b8911b5508b299d72fc0f47c611487ceb626378be102f7e2a3d44c3726e55c2e39eed53ef78236dd13ed86e7c44cc616266eb431613e7d07d754aaf32d5cd5d20ece72c1c1b7c9ef5a020566e82d5c762116a2f2706ed3f8bb8ce83f10cefd4b7760329e840595f37ea8ab68f9e411758d3d7e5c0dadee72173d3d13d3546694b60e75f34ccaee974e72019c5059dc7c7fa33a09833d47d0a297fb6bee370fb3e8ae8edb0fb0cca2a63778be4cb0b450e030d1d290de0b6fa7a948f52fc3fa3aeb8ce3e61df4ab5de9f3e77ce8be393200d765fe82fea82abbf59bd6405757ce46abedd71e7abcca31afd2f3d3a3d8bcececc04a683545d207fd6a2e9f5672cd12ce55a9fb8378eecf83d8f9ed8bced5b7d399ff8c1906205537c42d7c38b1a04f1ffdabe1c6919a81195e60a73102d1fd17c51d763ee53c8c8742d6179486e1a8133442786e2ba838fc40cfcbcdccd2d00499b2ea4c653af2cd8dfbb47032549f5f22e69db98638c647619f7a74dbfede8ea22855e61eadbf369ea580cd421b025ed05cc18be4de999193cd5f2af45b40d3e725f014e33b1c390f394451852216f8afe81478d3fa962a7e083e762786f74c9fb1010aa541c4f90332f880dfc4aa60872fd05589a8f5359072139814e65f1dc2381b8bd70c3cba4ec47876ce505f5f2427aa190b995c1822082e326be1ff3ba03130d39c4daa46b7f284957c329e1d4d2f50c2cf37724ca57d2ddeac9dcdfa1ca64f139f2f1f4d27ec896f1e1f37bdc9dfd2a110957ba99f85b52b7b989edf71858c72194ebb4a696a2f745cd34f9c372bbfa052ffe68064bdb2110bb7db114ea4d9fb40107532ed88a38d7f8464eb59a264832394fbe649ef0f3c3ee97ad6eb03e8959b290d137f8885d7a215ecb3cd99ab8bc4319b451d63f247e46889b78f329b3f92bb334484c02a34fc0329b395a8dcba043e3d21a0f767a1c8a638b9ea2056e7718f877f698ed63cc29fe729eb23b796fd24ea6f61fd160af56d0229bd95dcbec8a1e6334963c6792dcbf5d5100f020922267e3e579e1e55f34df39a69a765f1eaad315884113f3de553908e17b0e1fc754385220403a239e55c636ff0dd0d5b3276e0bb41d5412819982ab0e03a9bfa71892306ca0fabc2a11ff79cbb4bde7acccb8a1780e0dc0cfac1448cb78f00493d4afe8d3d3c0e073149bf10e6a060057359fd50af031424de1d8631ba4928", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)=ANY=[@ANYBLOB="100000000d1401000000000000000000"], 0x10}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x100, 0x9, 0x200000000002, 0x7, 0x8, 0x2c2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = io_uring_setup(0x45a6, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000ebe6bc6aa479cbc01300640001000006"], 0x2f) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 5m14.302759401s ago: executing program 47 (id=5798): r0 = socket(0x28, 0xa, 0xe8cd) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="80057ab76f91c9c34e69d45496f76d51d779867ad50bb46b1853e6bc6dea1a0bb75c", 0x22, 0x400, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000800)={0x8, {"a0244c3c56f5c57f9a13d7400a9fa403466ed9840d40cd47bea741675c25691da329e0200a74d7e1097611785e28d20702b5eac910ea12d1fab5418fe1ac3a62ffa86bd4af04c176ca98f84fa0197ec4e4656214e808bbdb12d9b480e39a3bf1a14ddc72981426e961fc5f05bdfca2ee9a8d0224971facb8ec61baa9331f013ed07fa82293f27cc0c7b4f7ca1d3192c148195e7fad181975b12cce8d157343e3c983087aa6da602da2ccda6e2fd7b9475719ab68da3db4b206d4bc7d74569b0e051faac32e7fbe645d73c1bc19e12b765f652083b65571a0e6ce8e9e4abe4edc6b622be9748d4c969cbd589d02d1eebbbc70cf0e485f1c5535b0a1c196573f91cf652995c50f130a76c5678319221ffdacb9cc7d89330b73a1d557ba5a72bbf35381e13267cbeebde56e6e858b742fdad7335799f7fabb1ebc43607e9625281a454b67ea7fc1fdd6b864fb0845fb69eaed23b40348e61547393aa1252fd85469d644fc03d1c84ddf0557225c75b95fa21faf9a7ae2ec0490ac8afbad471fd906a32b56ecb7ba87832b0a5f01402f14685849ab3f2089dde4b1175620164041610640dcb60ce0616be00620da0f0756477c87579fb2356f0af08e15a1f10b0ad664c37ae93cc5b4dce0cbd04b00c33aeca68810f9d0d0830fd38e712a2cfb2c86a60362f014cca6d966eb6b194cd7e8a6148af2f0fccb8880d6ca82ede8f271c6780b602eed6ae022d0ed20338a5aa5a96623fb210217e78c91f19a7337853a72e36827b69895eb680ea42514e246c5dfd628cc5181709e613ba180fe1b7d5d12acbfe160da8bf051171f4550c31a6effd8fee19cf8c32e3d2471f47e172d000a0f3a600bf80e65b05b107bacc4d4db9bd7b0c90a449e0f0c8746be7f82dfd703cbffcfa4eebace0e07bd035ad51926dbbb8ef566d6ca8c82386c9941ae7a921310c41e5b43e200a87caa66f63a950526c76955c5bec7bb7445958603744af8f79459faf0b3d91ed0065094d39d93faa46467e81108e97ea13d9a75036a01010a6b4eaba4ec4c904ac4cb598e5cbebc759f048210082e4257053478818d8fbbb1291c0499ca5cf82a4db138b1c4a23ac8e023743a6ca11de6f68c6a948a2668aac811e62aa0c17b45ff52adb35463fb9ad804ecdd0c0935d1369c426fd331223042021140dece063a1e943f82cf09381a837bce29c0f6e02601b9e0dba802ac3e640294a7ac0bcda5028cf40da0362badc3dbb7e93e04810685b2cad51e7fc72e1db9e230d5335cf57af6cb4af3b1b9ae362399c69faad88a51683b9a80fd346c2723787428d3a044e73474df3d17657f37c5c76642582a39e31dcf96ce8ffedb6ac46d268e0ca7c0cb68f2fcbdd4ed18a72fd4ddddb869ca5b02fddcf276999ecfba53a0cb906da9ab9d9cb5337e695a54178dcb2eca3041621aeb70cf9d20c2b67cbb8ef16a9a225e260e8888e3d7383981bcb7ce3a67e9b962522abccf799f8c5a0db000217dfdb2c7d86a58c4120f32d90ab7fb24d04fd3717ddaae81eaa19d3af400aab2e29cbca2b68f47bbd737bb34f30e0b664fdd04a081277541d0b125e3aabb94a018b01322ed6b364dac1262602496be93975f969d002c92dba90f16eb924f7e296c8faaabc6ac1be35f9e57e90b64a173949897fbf5e7c750c4656e1784735290fbf0a996b9feb5eefc0c6a09c070375711c5b5dbb28b0d3e2174b997d0bf74a70885495eca946ba92ad68b34ceb1c59e182f078ae774db94d8b91876d4c297abc671885e5cd3f51952552cc4212a6a5813a51545df4a30c5927a1e7272d1ad2e72adecc9102505d4c3e72c0b427a56addedfb8e52a83d381db6c9133717091ed0b6e3a4d36efbdb673dd06746b169a7ec2bb9827cb426c5acf7d5ddd7ef7048b6f941a2d00d9996af68aa6204bfd2fec0ae8d13523431e036d0154bfcebe6b04919c8e3d5246c9b009b0d5991e165cb2860e3d7db777919ef87524498bc4583ad997b24450558f8e75811402c99e59b4faa32ced1b9add3e14a1a1692ae932a7aeb32cd67ec5f0006a48e03c41446933b6fda98a726101612c610ffeb06c7b05fc1352aae953c138ebe55071810ec4f6ae8e381334e81432d848906d64a3e421939326d3d4da2694430eddb13d736d703518d9c3f8dcd129857979a43949fe0b9cfada89241c629545ca3fe5d9b529d76756cbbb5fdeb404b02eab9931d086fe6eaa47aae2e758c099829b65114e28fbb7667138292866575443985a1437a707286e5935dcfec1d6b42494eba9acc134cdd2af069dd076b92dac0661af3c68c90f690fe0beab27f53ba68210779cf8d2ed4affe0670e154250950be34a1f37daaf39d615e80f3ca3ad2a4e2f0086e92889ac082f1effd67a2f12bb090373513c51b745e27c6355b576cfd5947735508184b254aefef406c1b18f2b8bf8d5e582e4c91f96f6a8aead748ec133956f00136493b152d67c2e6b4802d1e2c100383186593affc050cc73d12f319bd2061778ba2b8e1bba9c2aebfab12662258f036860dfae92c2adcbcd36ef82391570a00fd152d68d15325a840aff6210a54e5d325db0b59550ca88dfdb3b62794bf66e9f2e75342f1fbd7c307ab1f96f28a8f9ef6c3fc4cd0b1f41b8ad8108b9847f90baad3db4387f0dc45350d39607bc57da34e2b99bbf2ba2a43aa05ab748db06e946a9c74f3963912c0362cddaf380098a0341289835d025c58920570a77f9e49dfa964860a15854690b210b08cd26041259bda4d90908b76acc04d533070633605b2522ed68269a66c3b6ca8fa352e23ae11d13f0a6f5c8a4107287284aa255876c912147d60e8847a62398d84cf8eda9d9ab17d801a7660aa3ec5c049a801ab533d4b24656999d8fe11472985b8504adc52be7020de1ab9d9433daee68a68fc2ba660a6921f3c40ff82f46ee33a691759d2323fcbfe0d76a466a5a70e31f6a440bc095c4e97e64fd60276ba9c71d30180232554809094652c03f576337e395192f074603bdaadc49c63226264103838a2cb588c7d954e2a20a1e90b970bde62f418aad75fb9ee0a755694bf4e919610557f0f1723121bc51c686fd32eb42a9044169b260c25e377d1accb8b11fafa1ecc668ef7d3da0192b1e2fb6f7b279e739df2b6caa77d97f7097790a36e2436efd6fc53402ab144d90a16938da07404ab5282c1df458b50b0bf5a57d6a7369d92f37a5673730e64a2bf4d171c7d8d3e1163286b346f7017ee03ab6a865080ed15706eb1995c3b9ef5205b1ea060f91d58532787f960001e76c4f245f66e63d8c11a68486a160c9a2728387f07983a2a7a4da31d476d23c0e42b2483b3c31e4579bcb65fb94843a4bd7cf8f59077bcd35a9d22dc17102a533314c7166b989c6e6fe790eb5d8c66b75aa80b6b5603bb1a4925c7f8b15dd0baf66ad0980a05fbe1a188cf23f43c5c626c08290ccc53fe0870134cd252091ee9eedcc787f6d5b943c9871812e806ce29ff02a9bd471369e3f5b9a031d27fd4a656d7cf1c6beb409531b1b98c62cd6197eba11f2315312e82db5a736146e663c4150f26e442c5b10ca4ef750c452c47d7a942b4cb0f4645807d4c68006098f854f564d00da3feedce53bd3d660bd4fae6b4ae40fe9af6c3b6e2d7c28d882bb5e20b209cf418e59f2ccb7a34669268bc9a6f7ded64daa083bc5f8a3c8cc5dafe81049951c5f3d71714b814ff109d61e3846b22f0e4dd6bd4c998b6f7eac512e21c92cec4128b58c807bfbd4ba2fce52ae42c8652760ce601889a0658378d7cc8a7a6edac6a4e906cc2741b67f7b4bf5b475f5d0077964c0c90326d922b629c129c386e8ee3a94e36ff88a3389152e2ad7415e2c23dcb650f1ad6b9fb785ec2a492b662250c11675b9296b1122cbf67cdfed6f8b0daa367b9a3995a6c90dc1cab7c1d3245de61a6d73ed85a698a94590228e07d6f0a1306f04150cb7a9b186b0fbfb9561e3fecfa30544cd3db5fe44aaa9b06d8603f78db8d516c4664081d796cf1f03c4ef46ccf3db38def2b12b849709eec11c42aa49cfa3a8f4e3c03ac1db96d49b9d5c41c014e26bfd9d0a00fc43fa14051a07e4371153877e07033800d79c198068d77455e48fa39f7689136f0a1d74cfded74837476206ae74545030d0391a91edc58d470cec2a3024eb24d8a06ffcfef5ca40288bad7102728af64e8704f7283e0b44ab481764ce8bd4b73b640c01931641f6b6621818cbb7f5fa18d45e098dd093dd657d36ef277a55904b57a0f4ac1cd8b0fdc7194c85ea9c37a8012b469a790cae0af595b3c688e60cd387f0774464f02225faf4742152cbb93a342e105a80565dfdc4ab9d868ee6291d6950eb25313655346de261dfd15addfc8e0f172d5f4cc2ac970cf1325d2d6c57f1148a31f5f54358b42191df15072091c1d85ae130606f06599af19f44a813fe3f562bffe84d50a5181bb6317ea4148f8192516106f546d214f68f5b5468c088af42e7fe905287e19153bd20c84f0ccfcd2ad07e9f1f65a12a1319a9f4dd7bdbf97631f9683a6f9682d2e5cdf9f048d4c1b1b8911b5508b299d72fc0f47c611487ceb626378be102f7e2a3d44c3726e55c2e39eed53ef78236dd13ed86e7c44cc616266eb431613e7d07d754aaf32d5cd5d20ece72c1c1b7c9ef5a020566e82d5c762116a2f2706ed3f8bb8ce83f10cefd4b7760329e840595f37ea8ab68f9e411758d3d7e5c0dadee72173d3d13d3546694b60e75f34ccaee974e72019c5059dc7c7fa33a09833d47d0a297fb6bee370fb3e8ae8edb0fb0cca2a63778be4cb0b450e030d1d290de0b6fa7a948f52fc3fa3aeb8ce3e61df4ab5de9f3e77ce8be393200d765fe82fea82abbf59bd6405757ce46abedd71e7abcca31afd2f3d3a3d8bcececc04a683545d207fd6a2e9f5672cd12ce55a9fb8378eecf83d8f9ed8bced5b7d399ff8c1906205537c42d7c38b1a04f1ffdabe1c6919a81195e60a73102d1fd17c51d763ee53c8c8742d6179486e1a8133442786e2ba838fc40cfcbcdccd2d00499b2ea4c653af2cd8dfbb47032549f5f22e69db98638c647619f7a74dbfede8ea22855e61eadbf369ea580cd421b025ed05cc18be4de999193cd5f2af45b40d3e725f014e33b1c390f394451852216f8afe81478d3fa962a7e083e762786f74c9fb1010aa541c4f90332f880dfc4aa60872fd05589a8f5359072139814e65f1dc2381b8bd70c3cba4ec47876ce505f5f2427aa190b995c1822082e326be1ff3ba03130d39c4daa46b7f284957c329e1d4d2f50c2cf37724ca57d2ddeac9dcdfa1ca64f139f2f1f4d27ec896f1e1f37bdc9dfd2a110957ba99f85b52b7b989edf71858c72194ebb4a696a2f745cd34f9c372bbfa052ffe68064bdb2110bb7db114ea4d9fb40107532ed88a38d7f8464eb59a264832394fbe649ef0f3c3ee97ad6eb03e8959b290d137f8885d7a215ecb3cd99ab8bc4319b451d63f247e46889b78f329b3f92bb334484c02a34fc0329b395a8dcba043e3d21a0f767a1c8a638b9ea2056e7718f877f698ed63cc29fe729eb23b796fd24ea6f61fd160af56d0229bd95dcbec8a1e6334963c6792dcbf5d5100f020922267e3e579e1e55f34df39a69a765f1eaad315884113f3de553908e17b0e1fc754385220403a239e55c636ff0dd0d5b3276e0bb41d5412819982ab0e03a9bfa71892306ca0fabc2a11ff79cbb4bde7acccb8a1780e0dc0cfac1448cb78f00493d4afe8d3d3c0e073149bf10e6a060057359fd50af031424de1d8631ba4928", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)=ANY=[@ANYBLOB="100000000d1401000000000000000000"], 0x10}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x100, 0x9, 0x200000000002, 0x7, 0x8, 0x2c2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = io_uring_setup(0x45a6, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000ebe6bc6aa479cbc01300640001000006"], 0x2f) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 5m13.209422272s ago: executing program 6 (id=5800): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0xa) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r7 = dup(r6) read$FUSE(r7, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x1000, 0xf0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) unlink(0x0) 5m11.70809434s ago: executing program 6 (id=5801): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @local}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0x78, 0x80200) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001300)={&(0x7f00000002c0), &(0x7f0000000300)=""/4096, 0x1000}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001340)=0x1) getpid() r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000025c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002600)={0x20001000, &(0x7f0000001380), &(0x7f00000013c0), 0x0, {0x12}, &(0x7f0000001440)=""/192, 0xc0, &(0x7f0000001500)=""/4096, 0x0, 0x0, {r2}}, 0x58) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000029c0)='wlan0\x00') r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x1, 0x0) timerfd_create(0x2, 0x800) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003300), 0x6000) accept$packet(r3, &(0x7f0000003440), 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000034c0), 0x400, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x48841) 5m10.749673151s ago: executing program 6 (id=5802): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x15, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="ccafc0bdb3c5ffedae974d89f08a2a623f11d2f748d7b835b58aa24b0a3f5f97b6e214751cf6031a5ec1e5073519cd3cd4d5e1945beed1a84045347f116844ab39faab5e79d7122193a5430433641a68e3f2da2d05be5c844a7fd0c66364b88051ca36e66c12bf7a06e3bf9851d48aae0c118b451651d985bdae2025e6de3f1989516fb7bd114807ee2087870796ac280542300f6be04be41e3ef049182be56f1e012972f9e3cf521e8d270c95216ede30361036c1aacd04b1d830735d8a071830", @ANYRESHEX=r0, @ANYRESOCT, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xff, 0x3a040, 0x40, @remote, @local, 0x81, 0x8000, 0x5e7, 0x9}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x8006, 0x3, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x16) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5m9.462932394s ago: executing program 6 (id=5803): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) umount2(0x0, 0xa) 5m9.37706638s ago: executing program 6 (id=5804): ftruncate(0xffffffffffffffff, 0x400) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) 5m8.858551664s ago: executing program 6 (id=5805): socket(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5m8.597577628s ago: executing program 48 (id=5805): socket(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4m22.933879006s ago: executing program 4 (id=5807): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a55, 0x1, 0xffffffffffffffff}, {0x800, 0x0, 0x6, 0x80000000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0xfd}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 4m21.853355356s ago: executing program 4 (id=5808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4m20.839472318s ago: executing program 4 (id=5809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x5000) 4m20.68312219s ago: executing program 4 (id=5810): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) umount2(0x0, 0xa) 4m20.624685664s ago: executing program 4 (id=5811): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000080)) 4m19.916340096s ago: executing program 4 (id=5812): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_usb_connect(0x4, 0x69b, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x689, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x8, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x6c, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f5"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0xf, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xa6, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x2, 0x1a706ddc45c7be6c}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x3f, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f1900020a1003020c000821f0000a1003020c0005030d004da38e7dfc1f30bf938ca6a065a07ceed8e91bca2f662c4f3b97f3d464ec3f02149a608cc92b4c5c00724b6b98fdac64c98f1565f68a358f31de4453587453208857a7b719859c73ab83bab16a3d3fbd4820d6976bca7ee73e4f8559f4678d980125aad23378dc7c3a9199d88727da481b5be7676dfc29"], 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c20000"]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.424070373s ago: executing program 49 (id=5812): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_usb_connect(0x4, 0x69b, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x689, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x8, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x6c, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f5"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0xf, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xa6, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x2, 0x1a706ddc45c7be6c}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x3f, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f1900020a1003020c000821f0000a1003020c0005030d004da38e7dfc1f30bf938ca6a065a07ceed8e91bca2f662c4f3b97f3d464ec3f02149a608cc92b4c5c00724b6b98fdac64c98f1565f68a358f31de4453587453208857a7b719859c73ab83bab16a3d3fbd4820d6976bca7ee73e4f8559f4678d980125aad23378dc7c3a9199d88727da481b5be7676dfc29"], 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c20000"]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 14.670479136s ago: executing program 9 (id=6450): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)}], 0x1}, 0x0) 14.39659505s ago: executing program 9 (id=6452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40080c0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r3, 0x0, 0x400000000000000, 0x7) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xeb0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe84, 0x2, [@TCA_FW_ACT={0xe80, 0x4, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x200007, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x3, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffbf9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xdde, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x10001, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff38, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000, 0xfffffffc}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0x4, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x3, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x6, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x9, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xf}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x104, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xeb0}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080200000000000000000201907864010101ac1414bb030390780006001f47eb07ff00681ce2d92f0e5c64010102ac1414368611000000030709a8806558a18f92010244344c01e0000002000000097f000001000000057f000001000200057f00000100000000ac1414bb00000329e000000200000004000000"], 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 10.806644744s ago: executing program 0 (id=6462): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)}], 0x1}, 0x0) 10.611064261s ago: executing program 8 (id=6463): sched_setscheduler(0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)) 10.409207274s ago: executing program 0 (id=6464): openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000008, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x501, 0x0, 0x25dfdbfb}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) 10.259090469s ago: executing program 8 (id=6466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 9.097935518s ago: executing program 0 (id=6467): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2025) pread64(r0, &(0x7f0000000080)=""/110, 0x6e, 0x400) read(r0, 0x0, 0x0) 8.312595397s ago: executing program 1 (id=6468): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) dup3(r6, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) 8.123025459s ago: executing program 8 (id=6469): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000001000)=""/93, 0x5d}], 0x2, 0x7, 0x6) 8.122719273s ago: executing program 0 (id=6470): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) time(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0xc3002000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.950703957s ago: executing program 9 (id=6471): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r4, 0x1, 0xfe, 0x6, @remote}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) 6.85892151s ago: executing program 1 (id=6472): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) 6.795117608s ago: executing program 8 (id=6473): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.44547344s ago: executing program 9 (id=6476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000001000ffff26bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4400128009000100766c616efe000000340002800600010001000000280004800c000100f7ffffff090000000c00010006000000060000000c0001000600000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.440295936s ago: executing program 1 (id=6477): openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000008, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x501, 0x0, 0x25dfdbfb}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) 5.050247969s ago: executing program 0 (id=6478): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x8}, 0x0, 0x0) 4.130928425s ago: executing program 8 (id=6479): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x28, 0x2, 0x6, 0xfffff034}, {0x50, 0x3, 0x6}, {0x6, 0x99, 0xff, 0x2}]}, 0x10) 3.958154347s ago: executing program 1 (id=6481): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40080c0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xeb0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe84, 0x2, [@TCA_FW_ACT={0xe80, 0x4, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x200007, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x3, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffbf9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xdde, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x10001, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff38, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000, 0xfffffffc}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0x4, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x3, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x6, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x9, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xf}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x104, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xeb0}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080200000000000000000201907864010101ac1414bb030390780006001f47eb07ff00681ce2d92f0e5c64010102ac1414368611000000030709a8806558a18f92010244344c01e0000002000000097f000001000000057f000001000200057f00000100000000ac1414bb00000329e000000200000004000000"], 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 3.156153468s ago: executing program 0 (id=6483): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000568030327c67b9ee208375be39d7885e8435b006e0ec0255e9a0e5691ef24f0246"], 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 3.101682247s ago: executing program 8 (id=6484): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000b80)={'wlan1\x00', &(0x7f0000000a80)=@ethtool_test={0x1a, 0x4, 0xf}}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r3, &(0x7f0000000380)=[{0x0, 0x4055}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0xfffffffd) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001a00010a00000000000000000a"], 0x18}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) read$char_usb(r5, &(0x7f0000000000)=""/188, 0xbc) 2.64862996s ago: executing program 5 (id=6486): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.230722635s ago: executing program 5 (id=6487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0x10000, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r3, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xffffffffb1abdb1c, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x1a, {{0x5, 0x2, 0x4, 0x9, 0xfffffffc, 0x6, {0x0, 0x4, 0x8, 0x100000008, 0x6, 0x0, 0x1ff, 0xffffff61, 0x10001, 0xc000, 0x44e, r3, 0xee01, 0x8b45, 0x4}}, {0x0, 0x15}}}, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) 1.965770902s ago: executing program 5 (id=6488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.801910876s ago: executing program 9 (id=6489): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.493849801s ago: executing program 5 (id=6490): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.302081554s ago: executing program 5 (id=6491): openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000008, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x501, 0x0, 0x25dfdbfb}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) 1.300872802s ago: executing program 1 (id=6492): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.146958138s ago: executing program 1 (id=6493): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 243.087µs ago: executing program 9 (id=6494): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) 0s ago: executing program 5 (id=6495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x1, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): entered disabled state [ 1970.659442][T26943] bridge_slave_0: entered allmulticast mode [ 1970.662267][T26943] bridge_slave_0: entered promiscuous mode [ 1970.696471][T26943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.696648][T26943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.696822][T26943] bridge_slave_1: entered allmulticast mode [ 1970.699472][T26943] bridge_slave_1: entered promiscuous mode [ 1970.865093][T26835] veth0_vlan: entered promiscuous mode [ 1971.056254][T26943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.083931][T26943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.395879][T26943] team0: Port device team_slave_0 added [ 1971.459466][T26835] veth1_vlan: entered promiscuous mode [ 1971.466563][T26943] team0: Port device team_slave_1 added [ 1971.726139][T17955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.726158][T17955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.752942][T26943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.752957][T26943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.752982][T26943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1971.772289][T26943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1971.772302][T26943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.772327][T26943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.112937][T26943] hsr_slave_0: entered promiscuous mode [ 1972.114467][T26943] hsr_slave_1: entered promiscuous mode [ 1972.119024][ T6929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.119041][ T6929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.302061][T26861] Bluetooth: hci4: command tx timeout [ 1972.595870][T26859] veth0_vlan: entered promiscuous mode [ 1973.077014][ T3181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.156003][T26835] veth0_macvtap: entered promiscuous mode [ 1973.219602][T26859] veth1_vlan: entered promiscuous mode [ 1973.235906][T26835] veth1_macvtap: entered promiscuous mode [ 1973.396476][ T3181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.682687][T26886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1974.615274][T26861] Bluetooth: hci4: command tx timeout [ 1974.825511][ T3181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.961303][T26835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1975.150324][ T3181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.227865][T26835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1975.287867][ T6471] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.525510][ T6471] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.533286][ T6471] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.557017][ T6471] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.586475][T26859] veth0_macvtap: entered promiscuous mode [ 1975.733846][T26859] veth1_macvtap: entered promiscuous mode [ 1975.994682][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.167796][ T3181] bridge_slave_1: left allmulticast mode [ 1976.167827][ T3181] bridge_slave_1: left promiscuous mode [ 1976.168083][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.243836][ T3181] bridge_slave_0: left allmulticast mode [ 1976.243868][ T3181] bridge_slave_0: left promiscuous mode [ 1976.244134][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.440498][T25351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1976.443673][T25351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1976.448067][T25351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1976.497227][T25351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1976.498792][T25351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1978.130668][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1978.189512][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1978.206499][ T3181] bond0 (unregistering): Released all slaves [ 1978.399858][T26859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1978.433501][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.433520][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.464255][T26859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1978.622100][T26861] Bluetooth: hci0: command tx timeout [ 1978.772369][ T3181] hsr_slave_0: left promiscuous mode [ 1978.812189][ T3181] hsr_slave_1: left promiscuous mode [ 1978.813075][ T3181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1978.813111][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1978.843262][ T3181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1978.843291][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1978.916346][ T3181] veth1_macvtap: left promiscuous mode [ 1978.916418][ T3181] veth0_macvtap: left promiscuous mode [ 1978.916577][ T3181] veth1_vlan: left promiscuous mode [ 1978.916691][ T3181] veth0_vlan: left promiscuous mode [ 1980.702064][T26861] Bluetooth: hci0: command tx timeout [ 1981.262571][ T3181] team0 (unregistering): Port device team_slave_1 removed [ 1981.463034][ T3181] team0 (unregistering): Port device team_slave_0 removed [ 1982.093928][T25351] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1982.128118][T25351] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1982.129613][T25351] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1982.160722][T25351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1982.161703][T25351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1982.792046][T25351] Bluetooth: hci0: command tx timeout [ 1984.045130][T26886] veth0_vlan: entered promiscuous mode [ 1984.049165][ T6929] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.118649][ T6929] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.216142][ T6929] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.236144][ T6929] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.241982][T25351] Bluetooth: hci5: command tx timeout [ 1984.376440][T26886] veth1_vlan: entered promiscuous mode [ 1984.876649][T25351] Bluetooth: hci0: command tx timeout [ 1985.471810][T26982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.471829][T26982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.659274][T26886] veth0_macvtap: entered promiscuous mode [ 1985.678134][T26943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1985.717187][T26943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1985.749874][ T6929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.749891][ T6929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.781106][T26943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1985.806953][T26886] veth1_macvtap: entered promiscuous mode [ 1985.819402][T26993] chnl_net:caif_netlink_parms(): no params data found [ 1985.833561][T26943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1986.307042][T25351] Bluetooth: hci5: command tx timeout [ 1987.952729][T22295] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1988.104681][ T3181] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.126559][T22295] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1988.126588][T22295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 1988.126612][T22295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 1988.128873][T22295] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1988.128898][T22295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.128910][T22295] usb 6-1: Product: syz [ 1988.128917][T22295] usb 6-1: Manufacturer: syz [ 1988.128924][T22295] usb 6-1: SerialNumber: syz [ 1988.198415][T22295] usb 6-1: config 0 descriptor?? [ 1988.210386][T22295] usb 6-1: no audio or video endpoints found [ 1988.243419][T26996] chnl_net:caif_netlink_parms(): no params data found [ 1988.382657][T25351] Bluetooth: hci5: command tx timeout [ 1988.507197][T26886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1988.518219][T26924] usb 6-1: USB disconnect, device number 28 [ 1988.749615][ T3181] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.795394][T26993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.795664][T26993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1988.795874][T26993] bridge_slave_0: entered allmulticast mode [ 1988.799480][T26993] bridge_slave_0: entered promiscuous mode [ 1988.840277][T26993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.840376][T26993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.840491][T26993] bridge_slave_1: entered allmulticast mode [ 1988.856541][T26993] bridge_slave_1: entered promiscuous mode [ 1988.967492][T26886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1989.191497][ T3181] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.466677][T26993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1989.674059][T27032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1989.911839][ T3181] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.961379][T26993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.982344][T26996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.982484][T26996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.982675][T26996] bridge_slave_0: entered allmulticast mode [ 1989.985413][T26996] bridge_slave_0: entered promiscuous mode [ 1990.344922][ T6933] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.347401][T26996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.347491][T26996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.347629][T26996] bridge_slave_1: entered allmulticast mode [ 1990.349115][T26996] bridge_slave_1: entered promiscuous mode [ 1990.444433][ T6933] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.462293][T25351] Bluetooth: hci5: command tx timeout [ 1990.523534][ T6933] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.529180][T26993] team0: Port device team_slave_0 added [ 1990.627004][ T6933] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.630583][T26993] team0: Port device team_slave_1 added [ 1990.679436][T26996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1990.774774][T26996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1991.093277][T26993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1991.093294][T26993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.093320][T26993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1992.673849][T26993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1992.673866][T26993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1992.673891][T26993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1992.682906][T26996] team0: Port device team_slave_0 added [ 1992.845208][T26996] team0: Port device team_slave_1 added [ 1993.263189][T26996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1993.263203][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1993.263227][T26996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1993.392203][T26996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1993.392219][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1993.392244][T26996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1993.435498][T26993] hsr_slave_0: entered promiscuous mode [ 1993.438223][T26993] hsr_slave_1: entered promiscuous mode [ 1993.440309][T26993] debugfs: 'hsr0' already exists in 'hsr' [ 1993.440332][T26993] Cannot create hsr debugfs directory [ 1994.011505][ T3181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.153936][ T37] audit: type=1326 audit(1757102751.946:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27053 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1995.154191][ T37] audit: type=1326 audit(1757102751.946:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27053 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1995.154353][ T37] audit: type=1326 audit(1757102751.946:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27053 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1995.323484][T17957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1995.323502][T17957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1995.407127][T27058] sctp: [Deprecated]: syz.5.5825 (pid 27058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1995.407127][T27058] Use struct sctp_sack_info instead [ 1995.546383][ T3181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.779767][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5825'. [ 1995.940212][T26996] hsr_slave_0: entered promiscuous mode [ 1995.941038][T26996] hsr_slave_1: entered promiscuous mode [ 1995.941592][T26996] debugfs: 'hsr0' already exists in 'hsr' [ 1995.941607][T26996] Cannot create hsr debugfs directory [ 1996.177529][ T3181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.697166][ T3181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.838092][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1996.838111][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1996.897579][ T37] audit: type=1326 audit(1757102753.676:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1996.897744][ T37] audit: type=1326 audit(1757102753.686:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1996.898039][ T37] audit: type=1326 audit(1757102753.686:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1996.898182][ T37] audit: type=1326 audit(1757102753.686:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1996.899005][ T37] audit: type=1326 audit(1757102753.686:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1996.899049][ T37] audit: type=1326 audit(1757102753.686:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1996.899089][ T37] audit: type=1326 audit(1757102753.686:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 1997.019798][T27067] fuse: Invalid rootmode [ 1998.361225][T26943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1998.541111][T27075] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5661'. [ 1998.541135][T27075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5661'. [ 2000.050390][T27089] fuse: Invalid rootmode [ 2000.255066][T26943] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.421010][T26841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.421221][T26841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.731123][ T3181] bridge_slave_1: left allmulticast mode [ 2001.731156][ T3181] bridge_slave_1: left promiscuous mode [ 2001.731409][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.145669][ T6471] Bluetooth: hci1: Frame reassembly failed (-84) [ 2002.683253][ T3181] bridge_slave_0: left allmulticast mode [ 2002.683274][ T3181] bridge_slave_0: left promiscuous mode [ 2002.683433][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.786301][ T3181] bridge_slave_1: left allmulticast mode [ 2002.786331][ T3181] bridge_slave_1: left promiscuous mode [ 2002.786614][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.848607][ T3181] bridge_slave_0: left allmulticast mode [ 2002.848636][ T3181] bridge_slave_0: left promiscuous mode [ 2002.848870][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.860844][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 2002.860858][ T37] audit: type=1326 audit(1757102759.646:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27103 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2002.861483][ T37] audit: type=1326 audit(1757102759.646:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27103 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2002.861526][ T37] audit: type=1326 audit(1757102759.646:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27103 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2002.864049][ T37] audit: type=1326 audit(1757102759.656:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27103 comm="syz.9.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2005.288162][T25351] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2005.605148][T27112] fuse: Invalid rootmode [ 2006.829314][ T37] audit: type=1326 audit(1757102763.616:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27120 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2006.829429][ T37] audit: type=1326 audit(1757102763.616:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27120 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2006.830070][ T37] audit: type=1326 audit(1757102763.616:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27120 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2006.830486][ T37] audit: type=1326 audit(1757102763.616:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27120 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2006.830892][ T37] audit: type=1326 audit(1757102763.616:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27120 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2006.845056][ T37] audit: type=1326 audit(1757102763.636:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27120 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2009.107188][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2009.184313][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2009.208533][ T3181] bond0 (unregistering): Released all slaves [ 2011.994850][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2012.052769][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2012.076160][ T3181] bond0 (unregistering): Released all slaves [ 2012.139374][T26841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.139501][T26841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2013.750319][T27169] fuse: Bad value for 'rootmode' [ 2014.220889][T27175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2014.221059][T27175] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2015.135159][T26943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2015.230989][T27179] sctp: [Deprecated]: syz.9.5861 (pid 27179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2015.230989][T27179] Use struct sctp_sack_info instead [ 2016.558244][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5861'. [ 2017.592157][ T3181] hsr_slave_0: left promiscuous mode [ 2017.621946][ T3181] hsr_slave_1: left promiscuous mode [ 2017.622800][ T3181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2017.622836][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2017.643093][ T3181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2017.643121][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2017.718822][T27198] fuse: Bad value for 'rootmode' [ 2017.889641][ T3181] hsr_slave_0: left promiscuous mode [ 2018.142736][ T3181] hsr_slave_1: left promiscuous mode [ 2018.143732][ T3181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2018.143771][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2018.201110][ T3181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2018.201139][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2019.264331][ T3181] veth1_macvtap: left promiscuous mode [ 2019.264455][ T3181] veth0_macvtap: left promiscuous mode [ 2019.264731][ T3181] veth1_vlan: left promiscuous mode [ 2019.264932][ T3181] veth0_vlan: left promiscuous mode [ 2019.314083][T27213] sctp: [Deprecated]: syz.9.5873 (pid 27213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2019.314083][T27213] Use struct sctp_sack_info instead [ 2019.472410][ T3181] veth1_macvtap: left promiscuous mode [ 2019.472541][ T3181] veth0_macvtap: left promiscuous mode [ 2019.472830][ T3181] veth1_vlan: left promiscuous mode [ 2019.473040][ T3181] veth0_vlan: left promiscuous mode [ 2019.612433][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 2019.612449][ T37] audit: type=1326 audit(1757102776.406:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.612492][ T37] audit: type=1326 audit(1757102776.406:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.623414][ T37] audit: type=1326 audit(1757102776.406:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.623462][ T37] audit: type=1326 audit(1757102776.406:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.623500][ T37] audit: type=1326 audit(1757102776.406:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.623597][ T37] audit: type=1326 audit(1757102776.406:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.625314][ T37] audit: type=1326 audit(1757102776.416:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.625359][ T37] audit: type=1326 audit(1757102776.416:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.627113][ T37] audit: type=1326 audit(1757102776.416:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2019.627164][ T37] audit: type=1326 audit(1757102776.416:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27219 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2020.759352][T27226] fuse: Unknown parameter 'use00000000000000000000' [ 2020.993921][T27230] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2024.554524][ T3181] team0 (unregistering): Port device team_slave_1 removed [ 2024.762877][ T3181] team0 (unregistering): Port device team_slave_0 removed [ 2026.677115][T26861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2026.698972][T26861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2026.700483][T26861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2026.701649][T26861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2026.703536][T26861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2028.854013][ T3181] team0 (unregistering): Port device team_slave_1 removed [ 2028.882025][T25351] Bluetooth: hci1: command tx timeout [ 2029.062448][ T3181] team0 (unregistering): Port device team_slave_0 removed [ 2030.941985][T25351] Bluetooth: hci1: command tx timeout [ 2031.512860][T27268] fuse: Unknown parameter 'use00000000000000000000' [ 2031.560196][T26993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2031.698950][T26993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2031.983425][T26993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2033.033870][T25351] Bluetooth: hci1: command tx timeout [ 2033.102503][T26993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2033.784868][T26996] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2033.920662][T26996] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2033.996777][T26996] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2034.385658][T26996] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2034.532024][T27289] usb usb7: usbfs: process 27289 (syz.5.5889) did not claim interface 13 before use [ 2035.171268][T25351] Bluetooth: hci1: command tx timeout [ 2035.615065][T27302] sctp: [Deprecated]: syz.5.5893 (pid 27302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2035.615065][T27302] Use struct sctp_sack_info instead [ 2035.820194][T27264] chnl_net:caif_netlink_parms(): no params data found [ 2036.341646][T27314] hub 8-0:1.0: USB hub found [ 2036.362311][T27314] hub 8-0:1.0: 1 port detected [ 2037.964612][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.402009][ T5932] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 2038.513773][T26861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2038.552132][T26861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2038.558415][T26861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2038.559651][T26861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2038.561225][T26861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2038.575338][ T5932] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2038.575367][ T5932] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2038.575392][ T5932] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2038.717528][ T5932] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2038.717555][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.717573][ T5932] usb 10-1: Product: syz [ 2038.717587][ T5932] usb 10-1: Manufacturer: syz [ 2038.717600][ T5932] usb 10-1: SerialNumber: syz [ 2038.801439][ T5932] usb 10-1: config 0 descriptor?? [ 2038.847362][ T5932] usb 10-1: no audio or video endpoints found [ 2039.118370][T27264] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.118448][T27264] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.118557][T27264] bridge_slave_0: entered allmulticast mode [ 2039.126956][T27264] bridge_slave_0: entered promiscuous mode [ 2039.164002][T16344] usb 10-1: USB disconnect, device number 10 [ 2039.168980][T27264] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.169118][T27264] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.169299][T27264] bridge_slave_1: entered allmulticast mode [ 2039.250501][T27264] bridge_slave_1: entered promiscuous mode [ 2040.026057][T27264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.174633][T27264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2040.702493][T26861] Bluetooth: hci4: command tx timeout [ 2041.096107][T27264] team0: Port device team_slave_0 added [ 2041.177296][T27264] team0: Port device team_slave_1 added [ 2041.562902][T27264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2041.562918][T27264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.562943][T27264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2041.587837][T27264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2041.587852][T27264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.587876][T27264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2041.953521][T26996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.453327][T25351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2042.474898][T25351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2042.527813][T25351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2042.698476][T27359] 9pnet_fd: Insufficient options for proto=fd [ 2042.725818][T25351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2042.843991][T25351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2042.933967][T26861] Bluetooth: hci4: command tx timeout [ 2043.512233][ T5918] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2043.662993][ T5918] usb 10-1: Using ep0 maxpacket: 16 [ 2043.673229][ T5918] usb 10-1: config 0 has an invalid interface number: 129 but max is 0 [ 2043.673254][ T5918] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.673273][ T5918] usb 10-1: config 0 has no interface number 0 [ 2043.676217][ T5918] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2043.676243][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.676261][ T5918] usb 10-1: Product: syz [ 2043.676274][ T5918] usb 10-1: Manufacturer: syz [ 2043.676287][ T5918] usb 10-1: SerialNumber: syz [ 2043.747016][ T5918] usb 10-1: config 0 descriptor?? [ 2044.745135][ T5918] dm9601 10-1:0.129: probe with driver dm9601 failed with error -22 [ 2044.746589][ T5918] sr9700 10-1:0.129: probe with driver sr9700 failed with error -22 [ 2044.977337][T25351] Bluetooth: hci4: command tx timeout [ 2045.119216][T27264] hsr_slave_0: entered promiscuous mode [ 2045.120119][T27264] hsr_slave_1: entered promiscuous mode [ 2045.120651][T27264] debugfs: 'hsr0' already exists in 'hsr' [ 2045.120672][T27264] Cannot create hsr debugfs directory [ 2045.342899][T25351] Bluetooth: hci0: command tx timeout [ 2046.110083][ C0] vkms_vblank_simulate: vblank timer overrun [ 2046.119596][ T10] usb 10-1: USB disconnect, device number 11 [ 2046.166654][T27376] sctp: [Deprecated]: syz.9.5908 (pid 27376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2046.166654][T27376] Use struct sctp_sack_info instead [ 2046.172074][ T5918] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2046.338407][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2046.338426][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2046.338440][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2046.341634][ T5918] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2046.341669][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.341688][ T5918] usb 6-1: Product: syz [ 2046.341701][ T5918] usb 6-1: Manufacturer: syz [ 2046.341714][ T5918] usb 6-1: SerialNumber: syz [ 2046.434448][ T5918] usb 6-1: config 0 descriptor?? [ 2046.448494][ T5918] usb 6-1: no audio or video endpoints found [ 2046.761789][T17088] usb 6-1: USB disconnect, device number 29 [ 2047.025760][T25351] Bluetooth: hci4: command tx timeout [ 2047.183601][T27321] chnl_net:caif_netlink_parms(): no params data found [ 2047.430916][T26861] Bluetooth: hci0: command tx timeout [ 2048.683421][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 2048.683437][ T37] audit: type=1326 audit(1757102805.476:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.686447][ T37] audit: type=1326 audit(1757102805.476:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.686721][ T37] audit: type=1326 audit(1757102805.476:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.689193][ T37] audit: type=1326 audit(1757102805.476:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.689762][ T37] audit: type=1326 audit(1757102805.476:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.690041][ T37] audit: type=1326 audit(1757102805.476:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.875846][ T37] audit: type=1326 audit(1757102805.666:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2048.876121][ T37] audit: type=1326 audit(1757102805.666:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27399 comm="syz.5.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2049.512121][T25351] Bluetooth: hci0: command tx timeout [ 2049.592039][T27113] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2049.752249][T25351] Bluetooth: hci2: command 0x0406 tx timeout [ 2049.759086][T27113] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2049.759108][T27113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2049.759122][T27113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2049.808973][T27113] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2049.809098][T27113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.809117][T27113] usb 6-1: Product: syz [ 2049.809130][T27113] usb 6-1: Manufacturer: syz [ 2049.809143][T27113] usb 6-1: SerialNumber: syz [ 2049.886348][T27113] usb 6-1: config 0 descriptor?? [ 2049.900941][T27113] usb 6-1: no audio or video endpoints found [ 2049.988916][T27321] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.989043][T27321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.989156][T27321] bridge_slave_0: entered allmulticast mode [ 2050.002624][T27321] bridge_slave_0: entered promiscuous mode [ 2050.357500][T27321] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.357648][T27321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.358243][T27321] bridge_slave_1: entered allmulticast mode [ 2050.361204][T27321] bridge_slave_1: entered promiscuous mode [ 2050.372734][T16344] usb 6-1: USB disconnect, device number 30 [ 2050.643126][T27420] sctp: [Deprecated]: syz.9.5919 (pid 27420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2050.643126][T27420] Use struct sctp_sack_info instead [ 2051.213852][T27321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2051.238386][T27321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2051.239436][T27356] chnl_net:caif_netlink_parms(): no params data found [ 2051.245970][ C0] vkms_vblank_simulate: vblank timer overrun [ 2052.314587][T26861] Bluetooth: hci0: command tx timeout [ 2052.314971][ C0] vkms_vblank_simulate: vblank timer overrun [ 2052.715895][ T3181] bridge_slave_1: left allmulticast mode [ 2052.715926][ T3181] bridge_slave_1: left promiscuous mode [ 2052.716140][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.821249][ T3181] bridge_slave_0: left allmulticast mode [ 2052.821279][ T3181] bridge_slave_0: left promiscuous mode [ 2052.821563][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.904643][ T3181] bridge_slave_1: left allmulticast mode [ 2052.904663][ T3181] bridge_slave_1: left promiscuous mode [ 2052.904812][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.986434][ T3181] bridge_slave_0: left allmulticast mode [ 2052.986465][ T3181] bridge_slave_0: left promiscuous mode [ 2052.986741][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.529664][ C0] vkms_vblank_simulate: vblank timer overrun [ 2053.645645][ C0] vkms_vblank_simulate: vblank timer overrun [ 2054.402834][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2054.496647][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2054.557677][ T3181] bond0 (unregistering): Released all slaves [ 2056.212926][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.272744][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2056.296556][ T3181] bond0 (unregistering): Released all slaves [ 2056.603656][T27438] tipc: Enabling of bearer rejected, failed to enable media [ 2056.664041][T27321] team0: Port device team_slave_0 added [ 2057.008192][T27321] team0: Port device team_slave_1 added [ 2057.242151][ T5918] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2057.399980][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 2057.401481][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2057.418706][ T5918] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2057.418722][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2057.418732][ T5918] usb 6-1: Product: syz [ 2057.418739][ T5918] usb 6-1: Manufacturer: syz [ 2057.418746][ T5918] usb 6-1: SerialNumber: syz [ 2057.452539][ T5918] usb 6-1: config 0 descriptor?? [ 2057.454972][T27461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2058.141287][T27465] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.142496][T27465] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.286474][T27465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2059.306125][T27465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2060.411536][T27466] geneve3: entered promiscuous mode [ 2060.411554][T27466] geneve3: entered allmulticast mode [ 2060.442765][T27321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.442781][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.442806][T27321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.652402][T27360] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.652433][T27360] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 2060.654255][T27321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.654268][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.654293][T27321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.969695][T17088] usb 6-1: USB disconnect, device number 31 [ 2061.871773][T27360] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.871810][T27360] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 2061.902186][T27356] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.911480][T27356] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.911677][T27356] bridge_slave_0: entered allmulticast mode [ 2061.914564][T27356] bridge_slave_0: entered promiscuous mode [ 2061.967783][T27360] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.967815][T27360] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 2062.474208][ T37] audit: type=1107 audit(1757102819.256:305): pid=27481 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2062.652534][ T3181] hsr_slave_0: left promiscuous mode [ 2062.690043][T27490] sctp: [Deprecated]: syz.5.5933 (pid 27490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2062.690043][T27490] Use struct sctp_sack_info instead [ 2062.710075][ T3181] hsr_slave_1: left promiscuous mode [ 2062.710989][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2062.802732][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2063.113005][ T3181] hsr_slave_0: left promiscuous mode [ 2063.152951][ T3181] hsr_slave_1: left promiscuous mode [ 2063.153858][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2063.193453][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2064.464513][ T3181] team0 (unregistering): Port device team_slave_1 removed [ 2064.602779][ T3181] team0 (unregistering): Port device team_slave_0 removed [ 2065.107686][T26861] Bluetooth: hci3: command 0x0406 tx timeout [ 2066.402749][ T3181] team0 (unregistering): Port device team_slave_1 removed [ 2066.623239][ T3181] team0 (unregistering): Port device team_slave_0 removed [ 2069.085383][T27356] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.085523][T27356] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.085704][T27356] bridge_slave_1: entered allmulticast mode [ 2069.088287][T27356] bridge_slave_1: entered promiscuous mode [ 2069.089193][T27360] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.089222][T27360] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 2069.365493][T27264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2069.625031][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2069.627052][T27264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2069.630340][ T5918] IPVS: starting estimator thread 0... [ 2069.742142][T27507] IPVS: using max 7 ests per chain, 16800 per kthread [ 2069.752102][ T10] usb 10-1: device descriptor read/64, error -71 [ 2069.817926][T27356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2069.831679][T27264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2069.896860][T27321] hsr_slave_0: entered promiscuous mode [ 2069.900755][T27321] hsr_slave_1: entered promiscuous mode [ 2069.915572][T27356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.915661][T27264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2070.008821][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2070.145927][ T10] usb 10-1: device descriptor read/64, error -71 [ 2070.252281][ T10] usb usb10-port1: attempt power cycle [ 2070.505574][T27356] team0: Port device team_slave_0 added [ 2070.552761][T27356] team0: Port device team_slave_1 added [ 2070.602087][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2070.635961][ T10] usb 10-1: device descriptor read/8, error -71 [ 2070.883852][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2070.902928][ T10] usb 10-1: device descriptor read/8, error -71 [ 2071.012880][ T10] usb usb10-port1: unable to enumerate USB device [ 2071.242263][T27356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2071.242280][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2071.242304][T27356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2071.264911][T27356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2071.264927][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2071.264950][T27356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2071.412750][ C0] vkms_vblank_simulate: vblank timer overrun [ 2071.672281][ T5918] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2071.709696][T27356] hsr_slave_0: entered promiscuous mode [ 2071.710995][T27356] hsr_slave_1: entered promiscuous mode [ 2071.721447][T27356] debugfs: 'hsr0' already exists in 'hsr' [ 2071.721471][T27356] Cannot create hsr debugfs directory [ 2071.855111][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 2071.860398][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2071.879296][ T5918] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2071.879322][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2071.879341][ T5918] usb 6-1: Product: syz [ 2071.879354][ T5918] usb 6-1: Manufacturer: syz [ 2071.879367][ T5918] usb 6-1: SerialNumber: syz [ 2071.944706][ T5918] usb 6-1: config 0 descriptor?? [ 2071.945787][T27518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2073.056013][T26841] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2073.206137][ T6929] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2073.219032][ T6929] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2073.329021][ T6929] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2073.547322][T27264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2074.071675][T27264] 8021q: adding VLAN 0 to HW filter on device team0 [ 2074.095398][T17957] bridge0: port 1(bridge_slave_0) entered blocking state [ 2074.095691][T17957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2074.267738][ C0] vkms_vblank_simulate: vblank timer overrun [ 2074.321980][T13158] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 2074.362606][ T1246] usb 6-1: USB disconnect, device number 32 [ 2074.371303][T17957] bridge0: port 2(bridge_slave_1) entered blocking state [ 2074.371540][T17957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2074.484906][T13158] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2074.484937][T13158] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2074.484961][T13158] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2074.487887][T13158] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2074.487901][T13158] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.487911][T13158] usb 10-1: Product: syz [ 2074.487918][T13158] usb 10-1: Manufacturer: syz [ 2074.487926][T13158] usb 10-1: SerialNumber: syz [ 2074.491040][T13158] usb 10-1: config 0 descriptor?? [ 2074.568126][T13158] usb 10-1: no audio or video endpoints found [ 2074.887819][ T5932] usb 10-1: USB disconnect, device number 16 [ 2075.144377][T27540] tipc: Enabling of bearer rejected, failed to enable media [ 2075.395376][ T3181] bridge_slave_1: left allmulticast mode [ 2075.395409][ T3181] bridge_slave_1: left promiscuous mode [ 2075.395670][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.446307][ C0] vkms_vblank_simulate: vblank timer overrun [ 2075.507222][ T3181] bridge_slave_0: left allmulticast mode [ 2075.507242][ T3181] bridge_slave_0: left promiscuous mode [ 2075.507416][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.859927][ C0] vkms_vblank_simulate: vblank timer overrun [ 2077.809583][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2077.906039][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2077.967891][ T3181] bond0 (unregistering): Released all slaves [ 2078.169849][T27561] fuse: Unknown parameter 'user_i00000000000000000000' [ 2078.401135][T27321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2078.460618][T27321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2078.503561][ C1] vkms_vblank_simulate: vblank timer overrun [ 2078.682105][T13158] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2078.682482][ T3181] hsr_slave_0: left promiscuous mode [ 2078.722188][ T3181] hsr_slave_1: left promiscuous mode [ 2078.723093][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2078.786267][ T3181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2078.822023][T13158] usb 10-1: device descriptor read/64, error -71 [ 2079.107810][T13158] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2079.233808][T13158] usb 10-1: device descriptor read/64, error -71 [ 2079.354359][T13158] usb usb10-port1: attempt power cycle [ 2079.702017][T13158] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2079.732867][T13158] usb 10-1: device descriptor read/8, error -71 [ 2079.966322][ T3181] team0 (unregistering): Port device team_slave_1 removed [ 2079.982355][T13158] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2080.007850][T13158] usb 10-1: device descriptor read/8, error -71 [ 2080.112337][T13158] usb usb10-port1: unable to enumerate USB device [ 2080.136622][ T3181] team0 (unregistering): Port device team_slave_0 removed [ 2080.811601][T27321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2081.008533][T27568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.009131][T27568] bridge0: port 1(bridge_slave_0) entered disabled state [ 2081.575271][T27568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2081.601570][T27568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2081.882055][ T5918] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2082.032193][ T5918] usb 10-1: Using ep0 maxpacket: 32 [ 2082.034057][ T5918] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2082.036520][ T5918] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2082.036536][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2082.036546][ T5918] usb 10-1: Product: syz [ 2082.036553][ T5918] usb 10-1: Manufacturer: syz [ 2082.036561][ T5918] usb 10-1: SerialNumber: syz [ 2082.039679][ T5918] usb 10-1: config 0 descriptor?? [ 2082.040506][T27577] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2082.760636][T27569] geneve3: entered promiscuous mode [ 2082.760655][T27569] geneve3: entered allmulticast mode [ 2082.909776][T27321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2082.955529][T17957] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.955561][T17957] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 2082.957224][T17957] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.957250][T17957] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 2083.002974][T17957] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.002998][T17957] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 2083.038123][T27264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2083.050698][T17957] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.050727][T17957] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 2083.153422][ C1] vkms_vblank_simulate: vblank timer overrun [ 2083.366142][T27588] sctp: [Deprecated]: syz.5.5952 (pid 27588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2083.366142][T27588] Use struct sctp_sack_info instead [ 2083.400331][T27356] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2083.431376][T27356] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2083.520719][T27356] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2083.659681][T27356] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2083.858911][T27264] veth0_vlan: entered promiscuous mode [ 2083.926437][T27264] veth1_vlan: entered promiscuous mode [ 2084.251339][T27321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.483799][T27264] veth0_macvtap: entered promiscuous mode [ 2084.540639][T27264] veth1_macvtap: entered promiscuous mode [ 2084.569662][T27321] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.639208][T27356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.674799][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.674935][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.748881][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.749100][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.764172][T27264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2084.796597][T27264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2084.815057][T12993] usb 10-1: USB disconnect, device number 21 [ 2084.816423][T27356] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.843852][ T2225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.844198][ T2225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.844377][ T2225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.844565][ T2225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.898780][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.899029][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.944181][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.944325][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2085.038426][T27603] tipc: Enabling of bearer rejected, failed to enable media [ 2085.125403][ T1246] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2085.300066][ T1246] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2085.300096][ T1246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2085.300120][ T1246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2085.303897][ T1246] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2085.303922][ T1246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.303940][ T1246] usb 6-1: Product: syz [ 2085.303953][ T1246] usb 6-1: Manufacturer: syz [ 2085.303966][ T1246] usb 6-1: SerialNumber: syz [ 2085.322603][ T1246] usb 6-1: config 0 descriptor?? [ 2085.349255][ T1246] usb 6-1: no audio or video endpoints found [ 2085.490014][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2085.490034][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.552826][ T1246] usb 6-1: USB disconnect, device number 33 [ 2085.651504][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2085.651524][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.685897][T27614] fuse: Unknown parameter 'user_i00000000000000000000' [ 2086.078648][T27321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.175225][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.339287][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.371512][T27321] veth0_vlan: entered promiscuous mode [ 2086.400151][T27321] veth1_vlan: entered promiscuous mode [ 2086.565069][T27356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.593948][T27321] veth0_macvtap: entered promiscuous mode [ 2086.613972][T27321] veth1_macvtap: entered promiscuous mode [ 2086.676092][T27321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.714886][T27321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.748231][T26841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.767396][T26841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.770052][T26841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.770453][T26841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.835627][ T37] audit: type=1107 audit(1757102843.626:306): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2087.151942][T12993] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2087.382929][T12993] usb 10-1: no configurations [ 2087.382947][T12993] usb 10-1: can't read configurations, error -22 [ 2087.552942][T12993] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2087.702827][T26841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.703076][T12993] usb 10-1: no configurations [ 2087.703091][T12993] usb 10-1: can't read configurations, error -22 [ 2087.703685][T12993] usb usb10-port1: attempt power cycle [ 2087.706675][T26841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.855914][T17957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.855933][T17957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.992256][T27113] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2088.049094][T12993] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2088.075491][T12993] usb 10-1: no configurations [ 2088.075509][T12993] usb 10-1: can't read configurations, error -22 [ 2088.144678][T27113] usb 6-1: Using ep0 maxpacket: 32 [ 2088.161522][T27113] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2088.200466][T27113] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2088.200482][T27113] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2088.200492][T27113] usb 6-1: Product: syz [ 2088.200500][T27113] usb 6-1: Manufacturer: syz [ 2088.200507][T27113] usb 6-1: SerialNumber: syz [ 2088.242111][T12993] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2088.264208][T12993] usb 10-1: no configurations [ 2088.264220][T12993] usb 10-1: can't read configurations, error -22 [ 2088.264441][T12993] usb usb10-port1: unable to enumerate USB device [ 2088.274628][T27113] usb 6-1: config 0 descriptor?? [ 2088.275562][T27644] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2088.443648][T27356] veth0_vlan: entered promiscuous mode [ 2088.477174][T27356] veth1_vlan: entered promiscuous mode [ 2088.578206][T27356] veth0_macvtap: entered promiscuous mode [ 2088.598305][T27356] veth1_macvtap: entered promiscuous mode [ 2088.649232][T27356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2088.733721][T27356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2088.776332][T26841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.776385][T26841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.776418][T26841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.776451][T26841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.867296][T27650] sctp: [Deprecated]: syz.0.5962 (pid 27650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2088.867296][T27650] Use struct sctp_sack_info instead [ 2089.024143][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5962'. [ 2089.049296][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.268426][T27655] tipc: Enabling of bearer rejected, failed to enable media [ 2089.597478][T27663] fuse: Unknown parameter 'user_id00000000000000000000' [ 2089.856984][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2089.857003][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.000538][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.000557][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.520071][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.028151][T27682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2091.049060][T27608] IPVS: starting estimator thread 0... [ 2091.152522][ T1246] usb 6-1: USB disconnect, device number 34 [ 2091.162253][T27687] IPVS: using max 13 ests per chain, 31200 per kthread [ 2092.438275][T27697] sctp: [Deprecated]: syz.1.5974 (pid 27697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2092.438275][T27697] Use struct sctp_sack_info instead [ 2092.779736][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5974'. [ 2093.119883][T27706] fuse: Unknown parameter 'user_id00000000000000000000' [ 2093.396440][T27713] tipc: Enabling of bearer rejected, failed to enable media [ 2095.293005][T12993] IPVS: starting estimator thread 0... [ 2095.392044][T27737] IPVS: using max 8 ests per chain, 19200 per kthread [ 2095.412023][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2095.562105][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 2095.587597][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2095.604719][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2095.604745][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2095.604766][ T10] usb 6-1: Product: syz [ 2095.604780][ T10] usb 6-1: Manufacturer: syz [ 2095.604793][ T10] usb 6-1: SerialNumber: syz [ 2095.643809][ T10] usb 6-1: config 0 descriptor?? [ 2095.645874][T27734] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2096.003326][ T37] audit: type=1107 audit(1757102852.796:307): pid=27742 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2096.074308][ C0] vkms_vblank_simulate: vblank timer overrun [ 2097.304525][ C0] vkms_vblank_simulate: vblank timer overrun [ 2097.806560][ C0] vkms_vblank_simulate: vblank timer overrun [ 2097.938714][ C0] vkms_vblank_simulate: vblank timer overrun [ 2098.564774][ C0] vkms_vblank_simulate: vblank timer overrun [ 2099.363627][ C0] vkms_vblank_simulate: vblank timer overrun [ 2099.619151][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.957036][ C0] vkms_vblank_simulate: vblank timer overrun [ 2100.096961][ C0] vkms_vblank_simulate: vblank timer overrun [ 2100.476249][T27758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.477100][T27758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.365386][T27758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2101.372687][T27758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2102.369047][T27760] tipc: Started in network mode [ 2102.369076][T27760] tipc: Node identity 7af426f76fe7, cluster identity 4711 [ 2102.369218][T27760] tipc: Enabled bearer , priority 0 [ 2102.413644][T27767] geneve2: entered promiscuous mode [ 2102.413662][T27767] geneve2: entered allmulticast mode [ 2102.442507][T27771] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2102.501166][T27781] tipc: Resetting bearer [ 2102.559176][T17088] usb 6-1: USB disconnect, device number 35 [ 2102.720611][ T37] audit: type=1107 audit(1757102859.506:308): pid=27792 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2103.084314][T27755] tipc: Disabling bearer [ 2103.096839][T27799] sctp: [Deprecated]: syz.5.6001 (pid 27799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2103.096839][T27799] Use struct sctp_sack_info instead [ 2103.649121][T27789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2103.730378][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.730427][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 2103.752350][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.752380][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 2103.753052][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.753079][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 2103.753594][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.753620][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 2104.169848][ C1] vkms_vblank_simulate: vblank timer overrun [ 2104.356039][ C1] vkms_vblank_simulate: vblank timer overrun [ 2104.915545][ C1] vkms_vblank_simulate: vblank timer overrun [ 2105.491561][ C1] vkms_vblank_simulate: vblank timer overrun [ 2105.668840][ C1] vkms_vblank_simulate: vblank timer overrun [ 2106.026399][ C1] vkms_vblank_simulate: vblank timer overrun [ 2107.872029][T12993] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2108.051955][T12993] usb 1-1: Using ep0 maxpacket: 32 [ 2108.054860][T12993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2108.056938][T12993] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2108.056954][T12993] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2108.056964][T12993] usb 1-1: Product: syz [ 2108.056972][T12993] usb 1-1: Manufacturer: syz [ 2108.056978][T12993] usb 1-1: SerialNumber: syz [ 2108.124921][T12993] usb 1-1: config 0 descriptor?? [ 2108.126016][T27834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2108.607619][T27843] tipc: Started in network mode [ 2108.607648][T27843] tipc: Node identity 362686f66737, cluster identity 4711 [ 2108.607851][T27843] tipc: Enabled bearer , priority 0 [ 2108.609917][T27843] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2108.644538][T27843] tipc: Resetting bearer [ 2108.821838][T27842] tipc: Disabling bearer [ 2109.351002][ T37] audit: type=1107 audit(1757102866.136:309): pid=27848 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2109.606386][ C1] vkms_vblank_simulate: vblank timer overrun [ 2110.676959][T27870] sctp: [Deprecated]: syz.1.6024 (pid 27870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2110.676959][T27870] Use struct sctp_sack_info instead [ 2110.999043][ C1] vkms_vblank_simulate: vblank timer overrun [ 2111.009118][T27867] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6023'. [ 2111.050067][T27873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2111.052357][T27873] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.058378][ C1] vkms_vblank_simulate: vblank timer overrun [ 2111.135174][T27873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2111.252355][ T10] usb 1-1: USB disconnect, device number 54 [ 2112.532342][T27887] tipc: Enabled bearer , priority 0 [ 2112.533536][T27887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2112.657534][T27888] tipc: Resetting bearer [ 2112.952786][T27886] tipc: Disabling bearer [ 2113.337399][T17088] IPVS: starting estimator thread 0... [ 2113.452383][T27895] IPVS: using max 8 ests per chain, 19200 per kthread [ 2114.151182][T27890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.152002][T27890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.471447][ C1] vkms_vblank_simulate: vblank timer overrun [ 2114.714906][ C1] vkms_vblank_simulate: vblank timer overrun [ 2115.281545][ C1] vkms_vblank_simulate: vblank timer overrun [ 2115.709239][ C1] vkms_vblank_simulate: vblank timer overrun [ 2115.867296][ C1] vkms_vblank_simulate: vblank timer overrun [ 2116.460813][ C1] vkms_vblank_simulate: vblank timer overrun [ 2116.713656][T27890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2116.720147][T27890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2116.761771][ C1] vkms_vblank_simulate: vblank timer overrun [ 2117.407609][ C1] vkms_vblank_simulate: vblank timer overrun [ 2117.417344][T27891] geneve2: entered promiscuous mode [ 2117.417360][T27891] geneve2: entered allmulticast mode [ 2117.452688][T27926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'. [ 2117.452924][ T6929] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.452951][ T6929] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 2117.497314][ T6929] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.497343][ T6929] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 2117.503167][ T6929] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.503195][ T6929] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 2117.503343][ T6929] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.503367][ T6929] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 2117.851306][T27936] sctp: [Deprecated]: syz.0.6045 (pid 27936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2117.851306][T27936] Use struct sctp_sack_info instead [ 2118.358054][ C1] vkms_vblank_simulate: vblank timer overrun [ 2119.027562][ C1] vkms_vblank_simulate: vblank timer overrun [ 2119.261734][ C1] vkms_vblank_simulate: vblank timer overrun [ 2119.703842][ T37] audit: type=1107 audit(1757102876.486:310): pid=27955 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='v' [ 2120.256531][ T2225] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2120.256599][ T2225] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2120.256634][ T2225] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2120.256796][ T2225] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2121.818775][ C1] vkms_vblank_simulate: vblank timer overrun [ 2122.592066][ C1] vkms_vblank_simulate: vblank timer overrun [ 2123.281081][T28006] tipc: Started in network mode [ 2123.281099][T28006] tipc: Node identity ba01c8e278c8, cluster identity 4711 [ 2123.281227][T28006] tipc: Enabled bearer , priority 0 [ 2123.306741][T28006] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2123.326165][T28006] tipc: Resetting bearer [ 2123.486165][ C1] vkms_vblank_simulate: vblank timer overrun [ 2123.833963][T28010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6069'. [ 2123.835772][ C1] vkms_vblank_simulate: vblank timer overrun [ 2124.235986][ C1] vkms_vblank_simulate: vblank timer overrun [ 2124.345117][ T9] tipc: Node number set to 3268004066 [ 2124.434992][T28005] tipc: Disabling bearer [ 2124.715534][ C1] vkms_vblank_simulate: vblank timer overrun [ 2124.773320][ T37] audit: type=1326 audit(1757102881.566:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2124.774100][ T37] audit: type=1326 audit(1757102881.566:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2124.774171][ T37] audit: type=1326 audit(1757102881.566:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2124.774796][ T37] audit: type=1326 audit(1757102881.566:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2124.774862][ T37] audit: type=1326 audit(1757102881.566:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2124.784929][ T37] audit: type=1326 audit(1757102881.566:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2125.014218][ C1] vkms_vblank_simulate: vblank timer overrun [ 2125.290094][ C1] vkms_vblank_simulate: vblank timer overrun [ 2125.304191][T28026] fuse: Unknown parameter '0x0000000000000004' [ 2125.551365][ C1] vkms_vblank_simulate: vblank timer overrun [ 2125.754813][ C1] vkms_vblank_simulate: vblank timer overrun [ 2125.968080][ C1] vkms_vblank_simulate: vblank timer overrun [ 2126.260422][ C1] vkms_vblank_simulate: vblank timer overrun [ 2126.547192][ T6929] Bluetooth: hci5: Frame reassembly failed (-84) [ 2126.628520][T28054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6086'. [ 2126.696319][T28056] tipc: Enabled bearer , priority 0 [ 2126.697516][T28056] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2126.860736][T28051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.862907][T28051] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.893435][T28051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2126.898159][T28056] tipc: Resetting bearer [ 2127.140591][T28055] tipc: Disabling bearer [ 2127.262365][T28063] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6089'. [ 2127.650210][ C1] vkms_vblank_simulate: vblank timer overrun [ 2127.808718][T28070] fuse: Unknown parameter '0x0000000000000004' [ 2128.311633][ C1] vkms_vblank_simulate: vblank timer overrun [ 2128.530435][ C1] vkms_vblank_simulate: vblank timer overrun [ 2128.695211][T26861] Bluetooth: hci5: command 0x1003 tx timeout [ 2128.700831][T25351] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2129.064642][ C1] vkms_vblank_simulate: vblank timer overrun [ 2129.982279][T28099] syzkaller0: entered promiscuous mode [ 2129.982310][T28099] syzkaller0: entered allmulticast mode [ 2130.008803][T28099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2130.058937][ C1] vkms_vblank_simulate: vblank timer overrun [ 2130.072881][ T1246] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2130.235091][ T1246] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2130.235125][ T1246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2130.235152][ T1246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2130.237717][ T1246] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2130.237743][ T1246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.237761][ T1246] usb 2-1: Product: syz [ 2130.237775][ T1246] usb 2-1: Manufacturer: syz [ 2130.237787][ T1246] usb 2-1: SerialNumber: syz [ 2130.317170][ T1246] usb 2-1: config 0 descriptor?? [ 2130.334541][ T1246] usb 2-1: no audio or video endpoints found [ 2130.595292][T28102] fuse: Unknown parameter '0x0000000000000004' [ 2130.688921][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.688966][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.689000][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.689033][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.729086][ T1246] usb 2-1: USB disconnect, device number 54 [ 2131.171314][ C1] vkms_vblank_simulate: vblank timer overrun [ 2131.254087][ C1] vkms_vblank_simulate: vblank timer overrun [ 2131.663370][ C1] vkms_vblank_simulate: vblank timer overrun [ 2131.824433][ C1] vkms_vblank_simulate: vblank timer overrun [ 2131.928155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2132.174071][ C1] vkms_vblank_simulate: vblank timer overrun [ 2132.259117][T28128] sctp: [Deprecated]: syz.8.6113 (pid 28128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2132.259117][T28128] Use struct sctp_sack_info instead [ 2132.506813][T28136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6113'. [ 2132.697781][T28145] fuse: Unknown parameter '0x0000000000000004' [ 2132.721929][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2132.911966][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 2132.915473][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.915496][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2132.920028][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2132.920044][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.920054][ T9] usb 1-1: Product: syz [ 2132.920061][ T9] usb 1-1: Manufacturer: syz [ 2132.920068][ T9] usb 1-1: SerialNumber: syz [ 2133.231323][ T9] usb 1-1: 0:2 : does not exist [ 2133.239425][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2133.353669][ T9] usb 1-1: USB disconnect, device number 55 [ 2133.951898][ C1] vkms_vblank_simulate: vblank timer overrun [ 2134.035016][T28156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.037208][T28156] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.043155][ C1] vkms_vblank_simulate: vblank timer overrun [ 2134.117613][T28156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2134.696344][ C1] vkms_vblank_simulate: vblank timer overrun [ 2135.014313][T28181] fuse: Unknown parameter '0x0000000000000004' [ 2135.131966][ T9] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2135.282156][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 2135.303362][ T9] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 2135.303386][ T9] usb 10-1: config 0 has no interface number 0 [ 2135.308743][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2135.308880][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.308900][ T9] usb 10-1: Product: syz [ 2135.308913][ T9] usb 10-1: Manufacturer: syz [ 2135.308926][ T9] usb 10-1: SerialNumber: syz [ 2135.330542][ T9] usb 10-1: config 0 descriptor?? [ 2135.352446][ T9] smsc95xx v2.0.0 [ 2135.688720][ C1] vkms_vblank_simulate: vblank timer overrun [ 2135.953522][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2135.953551][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2135.954134][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2135.954367][ T9] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 2135.957941][ T9] usb 10-1: USB disconnect, device number 26 [ 2136.201009][ T37] audit: type=1326 audit(1757102892.986:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28196 comm="syz.8.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2136.201569][ T37] audit: type=1326 audit(1757102892.986:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28196 comm="syz.8.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2136.257326][ T37] audit: type=1326 audit(1757102893.026:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28196 comm="syz.8.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2136.257376][ T37] audit: type=1326 audit(1757102893.026:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28196 comm="syz.8.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2136.583067][T28201] sctp: [Deprecated]: syz.9.6138 (pid 28201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2136.583067][T28201] Use struct sctp_sack_info instead [ 2136.795326][T28209] fuse: Unknown parameter '0x0000000000000004' [ 2137.283072][T28218] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6142'. [ 2137.566854][ C1] vkms_vblank_simulate: vblank timer overrun [ 2137.707031][ T37] audit: type=1107 audit(1757102894.496:321): pid=28221 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2138.869905][T28235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6149'. [ 2138.881408][ T2225] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2138.881439][ T2225] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2138.881459][ T2225] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2138.881480][ T2225] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2139.295450][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6153'. [ 2139.731623][ C1] vkms_vblank_simulate: vblank timer overrun [ 2139.966334][ C1] vkms_vblank_simulate: vblank timer overrun [ 2140.505497][ C1] vkms_vblank_simulate: vblank timer overrun [ 2141.634905][ C1] vkms_vblank_simulate: vblank timer overrun [ 2141.897593][T28264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2142.113709][ C1] vkms_vblank_simulate: vblank timer overrun [ 2142.285552][ C1] vkms_vblank_simulate: vblank timer overrun [ 2142.349139][ C1] vkms_vblank_simulate: vblank timer overrun [ 2142.497183][ C1] vkms_vblank_simulate: vblank timer overrun [ 2142.980225][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.180605][ C1] vkms_vblank_simulate: vblank timer overrun [ 2143.898946][T28292] sctp: [Deprecated]: syz.0.6165 (pid 28292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2143.898946][T28292] Use struct sctp_sack_info instead [ 2144.963598][T28304] netlink: 'syz.1.6168': attribute type 10 has an invalid length. [ 2145.002867][T28304] team0: Port device dummy0 added [ 2145.434965][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.468563][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.546754][ C1] vkms_vblank_simulate: vblank timer overrun [ 2147.220541][ C1] vkms_vblank_simulate: vblank timer overrun [ 2147.472762][ C1] vkms_vblank_simulate: vblank timer overrun [ 2147.474054][ T37] audit: type=1107 audit(1757102904.256:322): pid=28323 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2147.957298][ C1] vkms_vblank_simulate: vblank timer overrun [ 2148.406886][ C1] vkms_vblank_simulate: vblank timer overrun [ 2148.649410][ C1] vkms_vblank_simulate: vblank timer overrun [ 2148.701472][T28353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6184'. [ 2148.701494][T28353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6184'. [ 2149.308328][ C1] vkms_vblank_simulate: vblank timer overrun [ 2149.547622][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6183'. [ 2149.594663][ C1] vkms_vblank_simulate: vblank timer overrun [ 2150.092340][T28345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2150.094503][T28345] 8021q: adding VLAN 0 to HW filter on device team0 [ 2150.100260][ C1] vkms_vblank_simulate: vblank timer overrun [ 2150.165948][T28345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2150.166026][T28362] ªªªªªª: renamed from vlan0 [ 2150.337405][T28356] veth0_vlan: entered allmulticast mode [ 2150.896020][ C1] vkms_vblank_simulate: vblank timer overrun [ 2151.052571][ C1] vkms_vblank_simulate: vblank timer overrun [ 2151.666105][ C1] vkms_vblank_simulate: vblank timer overrun [ 2151.828714][ T37] audit: type=1107 audit(1757102907.836:323): pid=28370 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2152.142132][T26861] Bluetooth: hci1: command 0x0406 tx timeout [ 2152.440498][T28383] sctp: [Deprecated]: syz.8.6192 (pid 28383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2152.440498][T28383] Use struct sctp_sack_info instead [ 2152.785721][T28393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6197'. [ 2152.785754][T28393] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6197'. [ 2152.912716][T28399] netlink: 'syz.5.6199': attribute type 10 has an invalid length. [ 2152.944932][T28399] team0: Port device dummy0 added [ 2153.210496][ C1] vkms_vblank_simulate: vblank timer overrun [ 2153.257241][T28395] syzkaller0: entered promiscuous mode [ 2153.257261][T28395] syzkaller0: entered allmulticast mode [ 2153.263333][T28403] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2153.793466][ C1] vkms_vblank_simulate: vblank timer overrun [ 2153.956140][ C1] vkms_vblank_simulate: vblank timer overrun [ 2153.997549][T28408] netlink: 'syz.5.6200': attribute type 4 has an invalid length. [ 2154.154507][T28409] netlink: 'syz.5.6200': attribute type 4 has an invalid length. [ 2154.156508][ C1] vkms_vblank_simulate: vblank timer overrun [ 2154.242466][ C1] vkms_vblank_simulate: vblank timer overrun [ 2154.325636][ C1] vkms_vblank_simulate: vblank timer overrun [ 2154.560359][ C1] vkms_vblank_simulate: vblank timer overrun [ 2154.700794][ C1] vkms_vblank_simulate: vblank timer overrun [ 2154.938885][ C1] vkms_vblank_simulate: vblank timer overrun [ 2155.294392][ C1] vkms_vblank_simulate: vblank timer overrun [ 2155.296491][ T37] audit: type=1107 audit(1757102912.066:324): pid=28412 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2155.713374][ C1] vkms_vblank_simulate: vblank timer overrun [ 2156.178185][T28423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6204'. [ 2156.938286][ T1246] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2156.967221][T28441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6212'. [ 2157.112032][ T1246] usb 2-1: device descriptor read/64, error -71 [ 2157.423110][ C1] vkms_vblank_simulate: vblank timer overrun [ 2158.054384][ C1] vkms_vblank_simulate: vblank timer overrun [ 2158.352100][ T1246] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2158.612002][ T1246] usb 2-1: device descriptor read/64, error -71 [ 2158.722678][ T1246] usb usb2-port1: attempt power cycle [ 2158.945310][T26861] Bluetooth: hci4: command 0x0405 tx timeout [ 2159.071992][ T1246] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2159.092983][ T1246] usb 2-1: device descriptor read/8, error -71 [ 2159.268927][T28470] syzkaller0: entered promiscuous mode [ 2159.268954][T28470] syzkaller0: entered allmulticast mode [ 2159.298018][T28470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2159.342290][ T1246] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2159.392721][ T1246] usb 2-1: device descriptor read/8, error -71 [ 2159.502357][ T1246] usb usb2-port1: unable to enumerate USB device [ 2160.014812][ C1] vkms_vblank_simulate: vblank timer overrun [ 2160.184833][ C1] vkms_vblank_simulate: vblank timer overrun [ 2160.225792][ T37] audit: type=1107 audit(1757102916.966:325): pid=28478 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2160.737329][ C1] vkms_vblank_simulate: vblank timer overrun [ 2160.891928][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.236081][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.417967][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.886775][ C1] vkms_vblank_simulate: vblank timer overrun [ 2162.176355][ C1] vkms_vblank_simulate: vblank timer overrun [ 2162.546622][T25351] Bluetooth: hci4: command 0x0405 tx timeout [ 2162.585503][T28508] netlink: 'syz.5.6235': attribute type 10 has an invalid length. [ 2162.863851][ C1] vkms_vblank_simulate: vblank timer overrun [ 2163.105993][ T37] audit: type=1107 audit(1757102919.896:326): pid=28507 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2163.248330][ T1246] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2163.424996][ T1246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.425119][ T1246] usb 10-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 2163.425142][ T1246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.474177][ T1246] usb 10-1: config 0 descriptor?? [ 2163.781886][ T9] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 2163.955266][ C1] vkms_vblank_simulate: vblank timer overrun [ 2163.970533][ T1246] wacom 0003:056A:0015.001A: unknown main item tag 0x0 [ 2163.998082][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2163.998100][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 2163.998114][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 2164.001004][ T9] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2164.001019][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.001029][ T9] usb 9-1: Product: syz [ 2164.001036][ T9] usb 9-1: Manufacturer: syz [ 2164.001043][ T9] usb 9-1: SerialNumber: syz [ 2164.006069][ T9] usb 9-1: config 0 descriptor?? [ 2164.016111][ T9] usb 9-1: no audio or video endpoints found [ 2164.161951][ T1246] usb 10-1: USB disconnect, device number 27 [ 2164.323669][ C1] vkms_vblank_simulate: vblank timer overrun [ 2164.359984][ T6754] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.360022][ T6754] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.360051][ T6754] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.360070][ T6754] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.510636][ C1] vkms_vblank_simulate: vblank timer overrun [ 2165.101234][ C1] vkms_vblank_simulate: vblank timer overrun [ 2165.243385][ T9] usb 9-1: USB disconnect, device number 12 [ 2165.577291][T28541] syzkaller0: entered promiscuous mode [ 2165.577319][T28541] syzkaller0: entered allmulticast mode [ 2165.722306][T28541] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2165.768838][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.084111][T28548] netlink: 'syz.9.6251': attribute type 10 has an invalid length. [ 2166.151978][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2166.254617][T28548] team0: Port device dummy0 added [ 2166.308025][ T10] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2166.308054][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.308073][ T10] usb 9-1: Product: syz [ 2166.308086][ T10] usb 9-1: Manufacturer: syz [ 2166.308106][ T10] usb 9-1: SerialNumber: syz [ 2166.345806][ T10] usb 9-1: config 0 descriptor?? [ 2166.471997][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2166.634368][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.634413][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2166.634435][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.641346][ T9] usb 1-1: config 0 descriptor?? [ 2166.687419][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2166.766470][ C1] vkms_vblank_simulate: vblank timer overrun [ 2167.640992][ T37] audit: type=1326 audit(1757102924.426:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.9.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2167.641438][ T37] audit: type=1326 audit(1757102924.426:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.9.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2167.641577][ T37] audit: type=1326 audit(1757102924.426:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.9.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2167.680753][ T37] audit: type=1326 audit(1757102924.466:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.9.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2167.859431][ T37] audit: type=1326 audit(1757102924.646:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.9.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2167.859485][ T37] audit: type=1326 audit(1757102924.646:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.9.6256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2168.297087][T28574] serio: Serial port ptm0 [ 2168.488322][T28582] netlink: 'syz.5.6264': attribute type 10 has an invalid length. [ 2168.730702][ C1] vkms_vblank_simulate: vblank timer overrun [ 2168.886730][ T37] audit: type=1107 audit(1757102925.676:333): pid=28583 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2168.922377][ T9] usb 9-1: USB disconnect, device number 13 [ 2169.287051][ C1] vkms_vblank_simulate: vblank timer overrun [ 2170.194606][ C1] vkms_vblank_simulate: vblank timer overrun [ 2170.280848][T17088] usb 1-1: USB disconnect, device number 56 [ 2170.452734][ C1] vkms_vblank_simulate: vblank timer overrun [ 2170.607513][ T37] audit: type=1326 audit(1757102927.396:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.607567][ T37] audit: type=1326 audit(1757102927.396:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.672128][ T37] audit: type=1326 audit(1757102927.446:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.767005][ T37] audit: type=1326 audit(1757102927.536:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.767056][ T37] audit: type=1326 audit(1757102927.536:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.767097][ T37] audit: type=1326 audit(1757102927.536:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.767138][ T37] audit: type=1326 audit(1757102927.536:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.767177][ T37] audit: type=1326 audit(1757102927.536:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2170.767217][ T37] audit: type=1326 audit(1757102927.536:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28601 comm="syz.8.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2171.338936][T28616] netlink: 'syz.8.6276': attribute type 10 has an invalid length. [ 2171.382193][T28616] team0: Port device dummy0 added [ 2171.988313][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.001926][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2172.123081][T17088] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2172.643119][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.844706][T17088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.844750][T17088] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2172.844771][T17088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.892869][T17088] usb 6-1: config 0 descriptor?? [ 2172.977386][ T9] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2172.977413][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.977432][ T9] usb 9-1: Product: syz [ 2172.977444][ T9] usb 9-1: Manufacturer: syz [ 2172.977457][ T9] usb 9-1: SerialNumber: syz [ 2172.983271][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.998169][ T9] usb 9-1: config 0 descriptor?? [ 2173.048731][T17088] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2173.267706][ C1] vkms_vblank_simulate: vblank timer overrun [ 2173.442408][ C1] vkms_vblank_simulate: vblank timer overrun [ 2173.969511][ C1] vkms_vblank_simulate: vblank timer overrun [ 2174.408456][T28640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6284'. [ 2174.581609][T28646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6287'. [ 2174.624947][T28649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6288'. [ 2174.735392][T28652] input: syz1 as /devices/virtual/input/input34 [ 2174.759833][T28654] syzkaller0: entered promiscuous mode [ 2174.759849][T28654] syzkaller0: entered allmulticast mode [ 2174.775562][T28654] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2175.031334][T17088] usb 6-1: USB disconnect, device number 36 [ 2175.405089][ C1] vkms_vblank_simulate: vblank timer overrun [ 2175.446827][ T10] usb 9-1: USB disconnect, device number 14 [ 2175.580258][ C1] vkms_vblank_simulate: vblank timer overrun [ 2175.871236][ C1] vkms_vblank_simulate: vblank timer overrun [ 2176.070381][ C1] vkms_vblank_simulate: vblank timer overrun [ 2176.164246][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2176.164265][ T37] audit: type=1107 audit(1757102932.956:347): pid=28656 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2176.642735][T28668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6296'. [ 2176.642768][T28668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6296'. [ 2176.795389][ C1] vkms_vblank_simulate: vblank timer overrun [ 2176.917440][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.433566][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.720979][ C1] vkms_vblank_simulate: vblank timer overrun [ 2177.743033][T28677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'. [ 2178.231991][T17088] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2178.384390][T17088] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.384433][T17088] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2178.384453][T17088] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.421262][T17088] usb 10-1: config 0 descriptor?? [ 2178.446885][T17088] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2178.712374][ C1] vkms_vblank_simulate: vblank timer overrun [ 2179.021962][ C1] vkms_vblank_simulate: vblank timer overrun [ 2179.179893][ C1] vkms_vblank_simulate: vblank timer overrun [ 2182.985847][ T1246] usb 10-1: USB disconnect, device number 28 [ 2183.255726][T28710] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6307'. [ 2183.255760][T28710] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6307'. [ 2183.383399][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6309'. [ 2185.518701][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.653310][ C0] vkms_vblank_simulate: vblank timer overrun [ 2186.145554][T17957] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.145586][T17957] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2186.549564][T17957] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.549595][T17957] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2186.549636][T17957] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.549659][T17957] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2186.549692][T17957] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.549715][T17957] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2186.955801][ T37] audit: type=1107 audit(1757102943.746:348): pid=28728 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2187.337527][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6322'. [ 2187.464643][T28758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6321'. [ 2187.464677][T28758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6321'. [ 2187.835465][ C0] vkms_vblank_simulate: vblank timer overrun [ 2188.295561][ C0] vkms_vblank_simulate: vblank timer overrun [ 2188.792509][ C0] vkms_vblank_simulate: vblank timer overrun [ 2189.681911][ C0] vkms_vblank_simulate: vblank timer overrun [ 2190.023551][ C0] vkms_vblank_simulate: vblank timer overrun [ 2190.074787][T28791] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6333'. [ 2190.702364][ C0] vkms_vblank_simulate: vblank timer overrun [ 2191.213338][T28805] IPVS: Unknown mcast interface: syzkaller1 [ 2191.351955][T22295] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2191.521955][T22295] usb 6-1: Using ep0 maxpacket: 32 [ 2191.524948][T22295] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2191.529046][T22295] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2191.529072][T22295] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2191.529091][T22295] usb 6-1: Product: syz [ 2191.529104][T22295] usb 6-1: Manufacturer: syz [ 2191.529117][T22295] usb 6-1: SerialNumber: syz [ 2191.589170][T22295] usb 6-1: config 0 descriptor?? [ 2191.589996][T28801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2191.953394][ T37] audit: type=1107 audit(1757102948.746:349): pid=28810 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2192.409512][ C0] vkms_vblank_simulate: vblank timer overrun [ 2192.837354][ C0] vkms_vblank_simulate: vblank timer overrun [ 2193.661504][ C0] vkms_vblank_simulate: vblank timer overrun [ 2194.687360][ C0] vkms_vblank_simulate: vblank timer overrun [ 2194.872225][T22295] usb 6-1: USB disconnect, device number 37 [ 2195.518230][ C0] vkms_vblank_simulate: vblank timer overrun [ 2195.736528][ C0] vkms_vblank_simulate: vblank timer overrun [ 2196.278709][ C0] vkms_vblank_simulate: vblank timer overrun [ 2196.408952][ C0] vkms_vblank_simulate: vblank timer overrun [ 2196.496600][ C0] vkms_vblank_simulate: vblank timer overrun [ 2196.786003][ T37] audit: type=1326 audit(1757102953.576:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.788928][ T37] audit: type=1326 audit(1757102953.576:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.793851][ T37] audit: type=1326 audit(1757102953.586:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.794363][ T37] audit: type=1326 audit(1757102953.586:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.794701][ T37] audit: type=1326 audit(1757102953.586:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.796187][ T37] audit: type=1326 audit(1757102953.586:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.799216][ T37] audit: type=1326 audit(1757102953.586:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.800493][ T37] audit: type=1326 audit(1757102953.586:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.801454][ T37] audit: type=1326 audit(1757102953.586:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2196.803773][ T37] audit: type=1326 audit(1757102953.586:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28874 comm="syz.9.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dee5ebe9 code=0x7ffc0000 [ 2197.550048][ C0] vkms_vblank_simulate: vblank timer overrun [ 2197.952656][T17088] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2198.484000][ C0] vkms_vblank_simulate: vblank timer overrun [ 2198.721881][T17088] usb 10-1: Using ep0 maxpacket: 32 [ 2198.726999][T17088] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2198.730705][T17088] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2198.730720][T17088] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2198.730730][T17088] usb 10-1: Product: syz [ 2198.730738][T17088] usb 10-1: Manufacturer: syz [ 2198.730745][T17088] usb 10-1: SerialNumber: syz [ 2198.798451][T17088] usb 10-1: config 0 descriptor?? [ 2198.998913][ C0] vkms_vblank_simulate: vblank timer overrun [ 2199.015727][T28886] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2199.216870][ C0] vkms_vblank_simulate: vblank timer overrun [ 2199.649349][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.052264][ C0] vkms_vblank_simulate: vblank timer overrun [ 2201.327910][ C0] vkms_vblank_simulate: vblank timer overrun [ 2201.404382][ T1246] usb 10-1: USB disconnect, device number 29 [ 2201.655041][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.017288][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.860940][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.444493][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 2203.444509][ T37] audit: type=1326 audit(1757102960.226:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.444805][ T37] audit: type=1326 audit(1757102960.236:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.494121][ T37] audit: type=1326 audit(1757102960.286:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.494168][ T37] audit: type=1326 audit(1757102960.286:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.510072][ T37] audit: type=1326 audit(1757102960.296:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.510123][ T37] audit: type=1326 audit(1757102960.296:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.510164][ T37] audit: type=1326 audit(1757102960.296:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.511966][ T37] audit: type=1326 audit(1757102960.296:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.512012][ T37] audit: type=1326 audit(1757102960.296:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28940 comm="syz.5.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e95ebe9 code=0x7ffc0000 [ 2203.915448][ T37] audit: type=1326 audit(1757102960.706:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28945 comm="syz.0.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcca94ebe9 code=0x7ffc0000 [ 2204.472485][ C0] vkms_vblank_simulate: vblank timer overrun [ 2204.801972][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2204.962221][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2204.965975][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.966002][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.966039][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2204.966060][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.971442][ T9] usb 2-1: config 0 descriptor?? [ 2205.262298][ T1246] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2205.411992][ T1246] usb 1-1: Using ep0 maxpacket: 32 [ 2205.412213][ T9] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 2205.415567][ T1246] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2205.418092][ T1246] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2205.418107][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2205.418117][ T1246] usb 1-1: Product: syz [ 2205.418124][ T1246] usb 1-1: Manufacturer: syz [ 2205.418131][ T1246] usb 1-1: SerialNumber: syz [ 2205.759013][ C0] vkms_vblank_simulate: vblank timer overrun [ 2206.861797][ C0] vkms_vblank_simulate: vblank timer overrun [ 2206.906173][ T1246] usb 1-1: config 0 descriptor?? [ 2206.907124][T28957] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2207.394735][ C0] vkms_vblank_simulate: vblank timer overrun [ 2207.658659][ C0] vkms_vblank_simulate: vblank timer overrun [ 2208.450801][T17088] usb 2-1: USB disconnect, device number 59 [ 2208.477586][ C0] vkms_vblank_simulate: vblank timer overrun [ 2208.687031][T22295] usb 1-1: USB disconnect, device number 57 [ 2209.373516][ C0] vkms_vblank_simulate: vblank timer overrun [ 2209.787705][T29015] netlink: 'syz.0.6409': attribute type 3 has an invalid length. [ 2210.300861][ C0] vkms_vblank_simulate: vblank timer overrun [ 2210.518555][ C0] vkms_vblank_simulate: vblank timer overrun [ 2211.227651][ C0] vkms_vblank_simulate: vblank timer overrun [ 2211.741923][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2211.892103][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2211.900091][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2211.904198][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2211.904223][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2211.904242][ T9] usb 2-1: Product: syz [ 2211.904255][ T9] usb 2-1: Manufacturer: syz [ 2211.904268][ T9] usb 2-1: SerialNumber: syz [ 2211.958429][ T9] usb 2-1: config 0 descriptor?? [ 2211.960967][T29029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2212.782284][T29037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2212.860085][T29037] 8021q: adding VLAN 0 to HW filter on device team0 [ 2213.001975][T29037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2214.989131][ C0] vkms_vblank_simulate: vblank timer overrun [ 2215.235429][ C0] vkms_vblank_simulate: vblank timer overrun [ 2215.383739][ T1246] usb 2-1: USB disconnect, device number 60 [ 2215.640283][ C0] vkms_vblank_simulate: vblank timer overrun [ 2216.196136][ C0] vkms_vblank_simulate: vblank timer overrun [ 2217.748591][ C1] vkms_vblank_simulate: vblank timer overrun [ 2217.908267][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.422674][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.610308][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.672833][T22295] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2218.735248][T29112] sctp: [Deprecated]: syz.5.6441 (pid 29112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2218.735248][T29112] Use struct sctp_sack_info instead [ 2218.821872][T22295] usb 10-1: Using ep0 maxpacket: 32 [ 2218.825281][T22295] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2218.828739][T22295] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2218.828763][T22295] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2218.828782][T22295] usb 10-1: Product: syz [ 2218.828795][T22295] usb 10-1: Manufacturer: syz [ 2218.828808][T22295] usb 10-1: SerialNumber: syz [ 2218.963988][T22295] usb 10-1: config 0 descriptor?? [ 2218.965066][T29106] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2219.142034][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 2219.142051][ T37] audit: type=1326 audit(1757102975.816:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.142598][ T37] audit: type=1326 audit(1757102975.936:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.142653][ T37] audit: type=1326 audit(1757102975.936:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.143681][ T37] audit: type=1326 audit(1757102975.936:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.143737][ T37] audit: type=1326 audit(1757102975.936:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.143785][ T37] audit: type=1326 audit(1757102975.936:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.143836][ T37] audit: type=1326 audit(1757102975.936:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.144482][ T37] audit: type=1326 audit(1757102975.936:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.144536][ T37] audit: type=1326 audit(1757102975.936:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.145043][ T37] audit: type=1326 audit(1757102975.936:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29117 comm="syz.1.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f95fe87ebe9 code=0x7ffc0000 [ 2219.244662][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6444'. [ 2219.719742][T22295] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 2219.719766][T22295] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 2219.719782][T22295] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 2219.806487][T22295] hid-generic 0000:0004:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2220.711842][T22295] usb 10-1: USB disconnect, device number 30 [ 2220.742260][T29134] input: syz1 as /devices/virtual/input/input36 [ 2221.704200][ C1] vkms_vblank_simulate: vblank timer overrun [ 2222.160846][ C1] vkms_vblank_simulate: vblank timer overrun [ 2222.162658][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.263570][ C1] vkms_vblank_simulate: vblank timer overrun [ 2223.445410][ C1] vkms_vblank_simulate: vblank timer overrun [ 2223.686477][ C1] vkms_vblank_simulate: vblank timer overrun [ 2224.197348][ C1] vkms_vblank_simulate: vblank timer overrun [ 2224.529038][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 2224.529055][ T37] audit: type=1326 audit(1757102981.276:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.529098][ T37] audit: type=1326 audit(1757102981.316:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.529138][ T37] audit: type=1326 audit(1757102981.316:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.529177][ T37] audit: type=1326 audit(1757102981.316:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.529555][ T37] audit: type=1326 audit(1757102981.316:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.680566][ T37] audit: type=1326 audit(1757102981.316:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.683210][ T37] audit: type=1326 audit(1757102981.476:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.684221][ T37] audit: type=1326 audit(1757102981.476:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.684270][ T37] audit: type=1326 audit(1757102981.476:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2224.684310][ T37] audit: type=1326 audit(1757102981.476:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6542baebe9 code=0x7ffc0000 [ 2225.071870][T22295] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2225.348024][ C1] vkms_vblank_simulate: vblank timer overrun [ 2225.372284][T22295] usb 6-1: Using ep0 maxpacket: 32 [ 2225.374835][T22295] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2225.376900][T22295] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2225.376914][T22295] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2225.376924][T22295] usb 6-1: Product: syz [ 2225.376931][T22295] usb 6-1: Manufacturer: syz [ 2225.376938][T22295] usb 6-1: SerialNumber: syz [ 2225.380076][T22295] usb 6-1: config 0 descriptor?? [ 2226.406650][T29181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2228.666480][T17088] usb 6-1: USB disconnect, device number 38 [ 2231.205870][T29232] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6476'. [ 2232.862066][T17088] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2233.011941][T17088] usb 9-1: Using ep0 maxpacket: 32 [ 2233.015237][T17088] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2233.018863][T17088] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2233.018878][T17088] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2233.018888][T17088] usb 9-1: Product: syz [ 2233.018896][T17088] usb 9-1: Manufacturer: syz [ 2233.018902][T17088] usb 9-1: SerialNumber: syz [ 2233.022962][T17088] usb 9-1: config 0 descriptor?? [ 2233.023936][T29261] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2233.768688][T29273] syzkaller0: entered promiscuous mode [ 2233.768706][T29273] syzkaller0: entered allmulticast mode [ 2233.795433][T29273] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2235.588659][T12978] usb 9-1: USB disconnect, device number 15 [ 2235.626252][T12993] ================================================================== [ 2235.626270][T12993] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x2c0 [ 2235.626296][T12993] Read of size 1 at addr ffff8880235c7250 by task kworker/1:1/12993 [ 2235.626312][T12993] [ 2235.626339][T12993] CPU: 1 UID: 0 PID: 12993 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2235.626361][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2235.626373][T12993] Workqueue: pm pm_runtime_work [ 2235.626396][T12993] Call Trace: [ 2235.626404][T12993] [ 2235.626412][T12993] dump_stack_lvl+0x189/0x250 [ 2235.626444][T12993] ? rcu_is_watching+0x15/0xb0 [ 2235.626467][T12993] ? __kasan_check_byte+0x12/0x40 [ 2235.626489][T12993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2235.626511][T12993] ? rcu_is_watching+0x15/0xb0 [ 2235.626534][T12993] ? lock_release+0x4b/0x3e0 [ 2235.626557][T12993] ? __virt_addr_valid+0x1c8/0x5c0 [ 2235.626574][T12993] ? __virt_addr_valid+0x4a5/0x5c0 [ 2235.626591][T12993] print_report+0xca/0x240 [ 2235.626612][T12993] ? rt_spin_lock+0x88/0x2c0 [ 2235.626628][T12993] kasan_report+0x118/0x150 [ 2235.626649][T12993] ? rt_spin_lock+0x88/0x2c0 [ 2235.626668][T12993] ? rpm_suspend+0x1223/0x1710 [ 2235.626689][T12993] __kasan_check_byte+0x2a/0x40 [ 2235.626709][T12993] lock_acquire+0x8d/0x360 [ 2235.626732][T12993] rt_spin_lock+0x88/0x2c0 [ 2235.626749][T12993] ? rpm_suspend+0x1223/0x1710 [ 2235.626770][T12993] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2235.626788][T12993] ? __pfx_rt_spin_lock+0x10/0x10 [ 2235.626809][T12993] rpm_suspend+0x1223/0x1710 [ 2235.626840][T12993] ? __pfx_rpm_suspend+0x10/0x10 [ 2235.626860][T12993] ? rt_spin_lock+0x223/0x2c0 [ 2235.626878][T12993] ? __pfx_rt_spin_lock+0x10/0x10 [ 2235.626895][T12993] ? process_scheduled_works+0x9ef/0x17b0 [ 2235.626918][T12993] pm_runtime_work+0x132/0x1b0 [ 2235.626935][T12993] ? process_scheduled_works+0x9ef/0x17b0 [ 2235.626955][T12993] process_scheduled_works+0xade/0x17b0 [ 2235.626993][T12993] ? __pfx_process_scheduled_works+0x10/0x10 [ 2235.627021][T12993] worker_thread+0x8a0/0xda0 [ 2235.627053][T12993] kthread+0x70e/0x8a0 [ 2235.627077][T12993] ? __pfx_worker_thread+0x10/0x10 [ 2235.627097][T12993] ? __pfx_kthread+0x10/0x10 [ 2235.627122][T12993] ? __pfx_kthread+0x10/0x10 [ 2235.627145][T12993] ret_from_fork+0x3f9/0x770 [ 2235.627167][T12993] ? __pfx_ret_from_fork+0x10/0x10 [ 2235.627190][T12993] ? __switch_to_asm+0x39/0x70 [ 2235.627206][T12993] ? __switch_to_asm+0x33/0x70 [ 2235.627222][T12993] ? __pfx_kthread+0x10/0x10 [ 2235.627245][T12993] ret_from_fork_asm+0x1a/0x30 [ 2235.627269][T12993] [ 2235.627276][T12993] [ 2235.627281][T12993] Allocated by task 17088: [ 2235.627295][T12993] kasan_save_track+0x3e/0x80 [ 2235.627313][T12993] __kasan_kmalloc+0x93/0xb0 [ 2235.627330][T12993] __kmalloc_cache_noprof+0x1a8/0x320 [ 2235.627350][T12993] usb_alloc_dev+0x5d/0xcc0 [ 2235.627369][T12993] hub_event+0x2214/0x4a20 [ 2235.627385][T[ 2235.627385][T12993] process_scheduled_works+0xade/0x17b0 [ 2235.627403][T12993] worker_thread+0x8a0/0xda0 [ 2235.627421][T12993] kthread+0x70e/0x8a0 [ 2235.627440][T12993] ret_from_fork+0x3f9/0x770 [ 2235.627457][T12993] ret_from_fork_asm+0x1a/0x30 [ 2235.627472][T12993] [ 2235.627477][T12993] Freed by task 12978: [ 2235.627485][T12993] kasan_save_track+0x3e/0x80 [ 2235.627501][T12993] kasan_save_free_info+0x46/0x50 [ 2235.627515][T12993] __kasan_slab_free+0x5b/0x80 [ 2235.627531][T12993] kfree+0x195/0x550 [ 2235.627549][T12993] device_release+0x99/0x1c0 [ 2235.627565][T12993] kobject_put+0x22b/0x480 [ 2235.627585][T12993] hub_event+0x1cf5/0x4a20 [ 2235.627600][T12993] process_scheduled_works+0xade/0x17b0 [ 2235.627618][T12993] worker_thread+0x8a0/0xda0 [ 2235.627635][T12993] kthread+0x70e/0x8a0 [ 2235.627655][T12993] ret_from_fork+0x3f9/0x770 [ 2235.627672][T12993] ret_from_fork_asm+0x1a/0x30 [ 2235.627687][T12993] [ 2235.627692][T12993] Last potentially related work creation: [ 2235.627699][T12993] kasan_save_stack+0x3e/0x60 [ 2235.627716][T12993] kasan_record_aux_stack+0xbd/0xd0 [ 2235.627729][T12993] insert_work+0x3d/0x330 [ 2235.627746][T12993] __queue_work+0xd63/0x1010 [ 2235.627764][T12993] queue_work_on+0x181/0x270 [ 2235.627782][T12993] rpm_suspend+0xe5a/0x1710 [ 2235.627800][T12993] pm_suspend_timer_fn+0xe8/0x120 [ 2235.627813][T12993] __hrtimer_run_queues+0x54f/0xd40 [ 2235.627834][T12993] hrtimer_run_softirq+0x1a3/0x2e0 [ 2235.627847][T12993] handle_softirqs+0x22f/0x710 [ 2235.627865][T12993] run_ktimerd+0xcf/0x190 [ 2235.627883][T12993] smpboot_thread_fn+0x53f/0xa60 [ 2235.627900][T12993] kthread+0x70e/0x8a0 [ 2235.627919][T12993] ret_from_fork+0x3f9/0x770 [ 2235.627937][T12993] ret_from_fork_asm+0x1a/0x30 [ 2235.627952][T12993] [ 2235.627956][T12993] The buggy address belongs to the object at ffff8880235c7000 [ 2235.627956][T12993] which belongs to the cache kmalloc-2k of size 2048 [ 2235.627972][T12993] The buggy address is located 592 bytes inside of [ 2235.627972][T12993] freed 2048-byte region [ffff8880235c7000, ffff8880235c7800) [ 2235.627997][T12993] [ 2235.628002][T12993] The buggy address belongs to the physical page: [ 2235.628016][T12993] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x235c0 [ 2235.628037][T12993] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2235.628052][T12993] anon flags: 0x80000000000040(head|node=0|zone=1) [ 2235.628072][T12993] page_type: f5(slab) [ 2235.628088][T12993] raw: 0080000000000040 ffff888019842000 0000000000000000 dead000000000001 [ 2235.628103][T12993] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 2235.628119][T12993] head: 0080000000000040 ffff888019842000 0000000000000000 dead000000000001 [ 2235.628134][T12993] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 2235.628149][T12993] head: 0080000000000003 ffffea00008d7001 00000000ffffffff 00000000ffffffff [ 2235.628163][T12993] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2235.628173][T12993] page dumped because: kasan: bad access detected [ 2235.628186][T12993] page_owner tracks the page as allocated [ 2235.628193][T12993] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27321, tgid 27321 (syz-executor), ts 2084499712633, free_ts 2083844771676 [ 2235.628224][T12993] post_alloc_hook+0x240/0x2a0 [ 2235.628245][T12993] get_page_from_freelist+0x2119/0x21b0 [ 2235.628260][T12993] __alloc_frozen_pages_noprof+0x181/0x370 [ 2235.628276][T12993] alloc_pages_mpol+0xd1/0x380 [ 2235.628296][T12993] allocate_slab+0x8a/0x370 [ 2235.628310][T12993] ___slab_alloc+0x8d1/0xdc0 [ 2235.628331][T12993] __kmalloc_node_track_caller_noprof+0x14c/0x450 [ 2235.628352][T12993] kmalloc_reserve+0x136/0x290 [ 2235.628372][T12993] pskb_expand_head+0x18e/0x1150 [ 2235.628386][T12993] netlink_trim+0x1d5/0x2e0 [ 2235.628402][T12993] netlink_broadcast_filtered+0xd6/0x12c0 [ 2235.628420][T12993] nlmsg_notify+0xf0/0x1a0 [ 2235.628437][T12993] __dev_notify_flags+0xf4/0x2e0 [ 2235.628455][T12993] netif_change_flags+0xe8/0x1a0 [ 2235.628475][T12993] do_setlink+0xc55/0x41c0 [ 2235.628493][T12993] rtnl_newlink+0x160b/0x1c70 [ 2235.628511][T12993] page last free pid 3181 tgid 3181 stack trace: [ 2235.628521][T12993] __free_frozen_pages+0xb59/0xce0 [ 2235.628542][T12993] free_large_kmalloc+0x13a/0x1f0 [ 2235.628561][T12993] wg_destruct+0x284/0x2f0 [ 2235.628577][T12993] netdev_run_todo+0xcd7/0xea0 [ 2235.628598][T12993] default_device_exit_batch+0x81e/0x890 [ 2235.628616][T12993] ops_undo_list+0x522/0x990 [ 2235.628634][T12993] cleanup_net+0x4cb/0x800 [ 2235.628652][T12993] process_scheduled_works+0xade/0x17b0 [ 2235.628669][T12993] worker_thread+0x8a0/0xda0 [ 2235.628687][T12993] kthread+0x70e/0x8a0 [ 2235.628707][T12993] ret_from_fork+0x3f9/0x770 [ 2235.628725][T12993] ret_from_fork_asm+0x1a/0x30 [ 2235.628739][T12993] [ 2235.628744][T12993] Memory state around the buggy address: [ 2235.628754][T12993] ffff8880235c7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2235.628766][T12993] ffff8880235c7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2235.628778][T12993] >ffff8880235c7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2235.628786][T12993] ^ [ 2235.628797][T12993] ffff8880235c7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2235.628809][T12993] ffff8880235c7300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2235.628818][T12993] ================================================================== [ 2235.931848][T12993] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2235.931869][T12993] CPU: 1 UID: 0 PID: 12993 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2235.931891][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2235.931903][T12993] Workqueue: pm pm_runtime_work [ 2235.931925][T12993] Call Trace: [ 2235.931933][T12993] [ 2235.931942][T12993] dump_stack_lvl+0x99/0x250 [ 2235.931967][T12993] ? __asan_memcpy+0x40/0x70 [ 2235.931986][T12993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2235.932008][T12993] ? __pfx__printk+0x10/0x10 [ 2235.932032][T12993] vpanic+0x281/0x750 [ 2235.932054][T12993] ? preempt_schedule+0xae/0xc0 [ 2235.932076][T12993] ? __pfx_vpanic+0x10/0x10 [ 2235.932096][T12993] ? preempt_schedule_common+0x83/0xd0 [ 2235.932116][T12993] ? preempt_schedule+0xae/0xc0 [ 2235.932136][T12993] ? __pfx_preempt_schedule+0x10/0x10 [ 2235.932159][T12993] panic+0xb9/0xc0 [ 2235.932180][T12993] ? __pfx_panic+0x10/0x10 [ 2235.932203][T12993] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2235.932230][T12993] ? rt_spin_lock+0x88/0x2c0 [ 2235.932247][T12993] check_panic_on_warn+0x89/0xb0 [ 2235.932265][T12993] ? rt_spin_lock+0x88/0x2c0 [ 2235.932281][T12993] end_report+0x78/0x160 [ 2235.932302][T12993] kasan_report+0x129/0x150 [ 2235.932323][T12993] ? rt_spin_lock+0x88/0x2c0 [ 2235.932344][T12993] ? rpm_suspend+0x1223/0x1710 [ 2235.932364][T12993] __kasan_check_byte+0x2a/0x40 [ 2235.932384][T12993] lock_acquire+0x8d/0x360 [ 2235.932411][T12993] rt_spin_lock+0x88/0x2c0 [ 2235.932428][T12993] ? rpm_suspend+0x1223/0x1710 [ 2235.932449][T12993] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2235.932468][T12993] ? __pfx_rt_spin_lock+0x10/0x10 [ 2235.932491][T12993] rpm_suspend+0x1223/0x1710 [ 2235.932523][T12993] ? __pfx_rpm_suspend+0x10/0x10 [ 2235.932544][T12993] ? rt_spin_lock+0x223/0x2c0 [ 2235.932562][T12993] ? __pfx_rt_spin_lock+0x10/0x10 [ 2235.932579][T12993] ? process_scheduled_works+0x9ef/0x17b0 [ 2235.932603][T12993] pm_runtime_work+0x132/0x1b0 [ 2235.932619][T12993] ? process_scheduled_works+0x9ef/0x17b0 [ 2235.932640][T12993] process_scheduled_works+0xade/0x17b0 [ 2235.932673][T12993] ? __pfx_process_scheduled_works+0x10/0x10 [ 2235.932708][T12993] worker_thread+0x8a0/0xda0 [ 2235.932740][T12993] kthread+0x70e/0x8a0 [ 2235.932765][T12993] ? __pfx_worker_thread+0x10/0x10 [ 2235.932785][T12993] ? __pfx_kthread+0x10/0x10 [ 2235.932811][T12993] ? __pfx_kthread+0x10/0x10 [ 2235.932834][T12993] ret_from_fork+0x3f9/0x770 [ 2235.932856][T12993] ? __pfx_ret_from_fork+0x10/0x10 [ 2235.932880][T12993] ? __switch_to_asm+0x39/0x70 [ 2235.932896][T12993] ? __switch_to_asm+0x33/0x70 [ 2235.932912][T12993] ? __pfx_kthread+0x10/0x10 [ 2235.932935][T12993] ret_from_fork_asm+0x1a/0x30 [ 2235.932959][T12993] [ 2235.933183][T12993] Kernel Offset: disabled