last executing test programs: 6m11.756876055s ago: executing program 32 (id=1142): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r4, 0x400454d1, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000380)=0xc) timerfd_settime(r0, 0x0, 0x0, &(0x7f00000015c0)) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x2, &(0x7f0000000180)}) 4m30.806439971s ago: executing program 33 (id=1427): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 64) fsync(0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x4}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xeacb, 0xa6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@empty, 0x2, 0x4, 0x3, 0x0, 0x100}]}]}, 0xfc}}, 0x0) (async) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x48d40, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, r5, 0x0, r6}) (async) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "6b92a13774ec4d0e9c7a8e7d7d3de18707fbab6e3dffd37a67ee45cc2f77f830", "8a1fd67822b5127335d55599e25082f8", {"9c0819b1de901baa65999d34cec64ee8", "d2233a28ba87c0dd91c3baa08773528e"}}}}}}}}, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x33) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) (async) r9 = memfd_secret(0x80000) fcntl$setlease(r9, 0x400, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000002c0)={0xfffffffa, 0x8, 0x2, 0x0, 0x9}) (async) close(r9) 3m13.461204689s ago: executing program 1 (id=1554): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 3m11.995929452s ago: executing program 1 (id=1556): r0 = syz_open_procfs(0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x44080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000090601020000000800000000000000000900020073797a31000000000500010007000000100007800c00018008000140ffffffff78340ca980761ffad1935b2959ad98cc87a0cb706b1373"], 0x38}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socket(0x10, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) openat$sr(0xffffff9c, 0x0, 0x80000, 0x0) 3m8.777112051s ago: executing program 1 (id=1560): mkdir(&(0x7f0000000400)='./file1\x00', 0x13) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d616e79a800"]) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 3m2.948684858s ago: executing program 1 (id=1562): mkdir(&(0x7f0000000400)='./file1\x00', 0x13) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d616e79a800"]) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x62, @rand_addr=0x64010100, 0x4e23, 0x4, 'rr\x00', 0x4, 0xb, 0xb}, 0x2c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) bind$llc(r0, 0x0, 0x0) 2m59.292239757s ago: executing program 34 (id=1550): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r4, 0x400454d1, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000380)) timerfd_settime(r0, 0x0, &(0x7f0000001580)={{0x77359400}}, &(0x7f00000015c0)) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x2, &(0x7f0000000180)}) 2m57.546212069s ago: executing program 1 (id=1568): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x488, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf61}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@allow_other}], [{@uid_gt}, {@subj_user={'subj_user', 0x3d, '@{%'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) 2m57.428181628s ago: executing program 1 (id=1569): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000380)=0xc) timerfd_settime(r0, 0x0, &(0x7f0000001580)={{0x77359400}}, &(0x7f00000015c0)) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x2, &(0x7f0000000180)}) 2m47.163057659s ago: executing program 35 (id=1563): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000380)=0xc) timerfd_settime(r0, 0x0, &(0x7f0000001580)={{0x77359400}}, &(0x7f00000015c0)) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x2, &(0x7f0000000180)}) 2m41.662822567s ago: executing program 36 (id=1569): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000380)=0xc) timerfd_settime(r0, 0x0, &(0x7f0000001580)={{0x77359400}}, &(0x7f00000015c0)) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x2, &(0x7f0000000180)}) 2m21.622078242s ago: executing program 2 (id=1603): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000008440a82fb90000000100000027d10000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 2m21.07155764s ago: executing program 2 (id=1604): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x32}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 2m20.673450746s ago: executing program 6 (id=1605): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0x0, &(0x7f0000000400), 0x4200, 0x0) r1 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000003c0)={0x801, 0xeeee0000, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2010040, 0x0) r3 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6355540ac0571021bdc00000001090212000100000000090400000003bb0200"], 0x0) socket$l2tp(0x2, 0x2, 0x73) mount(&(0x7f0000000200)=@sg0, 0x0, &(0x7f0000000280)='aufs\x00', 0x14, &(0x7f00000002c0)='hfs\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000340)={0xdddd1000, 0x19000, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='cq_poll\x00', r4, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_exit\x00', r7, 0x0, 0x5}, 0x18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2m19.143775307s ago: executing program 6 (id=1606): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x95d, 0xfa39, 0x6b, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000540)=0x2) lseek(r4, 0xa, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e20, 0xe00, 0x2, 0x80, 0xa0, 0x87}, {0xffff, 0xffffffff, 0x3, 0x6f0, 0x3, 0xa, 0x3, 0xf}, {0x5, 0x2c5, 0x8, 0x12}, 0x5, 0x0, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x4, 0x2, 0xd, 0x1, 0x0, 0x3}}, 0xe4) syz_open_dev$dri(&(0x7f0000000280), 0xff, 0x400000) unshare(0x24060400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, 0xfffffffffffffffe, 0x0, 0x7, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 2m19.138232823s ago: executing program 2 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x400, 0x3, 0xfc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x23, 0x2, 0x1) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 2m17.660455623s ago: executing program 6 (id=1609): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0xe) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r9, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 2m15.115704897s ago: executing program 2 (id=1610): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 2m14.304534877s ago: executing program 6 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x400, 0x3, 0xfc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 2m13.311001047s ago: executing program 6 (id=1612): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000008440a82fb90000000100000027d10000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 2m13.310527012s ago: executing program 7 (id=1576): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000008440a82fb90000000100000027d10000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000849000/0x2000)=nil) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffd20, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000c, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m12.721540522s ago: executing program 6 (id=1613): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 2m12.708228089s ago: executing program 2 (id=1620): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m12.344283408s ago: executing program 7 (id=1614): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x32}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 2m11.125062287s ago: executing program 7 (id=1615): mkdir(&(0x7f0000000400)='./file1\x00', 0x13) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d616e79a800"]) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) bind$llc(r0, 0x0, 0x0) 2m9.085411176s ago: executing program 2 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x400, 0x3, 0xfc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x23, 0x2, 0x1) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 1m57.040548079s ago: executing program 37 (id=1613): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 1m56.044297834s ago: executing program 38 (id=1615): mkdir(&(0x7f0000000400)='./file1\x00', 0x13) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d616e79a800"]) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) bind$llc(r0, 0x0, 0x0) 1m53.981551737s ago: executing program 39 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x400, 0x3, 0xfc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x23, 0x2, 0x1) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 1m34.497870182s ago: executing program 8 (id=1628): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x1c}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000008440a82fb90000000100000027d10000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000849000/0x2000)=nil) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffd20, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r7, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000c, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m34.467489445s ago: executing program 9 (id=1617): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0xe) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r9, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 1m34.067011958s ago: executing program 8 (id=1629): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f00002f0000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000259000/0x4000)=nil) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x8000, 0x103) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x7c}}, 0x841) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811"], 0x52) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000510) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x9, 0x101400) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000800450000340000000000069078ac1414bbac1414aa00004e2288dbca1597f0756bffe2141bf1584ffd8a17121116604ce70a37ff00341611490b3bd622c40949fd521caae8bd43a0074904fbaed87d0582c2a5d60bed01cd3f77c098c0dc00000000c58bc06dcc7a2eedab572dd68747af0b9e1acc8b416db4941865e60466a4c30b06d47c254891def185d3e01e3d32b59f0bf27d7cac9b60bb75dc3b5151b0fbadc1a005f7e8890adf555b8f7283149a24a628a364eee5f1371b097b0b785110405a0382741069507fd3c5792f117f4d35c90d3c41eb77609632e367cc2b074af68666d7c11f", @ANYRES8=r0, @ANYRESHEX=r5, @ANYBLOB="8cc2fffe90780000080affffff44f6524c76b137"], 0x0) 1m32.885639795s ago: executing program 8 (id=1630): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 1m32.700248218s ago: executing program 9 (id=1631): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 1m31.021169136s ago: executing program 8 (id=1632): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x5ede6002) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) write$eventfd(r3, &(0x7f0000000040)=0x6, 0x8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x7ffffeff, 0x3}, 0x1c) 1m30.638383201s ago: executing program 8 (id=1633): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.580371087s ago: executing program 9 (id=1634): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x23, {0x2, 0x10, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0x1, 0x4004a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) write$dsp(0xffffffffffffffff, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 1m29.409153993s ago: executing program 9 (id=1635): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x1c}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000008440a82fb90000000100000027d10000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000849000/0x2000)=nil) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffd20, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r7, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000c, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m28.892937011s ago: executing program 9 (id=1636): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m28.449267912s ago: executing program 9 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x400, 0x3, 0xfc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = socket(0x23, 0x2, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 1m27.323638056s ago: executing program 8 (id=1638): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 1m13.08164405s ago: executing program 40 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x400, 0x3, 0xfc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = socket(0x23, 0x2, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 1m12.045042882s ago: executing program 41 (id=1638): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) listen(r6, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 10.586181136s ago: executing program 5 (id=1699): socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"000000000000000000006f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x32, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)}, {&(0x7f0000000440)="f52407bbb8cfc1aa16b00df26872222a5d1e254ddc176ba9322bfefa4fa9e05c8e09bbeec0a612fb2405b112d7e72ff4189888d419f34ac967844a56a1eb89429bc68f056c7d26ed43fb1841c35c925b9cda1640d883ae5ec8067d5a7658453a1952768e7a408f5928192a3fde1ed9028d744248eebe4498c57938", 0x7b}, {&(0x7f00000004c0)="12edc95e23e822af38b7946c776c7f7fb1d0ba7fdd4ef93fb868cb4f60df5eb3e35eb04d889c33a86c50067d3e023257b14cdd56aaeb530566b8fb00195050f661ae9c31ca1f785209ab1b76620a2ac64ecb466b4820bc391a5c5091a07ab2d653787dffd23643f9bc7ce5635cacc47f30491cbe73533a91c9cd4afd34590d0f7e5fe41e647391122ee361bcae544fef219ccad51500bf839cdac3fc1bc06b433076b7b3cd7e0e3f3930b55b3d259ddd2ddcf52852ab84d754c767b239810aebe7a6513af6e625dd70fd6a8560cc91b7809efbdfe460b04eb1119755efd0c4ac4f735b4c8e1369", 0xe7}, {&(0x7f0000002680)="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", 0x1000}], 0x4, &(0x7f00000003c0)=[@cred={{0x18, 0x1, 0x2, {r1}}}], 0x18, 0x80}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009740)=[{&(0x7f00000081c0)="6064e667541a39422ab7921c195f57cb73454e94d80a03eea1f6485023c49e22033628b20e30072c2e5c92847c00699ba979b705026ec6c53e0f648c5df67d613e25705c58521d11a5312a214b97af0be075563e4a628715581197ee54d7c9e0dc2a1b9a46e1448520cc362625c1cffb7ab270eb2e28e4875a60b1fe3ad775e34b52d90725c5c7db750d7851a8b40532ba6db0e2ddec2366d2a9c6f8f70f842cb4e6c9389ad95080e6b832cb89df05a767afbbe848da408428ccd7aef2cc3c8429ba21ecd49a5cbc1c84cb2511810a857c7d051e47870de503f94c716fa99bbe6e1756b2f0a4ddc6bde6489ef8", 0xf2}, {&(0x7f00000082c0)="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", 0x1000}, {&(0x7f0000003680)="96d1c3cc3c880d08561ae72fc8dc08da22e5207344a9a6890c35d6e751031ae1761da0b9b9d13d71964f154d197b17ef0af8b320da75be38d688a1970b0af235bea4215cc8645bc8f3b166edf33a8deff326d252fafa4e4980dd1141b64efdae36c2ea8cc1ec02994af6cb6aa3303188d20173430dbdb830d14eb9255e66d5dcafeeca6fc218224cbb6dec8d49128ec2cdd2fe47a574683b2875086c0380e118401bcfc829b27ab2f55f018cd304938e8422746ca3587e8226d649d27d49ef89fa00752344f858ebb2502e56114e04ab84c2e1360af41ee129", 0xd9}, {&(0x7f00000093c0)="a14f65ba768be3e9db2d815589011947837d8f96750698520216e81486ffef20bd4e2c9b3d995bd34a9c98d8c378f483bd01a5157cf442a3fcf9e233ff226bd0cca1b560f21ef27d701898cf94aa43c122cdfb105c33f285aae9fdb38d0214e9e605c0b75983932c95b23231a9ba70c15b60f4991fd298f126850fcc362a0906b5e8f514", 0x84}, {&(0x7f0000009480)="20c4858d5d69a5c617d38d9f4db55bed8147e9389f19b16bae9510173012a79551abda0508d9e28f9c691deeb0aa72e334f7b171f4e69e62ae2739729b173b26fe681ac01533e179dd015ad2b9b213e8d7cb8a27fbbbb6a38faa616235be0e5e25655aeb9db21a05dc1025c1569e10ea09ed3c4c64f2bb3e6a36e78136956862cdc6298ca23d49ceaac301bb529dfe4126fc8325097a1dc0a4c6ee1bce2e20417f74a21ae31f06641959caafa9c9d053a1abf4f920e43268d845c9b3d1188a42e85e1b9034496ba94ec772904fe7aa947f93ed7439e1aacc4be7ba3d418969899762365ccd8812148afb9e5d5912d7d0e5d798d4196266074e", 0xf9}, {&(0x7f0000009580)="161062a3ea691ac4ab6e33305b43759f1938742d15e45a56502aa62dd32029a7867c7d37f55b69ce58135e5a1137a145ee1763aaaf3221f8a6c293b4cc0d006d03fec4eefb2302a92415c11420e6fdc214322246183326bfe172fb45d4a6f50b39a6a54d75c6bfb0fa4eb6b0f2d92b3f7376755c5bd49c1dd52a730708765a1b8dc041411c92bf3ec096f61a40fcb224ddeb79b5ba6b1e6c9a5ff6799ff87d261ab872dbf014c6f2e8229d697b12b27c65e0bde20e5273eabf5787428d8f619a77d37c4b05960bf686f3e9c6f65d683e1f7562cc8e794c3d88dbebef4a9d2d2c07dacb936fad1542fd3afaf150c97750b247", 0xf2}, {&(0x7f0000003800)="ad4a4be3cc7733d2d927399bf26eaa1b827071989257e9c54f53e86f0a53069fe34c4ec4cdda04fcfdf9d691372af29e2e7d29eafa6d684fa11c3a04ba6e03e2de581c5c5b27474017f8599f71ab8f40626552a1603255102d02998cd597b5148033cedf4f1ec7c908dc114d452c430a9dc1832986391318614542c1949326955fff5fc9abb9644602f05b51", 0x8c}], 0x7, &(0x7f0000003940)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="180000000120000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0], 0x58, 0x800}}, {{&(0x7f0000009800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000009e40), 0x9, &(0x7f0000009ec0)=[@cred={{0x18}}], 0x18, 0xc000}}], 0x3, 0x26040880) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000380)='net/rt_acct\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = socket$inet6(0xa, 0x2, 0x3a) sendfile(r3, r0, 0x0, 0x6) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2f4, @local}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 9.113051559s ago: executing program 5 (id=1703): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 9.042571189s ago: executing program 5 (id=1705): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0xe) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r9, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 8.994774766s ago: executing program 0 (id=1706): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x23, {0x2, 0x10, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0x1, 0x4004a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) write$dsp(0xffffffffffffffff, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 7.778022352s ago: executing program 0 (id=1708): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0x0, &(0x7f0000000400), 0x4200, 0x0) r1 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000003c0)={0x801, 0xeeee0000, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2010040, 0x0) r3 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6355540ac0571021bdc00000001090212000100000000090400000003bb0200"], 0x0) mount(&(0x7f0000000200)=@sg0, 0x0, &(0x7f0000000280)='aufs\x00', 0x14, &(0x7f00000002c0)='hfs\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000340)={0xdddd1000, 0x19000, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_exit\x00', r6, 0x0, 0x5}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 6.469690422s ago: executing program 5 (id=1711): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x23, {0x2, 0x10, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0x1, 0x4004a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) write$dsp(0xffffffffffffffff, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r7, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 5.89092793s ago: executing program 0 (id=1712): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x95d, 0xfa39, 0x6b, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000540)=0x2) lseek(r4, 0xa, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e20, 0xe00, 0x2, 0x80, 0xa0, 0x87}, {0xffff, 0xffffffff, 0x3, 0x6f0, 0x3, 0xa, 0x3, 0xf}, {0x5, 0x2c5, 0x8, 0x12}, 0x5, 0x0, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x4, 0x2, 0xd, 0x1, 0x0, 0x3}}, 0xe4) syz_open_dev$dri(&(0x7f0000000280), 0xff, 0x400000) unshare(0x24060400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, 0xfffffffffffffffe, 0x0, 0x7, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 5.620386405s ago: executing program 4 (id=1714): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 5.264754278s ago: executing program 5 (id=1715): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000192000/0x3000)=nil, 0x6) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r6, 0x0, 0x0, 0x800) 5.263946244s ago: executing program 4 (id=1716): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x23, {0x2, 0x10, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0x1, 0x4004a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) write$dsp(0xffffffffffffffff, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 4.609077812s ago: executing program 0 (id=1718): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x23, {0x2, 0x10, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0x1, 0x4004a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 4.257481644s ago: executing program 4 (id=1720): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0xe) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r9, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 3.836269332s ago: executing program 3 (id=1721): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0x0, &(0x7f0000000400), 0x4200, 0x0) r1 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000003c0)={0x801, 0xeeee0000, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2010040, 0x0) r3 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6355540ac0571021bdc00000001090212000100000000090400000003bb0200"], 0x0) mount(&(0x7f0000000200)=@sg0, 0x0, &(0x7f0000000280)='aufs\x00', 0x14, &(0x7f00000002c0)='hfs\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000340)={0xdddd1000, 0x19000, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_exit\x00', r6, 0x0, 0x5}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 3.302373055s ago: executing program 0 (id=1722): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f00002f0000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000259000/0x4000)=nil) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x8000, 0x103) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x7c}}, 0x841) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811"], 0x52) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000510) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x9, 0x101400) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.93566907s ago: executing program 0 (id=1723): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0x0, &(0x7f0000000400), 0x4200, 0x0) r1 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000003c0)={0x801, 0xeeee0000, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2010040, 0x0) r3 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6355540ac0571021bdc00000001090212000100000000090400000003bb0200"], 0x0) socket$l2tp(0x2, 0x2, 0x73) mount(&(0x7f0000000200)=@sg0, 0x0, &(0x7f0000000280)='aufs\x00', 0x14, &(0x7f00000002c0)='hfs\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000340)={0xdddd1000, 0x19000, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_exit\x00', r7, 0x0, 0x5}, 0x18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.653986585s ago: executing program 5 (id=1724): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.530672648s ago: executing program 3 (id=1725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.136768643s ago: executing program 3 (id=1726): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x5ede6002) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000040)=0x6, 0x8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 1.052803373s ago: executing program 4 (id=1727): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 938.597754ms ago: executing program 4 (id=1728): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x23, {0x2, 0x10, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0x1, 0x4004a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) write$dsp(0xffffffffffffffff, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0x9620}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) 871.185153ms ago: executing program 3 (id=1729): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x8000000010, 0x4, 0x9) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xffffffffffffffff) write(r0, &(0x7f00000005c0)="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", 0x13f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) 742.707909ms ago: executing program 3 (id=1730): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 169.822729ms ago: executing program 3 (id=1731): write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000000)='3\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000300)="fdc2d4fd", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 0s ago: executing program 4 (id=1732): mkdir(&(0x7f0000000400)='./file1\x00', 0x13) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d616e79a800"]) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x62, @rand_addr=0x64010100, 0x4e23, 0x4, 'rr\x00', 0x4, 0xb, 0xb}, 0x2c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) bind$llc(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): timer overrun [ 595.239466][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.495825][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.610936][ T55] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 596.805317][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.836924][ T55] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 596.878400][ T55] usb 6-1: config 1 has no interface number 0 [ 596.886166][ T55] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 597.236011][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 597.236029][ T40] audit: type=1326 audit(1763691393.718:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.271995][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.318193][ T40] audit: type=1326 audit(1763691393.758:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.361875][ T40] audit: type=1326 audit(1763691393.758:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.387866][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.391911][ T40] audit: type=1326 audit(1763691393.758:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.412442][ T40] audit: type=1326 audit(1763691393.758:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.426439][ T40] audit: type=1326 audit(1763691393.758:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.436900][ T40] audit: type=1326 audit(1763691393.758:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.448031][ T40] audit: type=1326 audit(1763691393.758:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.476722][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.496400][ T40] audit: type=1326 audit(1763691393.758:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.507339][ T40] audit: type=1326 audit(1763691393.758:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.1510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 597.539410][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.647695][ T53] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 597.753731][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.833307][ T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 597.836817][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.849638][ T55] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 597.854908][ T53] usb 7-1: config 0 descriptor?? [ 597.888803][ T53] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 597.889829][ T55] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.936298][ T55] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 597.940666][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.945058][ T55] usb 6-1: Product: syz [ 597.977840][ T55] usb 6-1: Manufacturer: syz [ 597.979641][ T55] usb 6-1: SerialNumber: syz [ 598.012881][T12506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.153315][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.183694][T12519] hfs: unable to load iocharset "io#harset" [ 598.256287][T12506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.441082][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.473591][ T6119] usb 7-1: USB disconnect, device number 50 [ 598.497595][T12506] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 598.497595][T12506] program syz.1.1507 not setting count and/or reply_len properly [ 598.522316][T12506] sg_write: data in/out 1612990994/128 bytes for SCSI command 0x87-- guessing data in; [ 598.522316][T12506] program syz.1.1507 not setting count and/or reply_len properly [ 598.612114][ T55] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 598.617311][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.782801][T12506] netlink: 'syz.1.1507': attribute type 3 has an invalid length. [ 598.958409][ T55] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 598.966616][ T55] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 598.977264][ T55] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 598.980739][ T55] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 599.129079][ T55] usb 6-1: USB disconnect, device number 60 [ 599.134202][ T55] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 599.172242][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.281281][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.632075][ T55] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 599.925436][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.061204][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.715834][ T53] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 600.857605][ T53] usb 7-1: device descriptor read/64, error -71 [ 601.005754][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.006282][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.023378][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.087580][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.125932][ T53] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 601.295540][ T53] usb 7-1: device descriptor read/64, error -71 [ 601.426350][ T53] usb usb7-port1: attempt power cycle [ 601.709170][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.843441][ T53] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 601.909986][ T53] usb 7-1: device descriptor read/8, error -71 [ 602.085221][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.178399][ T53] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 602.184646][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.245908][ T53] usb 7-1: device descriptor read/8, error -71 [ 602.382492][ T53] usb usb7-port1: unable to enumerate USB device [ 603.088733][ T53] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 603.258557][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 603.276315][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.295683][ T53] usb 6-1: config 0 descriptor?? [ 603.306697][ T53] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 603.595309][T12572] hfs: unable to load iocharset "io#harset" [ 603.740146][ T5982] usb 6-1: USB disconnect, device number 61 [ 603.766130][T11701] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 603.947609][T11701] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.952571][T11701] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.957681][T11701] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 603.968556][T11701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.994639][T11701] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.005319][T11701] usb 7-1: invalid MIDI out EP 0 [ 604.391621][T11701] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 604.414826][T11701] usb 7-1: USB disconnect, device number 55 [ 604.960307][T12592] tipc: Started in network mode [ 604.962849][T12592] tipc: Node identity 4, cluster identity 4711 [ 604.965600][T12592] tipc: Node number set to 4 [ 605.212351][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 605.212371][ T40] audit: type=1326 audit(1763691401.698:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.276210][ T40] audit: type=1326 audit(1763691401.698:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.301245][ T40] audit: type=1326 audit(1763691401.708:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.340851][ T40] audit: type=1326 audit(1763691401.708:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.356640][ T40] audit: type=1326 audit(1763691401.708:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.400748][ T40] audit: type=1326 audit(1763691401.708:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.452344][ T40] audit: type=1326 audit(1763691401.708:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.491662][ T40] audit: type=1326 audit(1763691401.708:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.563023][ T40] audit: type=1326 audit(1763691401.708:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 605.586162][ T40] audit: type=1326 audit(1763691401.708:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 606.513167][ C2] vkms_vblank_simulate: vblank timer overrun [ 606.797158][ C2] vkms_vblank_simulate: vblank timer overrun [ 608.210379][ C2] vkms_vblank_simulate: vblank timer overrun [ 608.413117][ C2] vkms_vblank_simulate: vblank timer overrun [ 608.561168][ C2] vkms_vblank_simulate: vblank timer overrun [ 609.329184][ C2] vkms_vblank_simulate: vblank timer overrun [ 609.488826][ C2] vkms_vblank_simulate: vblank timer overrun [ 609.929175][ C2] vkms_vblank_simulate: vblank timer overrun [ 610.245849][ C2] vkms_vblank_simulate: vblank timer overrun [ 610.629237][ C2] vkms_vblank_simulate: vblank timer overrun [ 610.949406][ C2] vkms_vblank_simulate: vblank timer overrun [ 611.113146][ C2] vkms_vblank_simulate: vblank timer overrun [ 611.905276][ C2] vkms_vblank_simulate: vblank timer overrun [ 612.037303][ C2] vkms_vblank_simulate: vblank timer overrun [ 612.165219][ C2] vkms_vblank_simulate: vblank timer overrun [ 613.411119][ C2] vkms_vblank_simulate: vblank timer overrun [ 613.535845][T11701] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 613.810033][ C2] vkms_vblank_simulate: vblank timer overrun [ 613.856736][T11701] usb 10-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 614.061472][ C2] vkms_vblank_simulate: vblank timer overrun [ 614.529265][ C2] vkms_vblank_simulate: vblank timer overrun [ 614.797208][ C2] vkms_vblank_simulate: vblank timer overrun [ 615.196436][ C2] vkms_vblank_simulate: vblank timer overrun [ 616.639508][T11701] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.658587][T11701] usb 10-1: config 0 descriptor?? [ 616.674067][T11701] usb 10-1: can't set config #0, error -71 [ 616.678163][T11701] usb 10-1: USB disconnect, device number 2 [ 621.508041][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 621.508059][ T40] audit: type=1326 audit(1763691417.998:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.578556][ T40] audit: type=1326 audit(1763691417.998:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.649244][ T40] audit: type=1326 audit(1763691418.058:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.697415][ T40] audit: type=1326 audit(1763691418.058:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.711043][ T40] audit: type=1326 audit(1763691418.058:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.751099][ T40] audit: type=1326 audit(1763691418.058:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.785266][ T40] audit: type=1326 audit(1763691418.058:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.862135][ T40] audit: type=1326 audit(1763691418.058:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.895086][ T40] audit: type=1326 audit(1763691418.058:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 621.937662][ T40] audit: type=1326 audit(1763691418.058:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.1.1554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 622.646084][ T5982] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 622.798156][ T5982] usb 9-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 622.802073][ T5982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.820921][ T5982] usb 9-1: config 0 descriptor?? [ 622.843480][ T5982] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 623.185542][T12702] hfs: unable to load iocharset "io#harset" [ 623.338634][ T5982] usb 9-1: USB disconnect, device number 9 [ 626.058187][T12725] 9p: Unknown access argument any¨: -22 [ 626.139116][T12727] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1558'. [ 626.153698][T12727] batadv1: entered allmulticast mode [ 627.189740][ T6119] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 628.995551][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.851656][T12757] 9pnet_virtio: no channels available for device syz [ 632.197077][ T6119] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 633.554916][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 633.554934][ T40] audit: type=1326 audit(1763691430.038:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.670153][ T40] audit: type=1326 audit(1763691430.038:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.737280][ T40] audit: type=1326 audit(1763691430.198:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.772817][ T40] audit: type=1326 audit(1763691430.198:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.875261][ T40] audit: type=1326 audit(1763691430.198:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.920126][ T40] audit: type=1326 audit(1763691430.198:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.965818][ T40] audit: type=1326 audit(1763691430.198:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 633.976555][ T40] audit: type=1326 audit(1763691430.198:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 634.031891][ T40] audit: type=1326 audit(1763691430.198:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 634.081284][ T40] audit: type=1326 audit(1763691430.198:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 634.931666][ C3] vkms_vblank_simulate: vblank timer overrun [ 635.174677][ C3] vkms_vblank_simulate: vblank timer overrun [ 635.454302][ C3] vkms_vblank_simulate: vblank timer overrun [ 635.508929][ C3] vkms_vblank_simulate: vblank timer overrun [ 635.576938][ C3] vkms_vblank_simulate: vblank timer overrun [ 635.755421][ T5306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.809318][ T5306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.824012][ T5306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.846966][ T5306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.858190][ T5306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.916890][ C3] vkms_vblank_simulate: vblank timer overrun [ 636.251187][T12794] ufs: You didn't specify the type of your ufs filesystem [ 636.251187][T12794] [ 636.251187][T12794] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 636.251187][T12794] [ 636.251187][T12794] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 636.278705][T12794] ufs: ufstype=old is supported read-only [ 636.344908][ C3] vkms_vblank_simulate: vblank timer overrun [ 636.826174][T12796] chnl_net:caif_netlink_parms(): no params data found [ 636.860428][ C3] vkms_vblank_simulate: vblank timer overrun [ 637.012949][ T34] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 637.102379][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.107993][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.126945][T12796] bridge_slave_0: entered allmulticast mode [ 637.131723][T12796] bridge_slave_0: entered promiscuous mode [ 637.140819][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.162179][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.164583][ T34] usb 7-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 637.165532][T12796] bridge_slave_1: entered allmulticast mode [ 637.170038][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.192877][ C3] vkms_vblank_simulate: vblank timer overrun [ 637.229550][T12796] bridge_slave_1: entered promiscuous mode [ 637.231594][ T34] usb 7-1: config 0 descriptor?? [ 637.262475][ T34] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 637.498509][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.518547][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.573186][T12803] hfs: unable to load iocharset "io#harset" [ 637.626514][ T6119] usb 7-1: USB disconnect, device number 56 [ 637.813954][T12796] team0: Port device team_slave_0 added [ 637.820728][T12796] team0: Port device team_slave_1 added [ 637.937522][ T5952] Bluetooth: hci3: command tx timeout [ 638.043282][ C3] vkms_vblank_simulate: vblank timer overrun [ 638.062113][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.067770][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.106656][ C3] vkms_vblank_simulate: vblank timer overrun [ 638.124425][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.148095][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.153726][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.188189][ C3] vkms_vblank_simulate: vblank timer overrun [ 638.201465][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.322006][T12818] 9p: Unknown access argument any¨: -22 [ 638.373042][T12796] hsr_slave_0: entered promiscuous mode [ 638.377618][T12796] hsr_slave_1: entered promiscuous mode [ 638.381523][T12796] debugfs: 'hsr0' already exists in 'hsr' [ 638.384656][T12796] Cannot create hsr debugfs directory [ 638.890129][ T6119] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 639.046693][T12796] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 639.071548][T12796] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 639.094009][T12796] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.104658][T12796] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.302148][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.358585][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.400174][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.403267][T12082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.426247][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.432443][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.507939][T12796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.917902][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.043754][ T5952] Bluetooth: hci3: command tx timeout [ 640.427660][T12796] veth0_vlan: entered promiscuous mode [ 640.452844][T12796] veth1_vlan: entered promiscuous mode [ 640.485324][T12796] veth0_macvtap: entered promiscuous mode [ 640.514021][T12796] veth1_macvtap: entered promiscuous mode [ 640.547926][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.590443][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.641393][T12082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.645496][T12082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.664665][T12082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.668782][T12082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.100070][ T5952] Bluetooth: hci3: command tx timeout [ 642.688475][ T6540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.691887][ T6540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.782874][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 642.782894][ T40] audit: type=1326 audit(1763691439.268:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 642.870834][ T6547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.884678][ T40] audit: type=1326 audit(1763691439.298:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 642.892452][ T6547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.928543][ T40] audit: type=1326 audit(1763691439.298:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 642.957261][ T40] audit: type=1326 audit(1763691439.298:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 642.997713][ T40] audit: type=1326 audit(1763691439.298:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 643.012233][ T40] audit: type=1326 audit(1763691439.298:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 643.024556][ T40] audit: type=1326 audit(1763691439.298:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 643.054117][ T40] audit: type=1326 audit(1763691439.298:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 643.093869][ T40] audit: type=1326 audit(1763691439.298:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 643.131741][ T40] audit: type=1326 audit(1763691439.298:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.2.1571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 643.745987][ T6119] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 644.060274][ T6119] usb 11-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 644.064098][ T6119] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.117702][ T6119] usb 11-1: config 0 descriptor?? [ 644.157130][ T6119] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 644.175844][ T5952] Bluetooth: hci3: command tx timeout [ 644.538703][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.538764][T12843] hfs: unable to load iocharset "io#harset" [ 644.606730][T12851] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1572'. [ 644.693827][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.747634][T12851] batadv5: entered allmulticast mode [ 644.856833][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.080843][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.255292][T11701] usb 11-1: USB disconnect, device number 2 [ 645.670623][T12082] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.830071][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.051551][T12082] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.104793][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.116687][ T842] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 646.250641][T12082] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.326253][ T842] usb 7-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 646.344052][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.397667][ T842] usb 7-1: config 0 descriptor?? [ 646.405982][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.408266][ T842] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 646.478985][T12082] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.604794][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.652331][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.713450][ T842] usb 7-1: USB disconnect, device number 57 [ 646.869140][T12082] bridge_slave_1: left allmulticast mode [ 646.871867][T12082] bridge_slave_1: left promiscuous mode [ 646.896019][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.949017][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.984151][T12082] bridge_slave_0: left allmulticast mode [ 646.998565][T12082] bridge_slave_0: left promiscuous mode [ 647.028138][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.756757][T12875] ufs: You didn't specify the type of your ufs filesystem [ 647.756757][T12875] [ 647.756757][T12875] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 647.756757][T12875] [ 647.756757][T12875] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 647.792697][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.804036][T12875] ufs: ufstype=old is supported read-only [ 647.915858][ T6119] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 648.004886][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.113109][ T6119] usb 11-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 648.118386][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.129665][ T6119] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.167351][ T6119] usb 11-1: config 0 descriptor?? [ 648.174909][ T6119] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 648.183067][ T5306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 648.195858][ T5306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 648.204771][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.205564][ T5306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.229264][ T5306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.239903][ T5306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.520775][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.844132][T12885] netlink: 'syz.2.1579': attribute type 8 has an invalid length. [ 648.874460][T11701] usb 11-1: USB disconnect, device number 3 [ 649.153903][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.199015][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.234065][T12082] bond0 (unregistering): Released all slaves [ 650.097916][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 650.097936][ T40] audit: type=1326 audit(1763691446.548:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.139408][ T40] audit: type=1326 audit(1763691446.548:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.209128][T12082] tipc: Left network mode [ 650.295621][ T40] audit: type=1326 audit(1763691446.788:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.329809][ T40] audit: type=1326 audit(1763691446.788:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.372193][ T5952] Bluetooth: hci0: command tx timeout [ 650.382207][ T40] audit: type=1326 audit(1763691446.788:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.440988][ T40] audit: type=1326 audit(1763691446.808:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.461703][ T40] audit: type=1326 audit(1763691446.808:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.645225][ T40] audit: type=1326 audit(1763691446.808:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.702726][ T40] audit: type=1326 audit(1763691446.808:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 650.764902][ T40] audit: type=1326 audit(1763691446.808:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.2.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 651.796259][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.431467][ T5952] Bluetooth: hci0: command tx timeout [ 652.578162][T12876] chnl_net:caif_netlink_parms(): no params data found [ 652.817481][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.831255][T12082] hsr_slave_0: left promiscuous mode [ 652.860384][T12082] hsr_slave_1: left promiscuous mode [ 652.881984][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.916061][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.040958][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.045260][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.188695][T12082] veth1_macvtap: left promiscuous mode [ 653.189352][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.225484][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.231857][T12082] veth0_macvtap: left promiscuous mode [ 653.301470][T12082] veth1_vlan: left promiscuous mode [ 653.303827][T12082] veth0_vlan: left promiscuous mode [ 653.441787][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.680827][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.841715][ T5306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 653.863140][ T5306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 653.888893][ T5306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 653.893947][ T5306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 653.901187][ T5306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.112742][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.398413][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.496816][ T5952] Bluetooth: hci0: command tx timeout [ 654.498661][T12932] ufs: You didn't specify the type of your ufs filesystem [ 654.498661][T12932] [ 654.498661][T12932] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 654.498661][T12932] [ 654.498661][T12932] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 654.515058][T12932] ufs: ufstype=old is supported read-only [ 654.583591][ T842] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 654.747981][ T842] usb 11-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 654.758824][ T842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.778182][ T842] usb 11-1: config 0 descriptor?? [ 654.822303][ T842] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 654.874684][T12938] netlink: 'syz.2.1588': attribute type 8 has an invalid length. [ 655.156621][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.296707][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.350968][ T6032] usb 11-1: USB disconnect, device number 4 [ 656.020923][ T5952] Bluetooth: hci5: command tx timeout [ 656.129278][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.326905][T12947] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1589'. [ 656.453295][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 656.453317][ T40] audit: type=1326 audit(1763691452.918:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.525863][ T40] audit: type=1326 audit(1763691452.918:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.572748][ T40] audit: type=1326 audit(1763691452.918:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.612756][ T5952] Bluetooth: hci0: command tx timeout [ 656.645926][ T40] audit: type=1326 audit(1763691452.918:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.667325][ T40] audit: type=1326 audit(1763691452.918:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.721982][ T40] audit: type=1326 audit(1763691452.918:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.735830][ T40] audit: type=1326 audit(1763691452.918:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.778322][ T40] audit: type=1326 audit(1763691452.918:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.830570][ T40] audit: type=1326 audit(1763691452.918:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 656.839271][ T40] audit: type=1326 audit(1763691452.918:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.6.1591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 658.105851][ T5952] Bluetooth: hci5: command tx timeout [ 659.144915][T12082] team0 (unregistering): Port device team_slave_1 removed [ 659.777372][T12082] team0 (unregistering): Port device team_slave_0 removed [ 660.186028][ T5952] Bluetooth: hci5: command tx timeout [ 662.265597][ T5952] Bluetooth: hci5: command tx timeout [ 662.721776][T12947] batadv5: entered allmulticast mode [ 663.099395][T12882] smc: removing ib device syz1 [ 663.988125][ T1337] syz1: Port: 1 Link DOWN [ 664.615660][T12876] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.621984][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.646030][T12876] bridge_slave_0: entered allmulticast mode [ 664.749194][T12876] bridge_slave_0: entered promiscuous mode [ 664.813031][T12876] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.819807][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.824216][T12876] bridge_slave_1: entered allmulticast mode [ 664.846886][T12876] bridge_slave_1: entered promiscuous mode [ 665.048009][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.233704][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.179735][T12876] team0: Port device team_slave_0 added [ 666.250842][T12876] team0: Port device team_slave_1 added [ 666.543488][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.552386][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.568456][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.581132][T12930] chnl_net:caif_netlink_parms(): no params data found [ 666.599846][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.621302][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.636048][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.921614][T12876] hsr_slave_0: entered promiscuous mode [ 666.941322][T12876] hsr_slave_1: entered promiscuous mode [ 667.327842][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.332247][T12930] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.342149][T12930] bridge_slave_0: entered allmulticast mode [ 667.348396][T12930] bridge_slave_0: entered promiscuous mode [ 667.360742][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.365501][T12930] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.370159][T12930] bridge_slave_1: entered allmulticast mode [ 667.381750][T12930] bridge_slave_1: entered promiscuous mode [ 667.710093][T12930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.755295][T12930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.131794][T12930] team0: Port device team_slave_0 added [ 668.157844][T12930] team0: Port device team_slave_1 added [ 668.739182][T12930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.742032][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.785791][T12930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.836418][T12930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.860304][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.873126][T12930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.111579][T12930] hsr_slave_0: entered promiscuous mode [ 669.117164][T12930] hsr_slave_1: entered promiscuous mode [ 669.155177][T12930] debugfs: 'hsr0' already exists in 'hsr' [ 669.167925][T12930] Cannot create hsr debugfs directory [ 669.179321][T12876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.216287][T12992] ufs: You didn't specify the type of your ufs filesystem [ 669.216287][T12992] [ 669.216287][T12992] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 669.216287][T12992] [ 669.216287][T12992] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 669.262213][T12992] ufs: ufstype=old is supported read-only [ 669.533267][T12876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.579212][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 669.674018][T12082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.738996][T12876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.757670][T12876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 669.777717][ T34] usb 11-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 669.793359][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.819356][ T34] usb 11-1: config 0 descriptor?? [ 669.863035][ T34] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 670.002783][T12082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.135467][ T6119] usb 11-1: USB disconnect, device number 5 [ 670.216038][T12848] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 670.378362][T12082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.409276][T12848] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 670.424095][T12848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.460284][T12848] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 670.464530][T12848] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 670.493458][T12848] usb 7-1: Manufacturer: syz [ 670.497741][T12848] usb 7-1: config 0 descriptor?? [ 670.679294][T12082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.735800][T12848] rc_core: IR keymap rc-hauppauge not found [ 670.738530][T12848] Registered IR keymap rc-empty [ 670.742873][T12848] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 670.758032][T12848] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input137 [ 670.784018][T12848] usb 7-1: USB disconnect, device number 58 [ 670.866709][T12954] udevd[12954]: setting owner of /dev/bus/usb/007/058 to uid=0, gid=0 failed: No such file or directory [ 670.897630][T12876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.947342][T12876] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.030643][T12930] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 671.048711][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 671.048731][ T40] audit: type=1326 audit(1763691467.528:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.062555][ T40] audit: type=1326 audit(1763691467.528:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.102189][ T40] audit: type=1326 audit(1763691467.528:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.105954][T12930] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 671.116591][ T40] audit: type=1326 audit(1763691467.528:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.131839][ T40] audit: type=1326 audit(1763691467.528:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.145054][ T40] audit: type=1326 audit(1763691467.528:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.158011][ T40] audit: type=1326 audit(1763691467.528:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.173844][ T40] audit: type=1326 audit(1763691467.528:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.185052][ T40] audit: type=1326 audit(1763691467.528:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.197865][ T40] audit: type=1326 audit(1763691467.528:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.6.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 671.257949][T12930] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 671.376303][T12930] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.519570][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.533154][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.567433][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.578410][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.012877][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1601'. [ 672.038794][T12082] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.442109][T12082] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.584950][ C2] vkms_vblank_simulate: vblank timer overrun [ 672.692572][ C2] vkms_vblank_simulate: vblank timer overrun [ 672.978561][T12082] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.045408][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.177001][T12930] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.211168][T12882] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.215018][T12882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.279922][T12882] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.298729][T12882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.424546][ C2] vkms_vblank_simulate: vblank timer overrun [ 673.539337][T12082] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.604680][T12930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.610866][T12930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.632010][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.028579][ C2] vkms_vblank_simulate: vblank timer overrun [ 674.182383][T12930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.240529][T12082] team0: left allmulticast mode [ 674.316538][T12082] team_slave_0: left allmulticast mode [ 674.325802][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 674.350530][T12082] team_slave_1: left allmulticast mode [ 674.350800][T12082] bridge0: port 3(team0) entered disabled state [ 674.398216][T12082] bridge_slave_1: left allmulticast mode [ 674.419452][T12082] bridge_slave_1: left promiscuous mode [ 674.437761][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.484378][T12082] bridge_slave_0: left allmulticast mode [ 674.486818][T12082] bridge_slave_0: left promiscuous mode [ 674.489130][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.501956][T12082] bridge_slave_1: left allmulticast mode [ 674.505960][T12082] bridge_slave_1: left promiscuous mode [ 674.508618][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.515344][T12082] bridge_slave_0: left allmulticast mode [ 674.519069][T12082] bridge_slave_0: left promiscuous mode [ 674.522001][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.536102][ T34] usb 11-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 674.569372][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.604344][T13079] ufs: You didn't specify the type of your ufs filesystem [ 674.604344][T13079] [ 674.604344][T13079] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 674.604344][T13079] [ 674.604344][T13079] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 674.654990][T13079] ufs: ufstype=old is supported read-only [ 674.661279][ T34] usb 11-1: config 0 descriptor?? [ 674.679096][ T34] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 674.773488][ C2] vkms_vblank_simulate: vblank timer overrun [ 675.025094][ C2] vkms_vblank_simulate: vblank timer overrun [ 675.050841][T11889] usb 11-1: USB disconnect, device number 6 [ 675.156792][ C2] vkms_vblank_simulate: vblank timer overrun [ 675.199339][ C2] vkms_vblank_simulate: vblank timer overrun [ 675.412662][ C2] vkms_vblank_simulate: vblank timer overrun [ 676.070239][ C2] vkms_vblank_simulate: vblank timer overrun [ 676.164895][ C2] vkms_vblank_simulate: vblank timer overrun [ 676.238684][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.319693][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.371177][T12082] bond0 (unregistering): Released all slaves [ 676.598249][ C2] vkms_vblank_simulate: vblank timer overrun [ 676.810383][T12082] bond1 (unregistering): Released all slaves [ 677.332532][ C2] vkms_vblank_simulate: vblank timer overrun [ 677.544838][T13092] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1609'. [ 677.559109][ C2] vkms_vblank_simulate: vblank timer overrun [ 677.692975][ C2] vkms_vblank_simulate: vblank timer overrun [ 678.020494][ C2] vkms_vblank_simulate: vblank timer overrun [ 678.056460][ C2] vkms_vblank_simulate: vblank timer overrun [ 678.387616][ C2] vkms_vblank_simulate: vblank timer overrun [ 678.481477][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.489068][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.506554][T12082] bond0 (unregistering): Released all slaves [ 679.038401][T12082] bond1 (unregistering): Released all slaves [ 679.563225][T12876] veth0_vlan: entered promiscuous mode [ 679.623570][T12876] veth1_vlan: entered promiscuous mode [ 679.659670][T12876] veth0_macvtap: entered promiscuous mode [ 679.667874][T12876] veth1_macvtap: entered promiscuous mode [ 679.705999][T12876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.733042][T12876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.780791][T12082] tipc: Left network mode [ 679.813117][ T98] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.843920][ T98] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.922837][T12882] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.964992][T12882] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.101978][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 680.101997][ T40] audit: type=1326 audit(1763691476.568:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.200420][ T40] audit: type=1326 audit(1763691476.568:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.211453][ T40] audit: type=1326 audit(1763691476.568:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.240136][ T40] audit: type=1326 audit(1763691476.588:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.272058][ T40] audit: type=1326 audit(1763691476.588:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.317998][ T40] audit: type=1326 audit(1763691476.588:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.348950][ T40] audit: type=1326 audit(1763691476.588:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.390379][ T40] audit: type=1326 audit(1763691476.588:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.465494][T12930] veth0_vlan: entered promiscuous mode [ 680.486073][ T40] audit: type=1326 audit(1763691476.588:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.529358][ T40] audit: type=1326 audit(1763691476.588:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.2.1610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 680.616308][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.633003][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.818941][T12930] veth1_vlan: entered promiscuous mode [ 680.877470][ T6533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.882717][ T6533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.902307][T12930] veth0_macvtap: entered promiscuous mode [ 681.110800][T12930] veth1_macvtap: entered promiscuous mode [ 681.180526][T12930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.292493][T12930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.780270][T12882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.801196][T12882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.852453][ C3] vkms_vblank_simulate: vblank timer overrun [ 681.877092][T12882] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.902960][T12882] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.097650][T12082] hsr_slave_0: left promiscuous mode [ 682.101846][T12082] hsr_slave_1: left promiscuous mode [ 682.107413][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.112773][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.122203][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.125615][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.189925][T12082] hsr_slave_0: left promiscuous mode [ 682.206591][T12082] hsr_slave_1: left promiscuous mode [ 682.258391][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.262521][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.286109][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.289163][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.760867][T12082] veth1_macvtap: left promiscuous mode [ 682.767041][T12082] veth0_macvtap: left promiscuous mode [ 682.810250][T12082] veth1_vlan: left promiscuous mode [ 682.814711][T12082] veth0_vlan: left promiscuous mode [ 682.998033][T13143] ufs: You didn't specify the type of your ufs filesystem [ 682.998033][T13143] [ 682.998033][T13143] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 682.998033][T13143] [ 682.998033][T13143] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 683.046088][T13143] ufs: ufstype=old is supported read-only [ 683.225379][T12082] veth1_macvtap: left promiscuous mode [ 683.229402][T12082] veth0_macvtap: left promiscuous mode [ 683.233469][T12082] veth1_vlan: left promiscuous mode [ 683.236687][T12082] veth0_vlan: left promiscuous mode [ 683.324460][ C3] vkms_vblank_simulate: vblank timer overrun [ 683.508426][ C3] vkms_vblank_simulate: vblank timer overrun [ 683.564412][ C3] vkms_vblank_simulate: vblank timer overrun [ 683.743477][T13148] 9p: Unknown access argument any¨: -22 [ 684.246047][ C3] vkms_vblank_simulate: vblank timer overrun [ 684.533978][ C3] vkms_vblank_simulate: vblank timer overrun [ 684.586171][ C3] vkms_vblank_simulate: vblank timer overrun [ 684.652837][ C3] vkms_vblank_simulate: vblank timer overrun [ 685.052388][ C3] vkms_vblank_simulate: vblank timer overrun [ 685.309194][ C3] vkms_vblank_simulate: vblank timer overrun [ 685.360402][ C3] vkms_vblank_simulate: vblank timer overrun [ 685.424619][ C3] vkms_vblank_simulate: vblank timer overrun [ 685.536417][ C3] vkms_vblank_simulate: vblank timer overrun [ 685.811919][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 685.811938][ T40] audit: type=1326 audit(1763691479.978:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.6.1613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 685.854675][ C3] vkms_vblank_simulate: vblank timer overrun [ 686.076397][ C3] vkms_vblank_simulate: vblank timer overrun [ 687.825735][ C3] vkms_vblank_simulate: vblank timer overrun [ 688.012781][ C3] vkms_vblank_simulate: vblank timer overrun [ 688.138564][ C3] vkms_vblank_simulate: vblank timer overrun [ 688.936554][ C3] vkms_vblank_simulate: vblank timer overrun [ 689.703976][ C3] vkms_vblank_simulate: vblank timer overrun [ 689.743487][T12082] team_slave_1 (unregistering): left promiscuous mode [ 689.759461][T12082] team0 (unregistering): Port device team_slave_1 removed [ 690.162039][T12082] team_slave_0 (unregistering): left promiscuous mode [ 690.189676][T12082] team0 (unregistering): Port device team_slave_0 removed [ 690.445205][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.561474][T12082] team0 (unregistering): Port device team_slave_1 removed [ 696.974621][T12082] team0 (unregistering): Port device team_slave_0 removed [ 698.269899][ T5306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.288015][ T5306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.319454][ T5306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.327504][ T5306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.335623][ T5306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 699.439798][ T5306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.471610][ T5306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.502817][ T5306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.589990][ T5306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.618049][ T5306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 700.425422][ T5952] Bluetooth: hci1: command tx timeout [ 700.838888][ T6534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.842451][ T6534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.120405][ T6551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.124497][ T6551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.509807][ T5306] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 701.530908][ T5306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 701.595850][ T5306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 701.614134][ T5306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.624629][ T5306] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.708597][ T5306] Bluetooth: hci4: command tx timeout [ 702.105817][T12980] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 702.268254][T13167] chnl_net:caif_netlink_parms(): no params data found [ 702.355261][T12980] usb 13-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 702.364930][T12980] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.501851][T12980] usb 13-1: config 0 descriptor?? [ 702.505907][ T5306] Bluetooth: hci1: command tx timeout [ 702.584391][T12980] usbhid 13-1:0.0: couldn't find an input interrupt endpoint [ 702.628820][T13163] chnl_net:caif_netlink_parms(): no params data found [ 702.916395][ T6973] usb 13-1: USB disconnect, device number 2 [ 703.698440][ T5306] Bluetooth: hci6: command tx timeout [ 703.804388][ T5306] Bluetooth: hci4: command tx timeout [ 703.812695][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.816043][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.819444][T13167] bridge_slave_0: entered allmulticast mode [ 703.824103][T13167] bridge_slave_0: entered promiscuous mode [ 703.861886][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.875648][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.879029][T13167] bridge_slave_1: entered allmulticast mode [ 703.934715][T13167] bridge_slave_1: entered promiscuous mode [ 704.006980][T13163] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.025555][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.029735][T13163] bridge_slave_0: entered allmulticast mode [ 704.034434][T13163] bridge_slave_0: entered promiscuous mode [ 704.047882][T13163] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.059761][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.064350][T13163] bridge_slave_1: entered allmulticast mode [ 704.073813][T13163] bridge_slave_1: entered promiscuous mode [ 704.605828][ T5306] Bluetooth: hci1: command tx timeout [ 704.647755][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.751210][T13163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.760852][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.892619][T13163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.232872][T13163] team0: Port device team_slave_0 added [ 705.236212][T13177] chnl_net:caif_netlink_parms(): no params data found [ 705.284386][T13167] team0: Port device team_slave_0 added [ 705.299199][T13167] team0: Port device team_slave_1 added [ 705.308228][T13163] team0: Port device team_slave_1 added [ 705.515300][T13163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.519881][T13163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.534939][T13163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.568868][T12980] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 705.663030][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.667933][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.688693][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.701264][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.705102][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.718327][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.727341][T13163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.732066][T13163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.745400][T13163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.776836][ T5306] Bluetooth: hci6: command tx timeout [ 705.787861][T12980] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.813826][T12980] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.830999][T12980] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.841122][T12980] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.847669][T12980] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.855942][ T5306] Bluetooth: hci4: command tx timeout [ 705.895034][T12980] usb 13-1: config 0 descriptor?? [ 706.193088][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.212393][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.218025][T13177] bridge_slave_0: entered allmulticast mode [ 706.223043][T13177] bridge_slave_0: entered promiscuous mode [ 706.292450][T13163] hsr_slave_0: entered promiscuous mode [ 706.307249][T13163] hsr_slave_1: entered promiscuous mode [ 706.312141][T13163] debugfs: 'hsr0' already exists in 'hsr' [ 706.314824][T13163] Cannot create hsr debugfs directory [ 706.398009][T12980] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 706.548743][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.554735][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.565485][T13177] bridge_slave_1: entered allmulticast mode [ 706.573189][T13177] bridge_slave_1: entered promiscuous mode [ 706.675848][ T5306] Bluetooth: hci1: command tx timeout [ 706.695438][T13167] hsr_slave_0: entered promiscuous mode [ 706.700372][T13167] hsr_slave_1: entered promiscuous mode [ 706.703588][T13167] debugfs: 'hsr0' already exists in 'hsr' [ 706.706108][T13167] Cannot create hsr debugfs directory [ 706.979478][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.020661][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.461633][T12082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.698689][T13177] team0: Port device team_slave_0 added [ 707.783007][T12082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.863645][ T5306] Bluetooth: hci6: command tx timeout [ 707.920729][T13177] team0: Port device team_slave_1 added [ 707.950423][ T5306] Bluetooth: hci4: command tx timeout [ 708.063542][T12082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.131646][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.147391][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.198349][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.224915][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.228311][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.286014][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.437281][ T6925] usb 13-1: USB disconnect, device number 3 [ 708.574872][T12082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.145953][T13177] hsr_slave_0: entered promiscuous mode [ 709.162573][T13177] hsr_slave_1: entered promiscuous mode [ 709.193150][T13177] debugfs: 'hsr0' already exists in 'hsr' [ 709.203129][T13177] Cannot create hsr debugfs directory [ 709.223353][T13163] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 709.301845][T13163] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 709.329238][ T40] audit: type=1326 audit(1763691505.818:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.347714][ T40] audit: type=1326 audit(1763691505.818:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.383303][ T40] audit: type=1326 audit(1763691505.828:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.413236][ T40] audit: type=1326 audit(1763691505.828:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.428444][ T40] audit: type=1326 audit(1763691505.828:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.459803][ T40] audit: type=1326 audit(1763691505.848:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.481478][ T40] audit: type=1326 audit(1763691505.848:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.510392][ T40] audit: type=1326 audit(1763691505.858:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.621510][ T40] audit: type=1326 audit(1763691506.098:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.646642][ T40] audit: type=1326 audit(1763691506.098:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.8.1624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 709.828169][T13163] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 709.907349][T13163] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 709.935910][ T5306] Bluetooth: hci6: command tx timeout [ 710.399408][T12082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.652208][ C2] vkms_vblank_simulate: vblank timer overrun [ 710.728214][ C2] vkms_vblank_simulate: vblank timer overrun [ 710.903516][T12082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.001030][ C2] vkms_vblank_simulate: vblank timer overrun [ 711.196215][ C2] vkms_vblank_simulate: vblank timer overrun [ 711.245589][T12082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.460240][ C2] vkms_vblank_simulate: vblank timer overrun [ 711.572239][ C2] vkms_vblank_simulate: vblank timer overrun [ 711.582058][T12082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.708533][T13163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.774621][T13163] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.784794][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.789392][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.840178][ C2] vkms_vblank_simulate: vblank timer overrun [ 711.907671][ C2] vkms_vblank_simulate: vblank timer overrun [ 712.140519][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.144596][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.418288][T12082] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.559718][ C2] vkms_vblank_simulate: vblank timer overrun [ 712.668222][ C2] vkms_vblank_simulate: vblank timer overrun [ 712.802794][ C2] vkms_vblank_simulate: vblank timer overrun [ 712.823664][T12082] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.021755][ C2] vkms_vblank_simulate: vblank timer overrun [ 713.088328][ C2] vkms_vblank_simulate: vblank timer overrun [ 713.187389][T12082] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.268272][ C2] vkms_vblank_simulate: vblank timer overrun [ 713.307829][T13163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.337825][ C2] vkms_vblank_simulate: vblank timer overrun [ 713.514018][T12082] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.656162][ C2] vkms_vblank_simulate: vblank timer overrun [ 714.049987][T12082] bridge_slave_1: left allmulticast mode [ 714.052767][T12082] bridge_slave_1: left promiscuous mode [ 714.055745][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.066563][T12082] bridge_slave_0: left allmulticast mode [ 714.068962][T12082] bridge_slave_0: left promiscuous mode [ 714.075545][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.092503][ C2] vkms_vblank_simulate: vblank timer overrun [ 714.161381][T12082] bridge_slave_1: left allmulticast mode [ 714.164602][T12082] bridge_slave_1: left promiscuous mode [ 714.168257][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.193294][T12082] bridge_slave_0: left allmulticast mode [ 714.198616][T12082] bridge_slave_0: left promiscuous mode [ 714.201976][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.328158][ C2] vkms_vblank_simulate: vblank timer overrun [ 714.592165][ C2] vkms_vblank_simulate: vblank timer overrun [ 714.784696][ C2] vkms_vblank_simulate: vblank timer overrun [ 714.847817][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.142874][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.248155][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.345208][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.371993][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.436606][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.555630][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.594025][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.645317][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.718119][T12082] bond0 (unregistering): Released all slaves [ 715.741943][ C2] vkms_vblank_simulate: vblank timer overrun [ 715.844184][ C2] vkms_vblank_simulate: vblank timer overrun [ 717.073597][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.095330][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.120832][T12082] bond0 (unregistering): Released all slaves [ 717.972265][ T53] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 718.045622][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.120337][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.130952][T12082] bond0 (unregistering): Released all slaves [ 718.181540][ T53] usb 13-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 718.214744][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.238689][ T53] usb 13-1: config 0 descriptor?? [ 718.274105][ T53] usbhid 13-1:0.0: couldn't find an input interrupt endpoint [ 718.296334][T13163] veth0_vlan: entered promiscuous mode [ 718.323195][T13163] veth1_vlan: entered promiscuous mode [ 718.384078][T13163] veth0_macvtap: entered promiscuous mode [ 718.389723][T12082] tipc: Disabling bearer [ 718.443149][T12082] tipc: Left network mode [ 718.447379][T13163] veth1_macvtap: entered promiscuous mode [ 718.477324][T13163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.565056][T13163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.616439][ T6533] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.789925][ T6533] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.834153][ T6533] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.864043][ T24] usb 13-1: USB disconnect, device number 4 [ 719.038673][ T6533] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.543187][T13122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.584140][T13122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.673835][ T6533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.678462][ T6533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.241125][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1628'. [ 720.467889][T13167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 720.628153][T13167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 720.730613][T13349] binder: Binderfs stats mode cannot be changed during a remount [ 720.808322][T13167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 720.902367][T13167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 721.363469][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1617'. [ 722.161947][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 722.161963][ T40] audit: type=1326 audit(1763691518.638:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.8.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 722.220981][ T40] audit: type=1326 audit(1763691518.638:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.8.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 722.296400][ T40] audit: type=1326 audit(1763691518.768:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.8.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 722.312339][ T40] audit: type=1326 audit(1763691518.768:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.8.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 722.342799][ T40] audit: type=1326 audit(1763691518.768:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.8.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 722.375533][ T40] audit: type=1326 audit(1763691518.798:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.8.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 722.432229][ T40] audit: type=1326 audit(1763691518.918:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.9.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 722.480639][ T40] audit: type=1326 audit(1763691518.918:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.9.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 722.515843][ T40] audit: type=1326 audit(1763691518.938:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.9.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 722.525428][ T40] audit: type=1326 audit(1763691518.938:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.9.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 723.531501][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.837210][T12082] hsr_slave_0: left promiscuous mode [ 723.868485][T12082] hsr_slave_1: left promiscuous mode [ 723.872864][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.875807][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.892911][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.896513][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.001317][T12082] hsr_slave_0: left promiscuous mode [ 724.021481][T12082] hsr_slave_1: left promiscuous mode [ 724.024245][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.042442][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.060293][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.069834][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.177673][T12082] hsr_slave_0: left promiscuous mode [ 724.250724][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.255284][T12082] hsr_slave_1: left promiscuous mode [ 724.258963][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.274014][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.309539][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.356947][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.360665][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.556126][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.712802][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.832176][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.873288][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.879323][T12082] veth1_macvtap: left promiscuous mode [ 724.882503][T12082] veth0_macvtap: left promiscuous mode [ 724.885785][T12082] veth1_vlan: left promiscuous mode [ 724.900745][T12082] veth0_vlan: left promiscuous mode [ 725.012467][T12082] veth1_macvtap: left promiscuous mode [ 725.030768][T12082] veth0_macvtap: left promiscuous mode [ 725.033335][T12082] veth1_vlan: left promiscuous mode [ 725.040005][T12082] veth0_vlan: left promiscuous mode [ 725.100086][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.228023][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.272657][T12082] veth1_macvtap: left promiscuous mode [ 725.275541][T12082] veth0_macvtap: left promiscuous mode [ 725.278787][T12082] veth1_vlan: left promiscuous mode [ 725.305752][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.333561][T12082] veth0_vlan: left promiscuous mode [ 725.396457][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1635'. [ 725.404056][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.435070][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.520078][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.676062][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.076098][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.260061][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.320019][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.515524][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.792040][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.416546][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.532309][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.570492][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.604061][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.607843][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 727.607863][ T40] audit: type=1326 audit(1763691524.068:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.629925][ T40] audit: type=1326 audit(1763691524.068:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.644166][ T40] audit: type=1326 audit(1763691524.068:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.671190][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.673612][ T40] audit: type=1326 audit(1763691524.068:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.705953][ T40] audit: type=1326 audit(1763691524.068:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.718648][ T40] audit: type=1326 audit(1763691524.068:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.744027][ T40] audit: type=1326 audit(1763691524.068:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.820153][ T40] audit: type=1326 audit(1763691524.298:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.829702][ T40] audit: type=1326 audit(1763691524.308:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.864384][ T40] audit: type=1326 audit(1763691524.348:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.8.1638" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 727.896960][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.239504][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.099329][T12082] team_slave_1 (unregistering): left promiscuous mode [ 730.117475][T12082] team0 (unregistering): Port device team_slave_1 removed [ 730.323574][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.542749][T12082] team_slave_0 (unregistering): left promiscuous mode [ 730.567899][T12082] team0 (unregistering): Port device team_slave_0 removed [ 731.865950][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.003958][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.288652][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.383542][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.597591][T12082] team0 (unregistering): Port device team_slave_1 removed [ 736.949884][T12082] team0 (unregistering): Port device team_slave_0 removed [ 742.095051][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.103003][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.134365][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.151678][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.202755][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.070377][ T5306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.091000][ T5306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.097614][ T5306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.102855][ T5306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.108913][ T5306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.453615][T12082] team0 (unregistering): Port device team_slave_1 removed [ 743.841591][T12082] team0 (unregistering): Port device team_slave_0 removed [ 744.335915][ T5306] Bluetooth: hci0: command tx timeout [ 745.218771][ T5306] Bluetooth: hci2: command tx timeout [ 746.419996][ T5306] Bluetooth: hci0: command tx timeout [ 746.877543][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.177368][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.184752][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.240913][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.245897][ T6540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.256730][T13177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 747.296082][ T5306] Bluetooth: hci2: command tx timeout [ 747.665982][T13177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 747.776874][T13177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 747.819882][T13177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 748.496055][ T5306] Bluetooth: hci0: command tx timeout [ 748.510927][T13415] chnl_net:caif_netlink_parms(): no params data found [ 748.845982][T13419] chnl_net:caif_netlink_parms(): no params data found [ 749.140330][T13415] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.144502][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.166440][T13415] bridge_slave_0: entered allmulticast mode [ 749.171891][T13415] bridge_slave_0: entered promiscuous mode [ 749.176739][T13415] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.190138][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.193516][T13415] bridge_slave_1: entered allmulticast mode [ 749.197850][T13415] bridge_slave_1: entered promiscuous mode [ 749.377822][ T5306] Bluetooth: hci2: command tx timeout [ 749.484095][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.516469][T13415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.554826][T13415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.998391][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.059568][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.062142][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.064674][T13419] bridge_slave_0: entered allmulticast mode [ 750.071818][T13419] bridge_slave_0: entered promiscuous mode [ 750.102442][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.107174][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.121701][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.128469][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.162319][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.171125][T13415] team0: Port device team_slave_0 added [ 750.181834][T13415] team0: Port device team_slave_1 added [ 750.254329][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.258050][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.270689][T13419] bridge_slave_1: entered allmulticast mode [ 750.282759][T13419] bridge_slave_1: entered promiscuous mode [ 750.588261][ T5306] Bluetooth: hci0: command tx timeout [ 750.653770][T13415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.663158][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.722089][T13415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.788842][T13415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.801696][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.829292][T13415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.852978][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.899528][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.234203][T13415] hsr_slave_0: entered promiscuous mode [ 751.237380][T13415] hsr_slave_1: entered promiscuous mode [ 751.412044][T13167] veth0_vlan: entered promiscuous mode [ 751.421591][T13167] veth1_vlan: entered promiscuous mode [ 751.441503][T13419] team0: Port device team_slave_0 added [ 751.450747][T13419] team0: Port device team_slave_1 added [ 751.480795][ T5306] Bluetooth: hci2: command tx timeout [ 751.651496][T12082] IPVS: stop unused estimator thread 0... [ 751.831977][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.877045][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.907264][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.912425][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.947634][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.964228][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.977669][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.995205][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.249964][T13167] veth0_macvtap: entered promiscuous mode [ 752.372470][T13419] hsr_slave_0: entered promiscuous mode [ 752.382088][T13419] hsr_slave_1: entered promiscuous mode [ 752.398251][T13419] debugfs: 'hsr0' already exists in 'hsr' [ 752.401286][T13419] Cannot create hsr debugfs directory [ 752.405046][T13167] veth1_macvtap: entered promiscuous mode [ 752.540363][T12082] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.654279][T13177] veth0_vlan: entered promiscuous mode [ 752.729901][T13177] veth1_vlan: entered promiscuous mode [ 752.791653][T12082] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.207217][T12082] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.240338][T13167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.507859][T12082] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.652167][T13167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.850778][ T6534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.854962][ T6534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.046418][T13177] veth0_macvtap: entered promiscuous mode [ 754.063140][ T98] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.068370][ T98] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.192674][T13177] veth1_macvtap: entered promiscuous mode [ 754.419344][ T6551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.428039][ T6551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.511919][T12082] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.592388][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.609166][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.654197][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.680644][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.682260][ T6551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.726896][ T6551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.732198][ T6551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.737405][ T6551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.877793][T12082] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.021861][T13118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.050719][T13118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.177088][T12082] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.260351][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.263900][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.433205][T12082] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.902581][T13454] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1618'. [ 756.101822][T13454] batadv1: entered allmulticast mode [ 756.198366][T12082] bridge_slave_1: left allmulticast mode [ 756.202470][T12082] bridge_slave_1: left promiscuous mode [ 756.206804][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.258167][T12082] bridge_slave_0: left allmulticast mode [ 756.290013][T12082] bridge_slave_0: left promiscuous mode [ 756.347157][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.414427][T12082] bridge_slave_1: left allmulticast mode [ 756.431524][T12082] bridge_slave_1: left promiscuous mode [ 756.450049][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.564516][T12082] bridge_slave_0: left allmulticast mode [ 756.567163][T12082] bridge_slave_0: left promiscuous mode [ 756.587187][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.875789][T13170] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 758.015448][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.034099][T13170] usb 8-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 758.040973][T13170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.059828][T13170] usb 8-1: config 0 descriptor?? [ 758.096776][T13170] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 758.104600][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.138696][T12082] bond0 (unregistering): Released all slaves [ 758.364858][T13467] hfs: unable to load iocharset "io#harset" [ 758.921480][T11701] usb 8-1: USB disconnect, device number 43 [ 759.770520][T12082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.846977][T12082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.880921][T12082] bond0 (unregistering): Released all slaves [ 760.692949][T13415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 760.734053][T13415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 760.752958][T13415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 760.782950][T13415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 761.152899][T13494] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1647'. [ 761.406552][T13494] batadv1: entered allmulticast mode [ 761.896756][T13118] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 762.410293][ T98] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 762.925047][ T6534] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 763.446013][ T98] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 763.967878][ T6540] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 764.489232][ T98] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 765.959165][T13415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.274571][T13415] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.407352][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.412488][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.522439][T12082] hsr_slave_0: left promiscuous mode [ 766.548361][T12082] hsr_slave_1: left promiscuous mode [ 766.553812][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.566646][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.614332][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.655925][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.751829][T12082] hsr_slave_0: left promiscuous mode [ 766.808078][T12082] hsr_slave_1: left promiscuous mode [ 766.811769][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.815081][T12082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.841552][T12082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.850860][T12082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.050676][T12082] veth1_macvtap: left promiscuous mode [ 767.054213][T12082] veth0_macvtap: left promiscuous mode [ 767.057281][T12082] veth1_vlan: left promiscuous mode [ 767.061304][T12082] veth0_vlan: left promiscuous mode [ 767.076097][T12082] veth1_macvtap: left promiscuous mode [ 767.079965][T12082] veth0_macvtap: left promiscuous mode [ 767.083051][T12082] veth1_vlan: left promiscuous mode [ 767.086577][T12082] veth0_vlan: left promiscuous mode [ 767.286267][T13171] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 767.473784][T13171] usb 8-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 767.520916][T13171] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.607393][T13171] usb 8-1: config 0 descriptor?? [ 767.655471][T13171] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 767.891999][T13533] hfs: unable to load iocharset "io#harset" [ 768.451563][T13204] usb 8-1: USB disconnect, device number 44 [ 769.576245][T13204] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 769.806527][T13204] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 769.813096][T13204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.824680][T13204] usb 5-1: config 0 descriptor?? [ 769.848188][T13204] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 770.155530][T13540] hfs: unable to load iocharset "io#harset" [ 770.463611][T11701] usb 5-1: USB disconnect, device number 37 [ 771.093304][T13552] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1655'. [ 772.830751][T12082] team0 (unregistering): Port device team_slave_1 removed [ 773.511065][T12082] team0 (unregistering): Port device team_slave_0 removed [ 774.171335][T13571] binder: Binderfs stats mode cannot be changed during a remount [ 779.863730][T12082] team0 (unregistering): Port device team_slave_1 removed [ 780.218819][T12082] team0 (unregistering): Port device team_slave_0 removed [ 783.352070][T13552] batadv1: entered allmulticast mode [ 783.387739][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.390879][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.700935][T13419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 783.784240][T13419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 783.920209][T13419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 783.995539][T13419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 784.160648][T13415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.504404][T13419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.585067][T13419] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.603680][ T34] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 784.626513][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.631508][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.645303][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.662232][ T6540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.841201][ T34] usb 8-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 784.844658][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.879082][ T34] usb 8-1: config 0 descriptor?? [ 784.885027][ T34] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 785.318279][T13415] veth0_vlan: entered promiscuous mode [ 785.371015][T13597] hfs: unable to load iocharset "io#harset" [ 785.376371][T13415] veth1_vlan: entered promiscuous mode [ 785.433287][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.501633][T13415] veth0_macvtap: entered promiscuous mode [ 785.528256][T13415] veth1_macvtap: entered promiscuous mode [ 785.558778][T13415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.602533][T13415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.649998][ T6534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.660171][ T6534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.687484][ T6534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.719188][ T6534] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.960906][ T842] usb 8-1: USB disconnect, device number 45 [ 787.444027][T13118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.505453][T13118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.572079][ T6547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.575962][ T6547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.761158][T13419] veth0_vlan: entered promiscuous mode [ 787.805144][T13419] veth1_vlan: entered promiscuous mode [ 787.863952][T13419] veth0_macvtap: entered promiscuous mode [ 787.879468][T13419] veth1_macvtap: entered promiscuous mode [ 787.894083][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.906523][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.045338][ T98] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.052863][ T98] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.093206][ T98] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.113971][ T98] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.312170][T13122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.349433][T13122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.413176][T13122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.418247][T13122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.463778][ T842] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 788.664746][ T842] usb 8-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 788.673053][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.772055][ T842] usb 8-1: config 0 descriptor?? [ 788.810622][ T842] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 789.026897][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 789.407898][T13664] hfs: unable to load iocharset "io#harset" [ 789.667678][ T842] usb 8-1: USB disconnect, device number 46 [ 790.699012][ T6032] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 790.907811][T13708] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1669'. [ 790.924648][T13708] batadv1: entered allmulticast mode [ 790.980805][ T6032] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 790.985307][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.012569][ T6032] usb 5-1: config 0 descriptor?? [ 791.123294][ T6032] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 791.477738][ T6534] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 791.639167][T13697] hfs: unable to load iocharset "io#harset" [ 791.713385][T13193] usb 5-1: USB disconnect, device number 38 [ 791.994400][T12082] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 793.311537][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 793.311561][ T40] audit: type=1326 audit(1763691589.768:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 793.425971][T13741] 9p: Unknown access argument any¨: -22 [ 793.469248][ T40] audit: type=1326 audit(1763691589.768:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 793.766481][ T6973] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 793.882005][ T40] audit: type=1326 audit(1763691589.768:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 793.894169][ T40] audit: type=1326 audit(1763691589.768:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 794.024731][ T40] audit: type=1326 audit(1763691589.768:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 794.086073][ T40] audit: type=1326 audit(1763691589.768:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 794.216089][ T40] audit: type=1326 audit(1763691589.768:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 794.239321][ T40] audit: type=1326 audit(1763691589.768:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 794.376918][ T40] audit: type=1326 audit(1763691589.858:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 794.395338][ T40] audit: type=1326 audit(1763691589.858:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.5.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 796.566160][T13204] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 796.737706][T13204] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 796.787586][T13204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.811009][T13204] usb 5-1: config 0 descriptor?? [ 796.839735][T13204] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 797.032372][ T55] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 797.190211][ T55] usb 10-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 797.225811][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.235467][T13204] usb 5-1: USB disconnect, device number 39 [ 797.246666][ T55] usb 10-1: config 0 descriptor?? [ 797.259391][ T55] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 797.572148][T13782] hfs: unable to load iocharset "io#harset" [ 797.655436][T12848] usb 10-1: USB disconnect, device number 3 [ 798.274469][T12848] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 798.477736][T12848] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 798.484412][T12848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.498240][T12848] usb 5-1: config 0 descriptor?? [ 798.509237][T12848] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 798.854941][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 798.887761][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 798.981540][T13805] hfs: unable to load iocharset "io#harset" [ 799.797365][T12848] usb 5-1: USB disconnect, device number 40 [ 801.210368][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1689'. [ 801.409155][T13862] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1686'. [ 801.443404][T13862] batadv1: entered allmulticast mode [ 802.839081][ T1337] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 802.955780][ T5982] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 803.079535][ T1337] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 803.088131][ T1337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.108953][ T1337] usb 5-1: config 0 descriptor?? [ 803.165388][ T1337] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 803.172862][ T5982] usb 8-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 803.224969][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.260440][ T5982] usb 8-1: config 0 descriptor?? [ 803.265604][ T5982] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 803.575496][T13885] hfs: unable to load iocharset "io#harset" [ 803.591308][T13375] usb 5-1: USB disconnect, device number 41 [ 803.597973][T13575] usb 8-1: USB disconnect, device number 47 [ 803.671509][T13889] hfs: unable to load iocharset "io#harset" [ 804.271730][T13496] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 804.504753][T13496] usb 9-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 804.530607][T13496] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.537606][T13496] usb 9-1: config 0 descriptor?? [ 804.543903][T13496] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 805.121597][T13917] hfs: unable to load iocharset "io#harset" [ 805.212321][T13375] usb 9-1: USB disconnect, device number 10 [ 806.877674][T13979] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1705'. [ 806.965182][T13979] batadv1: entered allmulticast mode [ 807.343729][ T842] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 807.528682][ T842] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 807.534496][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.545816][ T842] usb 5-1: config 0 descriptor?? [ 807.554267][ T842] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 807.558750][T13301] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 807.735515][T13301] usb 9-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 807.739255][T13301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.745136][T13301] usb 9-1: config 0 descriptor?? [ 807.769536][T13301] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 807.852610][T13982] hfs: unable to load iocharset "io#harset" [ 807.934072][ T842] usb 5-1: USB disconnect, device number 42 [ 808.023176][T13985] hfs: unable to load iocharset "io#harset" [ 808.352866][T14008] binder: Binderfs stats mode cannot be changed during a remount [ 808.367476][ T1337] usb 9-1: USB disconnect, device number 11 [ 809.948015][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 809.948032][ T40] audit: type=1326 audit(1763691606.438:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 809.983633][ T40] audit: type=1326 audit(1763691606.438:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 810.307555][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 811.416441][ T40] audit: type=1326 audit(1763691607.898:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.473856][T14079] binder: Binderfs stats mode cannot be changed during a remount [ 811.519726][T13333] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 811.597714][ T40] audit: type=1326 audit(1763691607.938:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.626688][ T40] audit: type=1326 audit(1763691607.938:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.639411][ T40] audit: type=1326 audit(1763691607.938:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.650177][ T40] audit: type=1326 audit(1763691607.938:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.698192][T13333] usb 8-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 811.787762][ T40] audit: type=1326 audit(1763691607.938:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.816240][T13333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.871510][ T40] audit: type=1326 audit(1763691607.938:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.898951][ T40] audit: type=1326 audit(1763691607.938:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.1715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 811.946581][T13333] usb 8-1: config 0 descriptor?? [ 811.978516][T13333] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 812.085339][T14084] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1720'. [ 812.094830][T14084] batadv1: entered allmulticast mode [ 812.227256][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.265002][T14071] hfs: unable to load iocharset "io#harset" [ 812.359340][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.395247][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.516298][ T6973] usb 8-1: USB disconnect, device number 48 [ 813.058223][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.311176][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.347835][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.427425][T13375] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 813.618464][T13375] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 813.705738][T13375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.730552][T13375] usb 5-1: config 0 descriptor?? [ 813.736940][T13375] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 814.061285][T14097] hfs: unable to load iocharset "io#harset" [ 814.147232][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.273445][T13497] usb 5-1: USB disconnect, device number 43 [ 814.812036][T14150] 9p: Unknown access argument any¨: -22 [ 814.815028][T14150] 9pnet: Tag 65535 still in use [ 814.821352][T14150] ------------[ cut here ]------------ [ 814.824168][T14150] refcount_t: underflow; use-after-free. [ 814.845571][T14150] WARNING: CPU: 0 PID: 14150 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 814.851161][T14150] Modules linked in: [ 814.852876][T14150] CPU: 0 UID: 0 PID: 14150 Comm: syz.4.1732 Not tainted syzkaller #0 PREEMPT(full) [ 814.856052][T14150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 814.875483][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.878119][T14150] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 814.880811][T14150] Code: ff 89 de e8 d8 75 1a fd 84 db 0f 85 66 ff ff ff e8 eb 7a 1a fd c6 05 52 f9 c8 0b 01 90 48 c7 c7 c0 c6 ef 8b e8 07 fe d8 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 c8 7a 1a fd 0f b6 1d 2d f9 c8 0b 31 [ 814.900750][T14150] RSP: 0000:ffffc90002dbf950 EFLAGS: 00010286 [ 814.906287][T14150] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90028d70000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 814.917012][T14150] RDX: 0000000000080000 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 814.935138][T14150] RBP: ffff88804f515dc8 R08: 0000000000000001 R09: 0000000000000000 [ 814.940403][T14150] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804f515dc8 [ 814.944166][T14150] R13: ffff88805cc02c00 R14: dffffc0000000000 R15: 1ffff920005b7f35 [ 814.948951][T14150] FS: 0000000000000000(0000) GS:ffff88809780d000(0063) knlGS:00000000f54d6b40 [ 814.967971][T14150] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 814.970551][T14150] CR2: 00007f35d4681b4c CR3: 000000004a958000 CR4: 0000000000352ef0 [ 814.973334][T14150] Call Trace: [ 814.974715][T14150] [ 814.976097][T14150] p9_req_put+0x1ec/0x250 [ 814.977938][T14150] p9_client_destroy+0x22b/0x480 [ 814.986554][T14150] ? __pfx_p9_client_destroy+0x10/0x10 [ 814.989946][T14150] ? rcu_is_watching+0x12/0xc0 [ 814.994009][T14150] ? v9fs_session_init+0xd30/0x1a80 [ 815.005809][T14150] v9fs_session_init+0xbab/0x1a80 [ 815.015894][T14150] ? __pfx_v9fs_session_init+0x10/0x10 [ 815.018371][T14150] v9fs_mount+0xc5/0xa90 [ 815.020562][T14150] ? rcu_is_watching+0x12/0xc0 [ 815.023470][T14150] ? __pfx_v9fs_mount+0x10/0x10 [ 815.036946][T14150] ? aa_get_newest_label+0xd2/0x250 [ 815.040051][T14150] ? apparmor_capable+0x114/0x1d0 [ 815.042224][T14150] ? __pfx_v9fs_mount+0x10/0x10 [ 815.044573][T14150] legacy_get_tree+0x10c/0x220 [ 815.062888][T14150] vfs_get_tree+0x8e/0x340 [ 815.064920][T14150] path_mount+0x7b9/0x23a0 [ 815.067343][T14150] ? __pfx_path_mount+0x10/0x10 [ 815.070681][T14150] ? putname+0x154/0x1a0 [ 815.073368][T14150] ? putname+0x154/0x1a0 [ 815.101334][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.120681][T14150] ? __ia32_sys_mount+0x291/0x310 [ 815.132282][T14150] __ia32_sys_mount+0x291/0x310 [ 815.134520][T14150] ? __pfx___ia32_sys_mount+0x10/0x10 [ 815.137514][T14150] ? rcu_is_watching+0x12/0xc0 [ 815.140510][T14150] __do_fast_syscall_32+0x7c/0x300 [ 815.143345][T14150] do_fast_syscall_32+0x32/0x80 [ 815.145492][T14150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.148380][T14150] RIP: 0023:0xf7fe6579 [ 815.150254][T14150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 815.158966][T14150] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 815.172435][T14150] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 815.176501][T14150] RDX: 0000000080000140 RSI: 0000000000000002 RDI: 0000000080000300 [ 815.205281][T14150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.209392][T14150] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 815.212997][T14150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.240622][T14150] [ 815.242089][T14150] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 815.245168][T14150] CPU: 0 UID: 0 PID: 14150 Comm: syz.4.1732 Not tainted syzkaller #0 PREEMPT(full) [ 815.249241][T14150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 815.255036][T14150] Call Trace: [ 815.256668][T14150] [ 815.258136][T14150] dump_stack_lvl+0x3d/0x1f0 [ 815.260210][T14150] vpanic+0x640/0x6f0 [ 815.261898][T14150] ? refcount_warn_saturate+0x14a/0x210 [ 815.264476][T14150] panic+0xca/0xd0 [ 815.266252][T14150] ? __pfx_panic+0x10/0x10 [ 815.274628][T14150] check_panic_on_warn+0xab/0xb0 [ 815.277126][T14150] __warn+0xf6/0x3c0 [ 815.286368][T14150] ? preempt_schedule_notrace+0x62/0xe0 [ 815.289428][T14150] ? refcount_warn_saturate+0x14a/0x210 [ 815.292461][T14150] report_bug+0x3c3/0x580 [ 815.294385][T14150] ? refcount_warn_saturate+0x14a/0x210 [ 815.307391][T14150] handle_bug+0x184/0x210 [ 815.309520][T14150] exc_invalid_op+0x17/0x50 [ 815.311553][T14150] asm_exc_invalid_op+0x1a/0x20 [ 815.313615][T14150] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 815.318045][T14150] Code: ff 89 de e8 d8 75 1a fd 84 db 0f 85 66 ff ff ff e8 eb 7a 1a fd c6 05 52 f9 c8 0b 01 90 48 c7 c7 c0 c6 ef 8b e8 07 fe d8 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 c8 7a 1a fd 0f b6 1d 2d f9 c8 0b 31 [ 815.346410][T14150] RSP: 0000:ffffc90002dbf950 EFLAGS: 00010286 [ 815.349207][T14150] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90028d70000 [ 815.356938][T14150] RDX: 0000000000080000 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 815.380916][T14150] RBP: ffff88804f515dc8 R08: 0000000000000001 R09: 0000000000000000 [ 815.390759][T14150] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804f515dc8 [ 815.401149][T14150] R13: ffff88805cc02c00 R14: dffffc0000000000 R15: 1ffff920005b7f35 [ 815.404440][T14150] ? __warn_printk+0x1a5/0x350 [ 815.406715][T14150] p9_req_put+0x1ec/0x250 [ 815.430911][T14150] p9_client_destroy+0x22b/0x480 [ 815.432898][T14150] ? __pfx_p9_client_destroy+0x10/0x10 [ 815.434944][T14150] ? rcu_is_watching+0x12/0xc0 [ 815.436957][T14150] ? v9fs_session_init+0xd30/0x1a80 [ 815.449541][T14150] v9fs_session_init+0xbab/0x1a80 [ 815.451619][T14150] ? __pfx_v9fs_session_init+0x10/0x10 [ 815.453807][T14150] v9fs_mount+0xc5/0xa90 [ 815.455791][T14150] ? rcu_is_watching+0x12/0xc0 [ 815.458064][T14150] ? __pfx_v9fs_mount+0x10/0x10 [ 815.470748][T14150] ? aa_get_newest_label+0xd2/0x250 [ 815.473490][T14150] ? apparmor_capable+0x114/0x1d0 [ 815.475724][T14150] ? __pfx_v9fs_mount+0x10/0x10 [ 815.477704][T14150] legacy_get_tree+0x10c/0x220 [ 815.489932][T14150] vfs_get_tree+0x8e/0x340 [ 815.491706][T14150] path_mount+0x7b9/0x23a0 [ 815.493437][T14150] ? __pfx_path_mount+0x10/0x10 [ 815.495227][T14150] ? putname+0x154/0x1a0 [ 815.499550][T14150] ? putname+0x154/0x1a0 [ 815.501258][T14150] ? __ia32_sys_mount+0x291/0x310 [ 815.503380][T14150] __ia32_sys_mount+0x291/0x310 [ 815.505621][T14150] ? __pfx___ia32_sys_mount+0x10/0x10 [ 815.524373][T14150] ? rcu_is_watching+0x12/0xc0 [ 815.526466][T14150] __do_fast_syscall_32+0x7c/0x300 [ 815.529558][T14150] do_fast_syscall_32+0x32/0x80 [ 815.533239][T14150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.539450][T14150] RIP: 0023:0xf7fe6579 [ 815.548762][T14150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 815.558404][T14150] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 815.564407][T14150] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 815.569241][T14150] RDX: 0000000080000140 RSI: 0000000000000002 RDI: 0000000080000300 [ 815.572968][T14150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.577239][T14150] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 815.582125][T14150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.586434][T14150] [ 815.589415][T14150] Kernel Offset: disabled [ 815.592924][T14150] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:15:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269d55 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc90002dbf2f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adc5da0 R15=ffffffff85269cf0 RIP=ffffffff85269d7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809780d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f35d4681b4c CR3=000000004a958000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000001ee83d60148 RBX=ffff88802b323a00 RCX=00000000000006e0 RDX=00000000000001ee RSI=ffff88802b323a00 RDI=0000000000000880 RBP=0000000000000880 RSP=ffffc9000771fa58 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=0000000000000019 R15=ffff88802b327c80 RIP=ffffffff8168ddd5 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809790d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbe768f4440 CR3=000000005fb4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff93a6d6b4 RBP=ffff88804344e000 RSP=ffffc90000538f30 R8 =0000000000000001 R9 =fffff520000a71d4 R10=0000000000000003 R11=0000000000000001 R12=0000000000204000 R13=0000000000000016 R14=ffff88804344e080 R15=dffffc0000000000 RIP=ffffffff8169996e RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888097a0d000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000063b2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000006287cd RBX=0000000000000003 RCX=ffffffff8b5da2a9 RDX=0000000000000000 RSI=ffffffff8da292a4 RDI=ffffffff8bf078c0 RBP=ffffed1003767000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bb38000 R14=ffffffff90824ad0 R15=0000000000000000 RIP=ffffffff8b5d8d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002680 CR3=0000000056d47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000