last executing test programs: 28m32.410696265s ago: executing program 32 (id=22): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 22m36.268725703s ago: executing program 33 (id=1331): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 22m27.316322789s ago: executing program 34 (id=1334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'erspan0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, 0x8, 0x0, 0x14}, 0x10, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x24000000}, 0x40) dup(0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x8b4b7b3ac1bafa07, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xbab4, 0x80, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) r9 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x40000000, 0x10100, 0x0, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r12, 0x0, 0x0, 0x0, 0x20000001, 0x1}) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19m35.601867941s ago: executing program 35 (id=1576): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x400700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4301, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) 19m20.344966172s ago: executing program 36 (id=1609): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) unshare(0x6a040000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000003100)={0x2020}, 0x2020) 19m11.825693945s ago: executing program 37 (id=1618): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x80, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18m4.504327997s ago: executing program 38 (id=1639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x850) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000000) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) 17m44.906421875s ago: executing program 6 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000190001000000000000"], 0x2c}}, 0x0) 17m44.612098015s ago: executing program 6 (id=1691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) mmap(&(0x7f00000ee000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x23495000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x20000, 0x1, 0x1, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x68, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xa}}) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) 17m42.930104249s ago: executing program 6 (id=1693): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x200, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xa4, 0x30, 0x48b, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ctinfo={0x38, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100), 0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 17m36.858379978s ago: executing program 6 (id=1704): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8ce02, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x8, 0x9, 0x5, 0x8, 0x3, 0xd612, 0x8, 0x10001, 0x8000004, 0xfdfffffb, 0x10001, 0xb4b, 0x1, 0x7, 0x4, 0x10001, 0x2d, 0x5, 0x495, 0x7651, 0xfffffffc, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0x3, 0x401, 0x0, 0x7fff, 0xffffffff, 0xbbb4]}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x100, 0xd9}, 0x8) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0xfffffff8, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000001c0)={@local, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffffffffffff, "37e9952b703d3e1705857fc3e7f5c01723cfc7a41bb6dc899591722e501e5e4f", 0x3, 0x1ff, 0x4, 0x6}, 0x3c) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c}}], 0x20, 0x20008880}}], 0x2, 0x4c054) 17m26.740446454s ago: executing program 8 (id=1715): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e916", 0x78}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751", 0xb1}, {&(0x7f0000001400)="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", 0x7b0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608", 0x46}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17m26.003402469s ago: executing program 8 (id=1717): semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) 17m23.035829411s ago: executing program 6 (id=1720): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0x80184132, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 17m22.863380148s ago: executing program 8 (id=1721): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x67, 0x2, @broadcast, @local, {[@rr={0x7, 0x23, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @multicast1, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x9d, [@multicast1]}]}}}}}}}, 0x0) 17m21.195304735s ago: executing program 8 (id=1724): mount$fuse(0x0, 0x0, 0x0, 0x102004, &(0x7f00000001c0)=ANY=[@ANYRESHEX]) r0 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x5, 0x4, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 17m21.103607636s ago: executing program 6 (id=1725): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) bind$isdn_base(r0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 17m20.958553873s ago: executing program 8 (id=1726): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0xc, @multicast1, 0x4e21, 0x4, 'lblcr\x00', 0x2, 0x4, 0x57}, 0x2c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m19.555823659s ago: executing program 8 (id=1728): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="9cb1388bb263ab51e60ebba3ed87804434693cf984f6749af8b8a6aaf7d34365df9c8c6560b689ff48d47fe5b45f8e442c5cec89a67cddfa95e6c4cc9c6335f2350a0e2166a4c127c17fa5be67555a7b8ce7c95767d19eac3e22331cadea57dab06dc57949399168647caecbe4a93292183a02ef08a81cc9ec612d2f740d19314f06ba5f00"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0xc080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d00390000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) r6 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16, @ANYRESDEC], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5420) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x3, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x34, 0xe8, 0x81}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x8, 0xc7, 0x4, 0xc7, 0x5}, 0x7d, &(0x7f0000000480)={0x5, 0xf, 0x7d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x0, 0x3, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7fddd49c065067aa8069ad8514c68aa0"}, @generic={0x2f, 0x10, 0x2, "ac4753cfc0a12c96e9ae09e0e88d69aa703f4547c59eb1dc252101a50c2438eed97cbdb51c5ad06433b8a415"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x691e, 0xf000, 0xa02, [0x3f, 0x0, 0x1800f, 0xff3f00, 0x3ff0]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x422}}]}) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)='+', 0x1}], 0x2) 17m5.62455838s ago: executing program 39 (id=1725): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) bind$isdn_base(r0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 17m4.09688208s ago: executing program 40 (id=1728): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="9cb1388bb263ab51e60ebba3ed87804434693cf984f6749af8b8a6aaf7d34365df9c8c6560b689ff48d47fe5b45f8e442c5cec89a67cddfa95e6c4cc9c6335f2350a0e2166a4c127c17fa5be67555a7b8ce7c95767d19eac3e22331cadea57dab06dc57949399168647caecbe4a93292183a02ef08a81cc9ec612d2f740d19314f06ba5f00"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0xc080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d00390000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) r6 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16, @ANYRESDEC], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5420) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x3, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x34, 0xe8, 0x81}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x8, 0xc7, 0x4, 0xc7, 0x5}, 0x7d, &(0x7f0000000480)={0x5, 0xf, 0x7d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x0, 0x3, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7fddd49c065067aa8069ad8514c68aa0"}, @generic={0x2f, 0x10, 0x2, "ac4753cfc0a12c96e9ae09e0e88d69aa703f4547c59eb1dc252101a50c2438eed97cbdb51c5ad06433b8a415"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x691e, 0xf000, 0xa02, [0x3f, 0x0, 0x1800f, 0xff3f00, 0x3ff0]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x422}}]}) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)='+', 0x1}], 0x2) 16m12.209242678s ago: executing program 3 (id=1793): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 16m9.226143955s ago: executing program 3 (id=1797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) mmap(&(0x7f00000ee000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x23495000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) r8 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r9 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x20000, 0x1, 0x1, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x68, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xa}}) io_uring_enter(r9, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) 16m8.166781829s ago: executing program 3 (id=1798): mmap(&(0x7f0000ec5000/0x3000)=nil, 0x3000, 0x1000004, 0x810, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002180)={'sit0\x00', 0x0}) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x8) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = gettid() r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigqueueinfo(r6, 0xb, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffd}) r8 = syz_open_dev$video4linux(&(0x7f0000001d80), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000000)={0x2de, 0x0, 0x2014, 0x0, 0xfffffffc, 0x5, 0xfffffffd}) 16m7.728431019s ago: executing program 3 (id=1799): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket(0x2, 0x80805, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000180)=0xc9, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r3 = syz_io_uring_setup(0x10d6, &(0x7f0000000340)={0x0, 0x311, 0x0, 0x2, 0x34f}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x800000000000004, 0xc0200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) sendfile(r0, r0, &(0x7f0000000440)=0xe7, 0x8) 16m6.747746358s ago: executing program 3 (id=1800): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000680)}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 16m5.723448877s ago: executing program 3 (id=1801): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x28040041, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x5ba7, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x4, 0x11e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) fallocate(0xffffffffffffffff, 0x11, 0x2000, 0x7c000) sendmsg$inet(r0, 0x0, 0x8c0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 15m49.745878653s ago: executing program 41 (id=1801): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x28040041, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x5ba7, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x4, 0x11e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) fallocate(0xffffffffffffffff, 0x11, 0x2000, 0x7c000) sendmsg$inet(r0, 0x0, 0x8c0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 13m42.115712782s ago: executing program 9 (id=1918): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket$inet6_sctp(0xa, 0x1, 0x84) 13m41.909891678s ago: executing program 9 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) mmap(&(0x7f00000ee000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x23495000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3a) r7 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x20000, 0x1, 0x1, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x68, 0x0, @fd, 0x0, 0x0, 0x0, {0xa}}) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) 13m40.894872225s ago: executing program 9 (id=1920): syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x2008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101842, 0x23) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r6}, 0x10) 13m36.702834247s ago: executing program 9 (id=1921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) 13m36.586207154s ago: executing program 9 (id=1922): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$inet6(r3, 0x0, 0x0, 0x8008801) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 13m35.284011412s ago: executing program 9 (id=1923): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 13m19.41646114s ago: executing program 42 (id=1923): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 8m44.388152261s ago: executing program 0 (id=2181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001b40), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250f000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 8m43.386883295s ago: executing program 0 (id=2182): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) alarm(0x2) 8m41.551699966s ago: executing program 0 (id=2185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe, {0x6, 0x0, 0xfcff}}, 0x14}, 0x1, 0x0, 0x0, 0x800a0}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x8}, 0x20, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x2, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe65d, 0x5, 0x100007, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0xd325, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x3, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x6, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0xb, 0x4, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e5, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf5, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x7, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x40005, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0xa, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0xc, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) open(0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @bcast]}, 0x48) open(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) 8m40.547928131s ago: executing program 0 (id=2188): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 8m40.499801635s ago: executing program 0 (id=2190): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x281, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8m38.73992953s ago: executing program 0 (id=2193): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffc, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3ff, 0xb, 0x0, 0x5, 0x2, 0x2, 0x3], 0x3000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@arm64={0x8, 0x8, 0x0, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m38.425327432s ago: executing program 43 (id=2193): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffc, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3ff, 0xb, 0x0, 0x5, 0x2, 0x2, 0x3], 0x3000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@arm64={0x8, 0x8, 0x0, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.229105611s ago: executing program 4 (id=2713): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r1 = inotify_init1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x9a, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0x8}, 0x18) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 1m46.922374489s ago: executing program 4 (id=2715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) 1m37.309801689s ago: executing program 4 (id=2733): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000020e000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000017e000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00004cc000/0x3000)=nil, 0x0}, 0x68) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000"], 0x1c}], 0x1}, 0x0) r1 = io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1f410, 0x1, 0x19c}) io_uring_enter(r1, 0x2cbe, 0x366, 0x12, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x8910, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@remote}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m35.098823604s ago: executing program 4 (id=2736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000140)) 1m30.755505664s ago: executing program 4 (id=2743): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)={0x0, 0x8, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m26.8977264s ago: executing program 4 (id=2748): mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000019380), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) 1m11.345822866s ago: executing program 44 (id=2748): mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000019380), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) 19.54977513s ago: executing program 1 (id=2829): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_setup(0x437a, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14.03453031s ago: executing program 1 (id=2837): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)={0x0, 0x8, 0x2, '5E'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 12.127895447s ago: executing program 7 (id=2838): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) unshare(0x2040400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f54080006"], 0x60}}, 0x0) 11.574958427s ago: executing program 2 (id=2840): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11.227722353s ago: executing program 5 (id=2841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) 11.053393624s ago: executing program 2 (id=2842): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x26, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000480)=@ringbuf={{}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') pread64(r4, &(0x7f0000000c00)=""/59, 0x3b, 0x545) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 11.035815576s ago: executing program 1 (id=2843): r0 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x103180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000240)={0x8000001, 0x0, 0x0, 0x0, 0x3}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c000000030000000000000000000003000000000400000004000000800000000100000000000007000000000400000000000008020000001000000000000008010000000f000000000000110400200006000000010000000000001105000000010000000b00000000000012010000000800000000000007000000000800000000000007000000000b00000000000008050000000000"], &(0x7f0000000000)=""/72, 0xa7, 0x48, 0x0, 0x4, 0x10000}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) 10.782003411s ago: executing program 7 (id=2844): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.771551748s ago: executing program 2 (id=2845): socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0xf7) dup3(0xffffffffffffffff, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, 0xfffffffffffffffe) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x27, 0xff, 0xf}, 0x2c) getpid() 8.691133645s ago: executing program 5 (id=2846): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_submit(0x0, 0x3, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r7}, 0x0, 0x0]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0ffffe0b6c4453e76fd83548d74042a84c652bfe52c853c95b4dda5e6b321a8ccab70907ba4128de81bb7ca512250e2a10a8d930db8fffcdc0d7ce36603a9e85560bf08b91b1e08f97f6fe61a589de882f9d0c94694193fd5b0d1d1c413c7a631e74fd7cc1c0b6853bdfd844d8e703bd9803df6bfd6d9bab120b26a40749ecc42a13c7cea61b9e3ddc884d59d51b73c551"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 7.786569263s ago: executing program 2 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0xee00, 0x4000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) sendmsg$nl_route(r0, 0x0, 0x0) 7.131514471s ago: executing program 7 (id=2848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) 6.27339988s ago: executing program 2 (id=2849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) 5.965212247s ago: executing program 2 (id=2850): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4.986145794s ago: executing program 5 (id=2851): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.598539175s ago: executing program 1 (id=2852): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000240)={{}, "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"}) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000001240)) 4.531771773s ago: executing program 5 (id=2853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 4.423918636s ago: executing program 7 (id=2854): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x26, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000480)=@ringbuf={{}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') pread64(r4, &(0x7f0000000c00)=""/59, 0x3b, 0x545) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 4.303803695s ago: executing program 1 (id=2855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) 1.371943823s ago: executing program 5 (id=2856): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.166389297s ago: executing program 5 (id=2857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x3, '\b'}]}}, 0x0}, 0x0) 838.037379ms ago: executing program 1 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0xee00, 0x4000) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) sendmsg$nl_route(r0, 0x0, 0x0) 837.474429ms ago: executing program 7 (id=2859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) 0s ago: executing program 7 (id=2860): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffa) socket(0xa, 0x80002, 0x10006) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) kernel console output (not intermixed with test programs): 763992][T13782] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1432.788049][T13782] usb 6-1: device descriptor read/8, error -71 [ 1432.913901][T13782] usb usb6-port1: unable to enumerate USB device [ 1433.086699][T14793] Bluetooth: hci1: command tx timeout [ 1433.109157][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.109175][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.109207][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.119527][T15847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.123674][T15834] team0: Port device team_slave_0 added [ 1433.160153][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.160175][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.160210][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.170409][T15847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.173108][T15834] team0: Port device team_slave_1 added [ 1433.605304][T15834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.605325][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.605354][T15834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.609188][T15847] team0: Port device team_slave_0 added [ 1433.694054][T15834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.694073][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.694104][T15834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.698173][T15847] team0: Port device team_slave_1 added [ 1434.087192][T15780] hsr_slave_0: entered promiscuous mode [ 1434.088809][T15780] hsr_slave_1: entered promiscuous mode [ 1434.090104][T15780] debugfs: 'hsr0' already exists in 'hsr' [ 1434.090132][T15780] Cannot create hsr debugfs directory [ 1434.277407][T15847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.277427][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.277458][T15847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.533368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.953863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.175366][T14793] Bluetooth: hci1: command tx timeout [ 1435.801708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.824514][T15847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.824534][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.824565][T15847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.746123][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.878160][T15834] hsr_slave_0: entered promiscuous mode [ 1436.880060][T15834] hsr_slave_1: entered promiscuous mode [ 1436.881265][T15834] debugfs: 'hsr0' already exists in 'hsr' [ 1436.881293][T15834] Cannot create hsr debugfs directory [ 1437.174868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1437.244392][T14793] Bluetooth: hci1: command tx timeout [ 1437.707980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1437.830088][T15847] hsr_slave_0: entered promiscuous mode [ 1437.831626][T15847] hsr_slave_1: entered promiscuous mode [ 1437.832661][T15847] debugfs: 'hsr0' already exists in 'hsr' [ 1437.832689][T15847] Cannot create hsr debugfs directory [ 1437.861255][ T5883] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1438.003901][ T5883] usb 6-1: device descriptor read/64, error -71 [ 1438.244801][ T5883] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1438.383996][ T5883] usb 6-1: device descriptor read/64, error -71 [ 1438.494245][ T5883] usb usb6-port1: attempt power cycle [ 1438.737408][T15996] chnl_net:caif_netlink_parms(): no params data found [ 1438.833954][ T5883] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1438.856023][ T5883] usb 6-1: device descriptor read/8, error -71 [ 1439.093975][ T5883] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1439.123516][ T5883] usb 6-1: device descriptor read/8, error -71 [ 1439.234665][ T5883] usb usb6-port1: unable to enumerate USB device [ 1440.202098][T15996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.202282][T15996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.202466][T15996] bridge_slave_0: entered allmulticast mode [ 1440.206557][T15996] bridge_slave_0: entered promiscuous mode [ 1440.222187][T15996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.222344][T15996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.222692][T15996] bridge_slave_1: entered allmulticast mode [ 1440.230387][T15996] bridge_slave_1: entered promiscuous mode [ 1440.592085][T15996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.629678][T15996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.880668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.019935][T16134] No control pipe specified [ 1441.781592][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.942604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.064443][T15996] team0: Port device team_slave_0 added [ 1442.070654][T15996] team0: Port device team_slave_1 added [ 1442.206872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.174090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.235739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.474530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.664930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.758409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.004701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.201641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.323076][ T37] bridge_slave_1: left allmulticast mode [ 1444.323111][ T37] bridge_slave_1: left promiscuous mode [ 1444.323397][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.444956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.565634][ T37] bridge_slave_0: left allmulticast mode [ 1444.565660][ T37] bridge_slave_0: left promiscuous mode [ 1444.565868][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.395176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.428662][ T37] bridge_slave_1: left allmulticast mode [ 1445.428695][ T37] bridge_slave_1: left promiscuous mode [ 1445.428948][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.715478][ T37] bridge_slave_0: left allmulticast mode [ 1445.715504][ T37] bridge_slave_0: left promiscuous mode [ 1445.715690][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.807061][ T37] bridge_slave_1: left allmulticast mode [ 1445.807094][ T37] bridge_slave_1: left promiscuous mode [ 1445.807347][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.867187][ T37] bridge_slave_0: left allmulticast mode [ 1445.867222][ T37] bridge_slave_0: left promiscuous mode [ 1445.867474][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.135562][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.219912][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.296291][ T37] bond0 (unregistering): Released all slaves [ 1447.824622][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.904655][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.966314][ T37] bond0 (unregistering): Released all slaves [ 1449.724967][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.786710][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.806801][ T37] bond0 (unregistering): Released all slaves [ 1449.845447][T15996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.845461][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.845482][T15996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.035772][T15996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.035793][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.035824][T15996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.702298][T16157] ALSA: mixer_oss: invalid OSS volume '' [ 1450.721219][T10372] IPVS: starting estimator thread 0... [ 1450.864529][T16159] IPVS: using max 7 ests per chain, 16800 per kthread [ 1451.123232][T15996] hsr_slave_0: entered promiscuous mode [ 1451.125502][T15996] hsr_slave_1: entered promiscuous mode [ 1451.126659][T15996] debugfs: 'hsr0' already exists in 'hsr' [ 1451.126689][T15996] Cannot create hsr debugfs directory [ 1453.483920][ T37] hsr_slave_0: left promiscuous mode [ 1453.508181][ T37] hsr_slave_1: left promiscuous mode [ 1453.510406][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.545033][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.084093][ T37] hsr_slave_0: left promiscuous mode [ 1454.103954][ T37] hsr_slave_1: left promiscuous mode [ 1454.105005][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.134977][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.234121][ T37] hsr_slave_0: left promiscuous mode [ 1454.254159][ T37] hsr_slave_1: left promiscuous mode [ 1454.255195][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.277350][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.026777][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1455.154773][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1456.474855][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1456.605342][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1458.194590][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1458.414933][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1461.379644][T13797] hid-generic 0005:16BF:5505.0018: unknown main item tag 0x0 [ 1461.497542][T13797] hid-generic 0005:16BF:5505.0018: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1464.053031][T15780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1464.294314][T15780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1464.509420][T15780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1465.464464][T15780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1465.881854][T15780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.900701][T15780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.960600][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.960851][T11634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.967882][T15834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1466.501669][T15834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1466.520545][T15834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.563315][T15834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1466.603453][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.603655][T11634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.792887][T15834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.953354][T15834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.106711][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.106902][ T3948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.158843][T15847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1470.189786][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.189905][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.190575][ T37] bridge_slave_1: left allmulticast mode [ 1470.190596][ T37] bridge_slave_1: left promiscuous mode [ 1470.190761][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.309881][ T37] bridge_slave_0: left allmulticast mode [ 1470.309912][ T37] bridge_slave_0: left promiscuous mode [ 1470.310114][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.134694][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.169312][T13901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1471.175877][T13901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1471.186715][T13901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1471.202484][T13901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1471.211434][T13901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1471.286205][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.368826][ T37] bond0 (unregistering): Released all slaves [ 1471.433179][T15847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1472.982887][T15847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1472.996306][T16251] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1472.996306][T16251] program syz.5.2359 not setting count and/or reply_len properly [ 1473.095747][T15847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1473.323920][T13901] Bluetooth: hci2: command tx timeout [ 1473.353945][ T37] hsr_slave_0: left promiscuous mode [ 1473.374023][ T37] hsr_slave_1: left promiscuous mode [ 1473.375041][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.420644][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.285292][T14793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1474.289632][T14793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1474.290922][T14793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1474.299679][T14793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1474.302891][T14793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1474.336450][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1474.534570][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1475.266830][T15847] kthread_run failed with err -4 [ 1475.403988][T13901] Bluetooth: hci2: command tx timeout [ 1475.696621][T16242] lo speed is unknown, defaulting to 1000 [ 1475.702922][T15996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1476.333934][T16242] wlan0 speed is unknown, defaulting to 1000 [ 1476.445531][T13901] Bluetooth: hci3: command tx timeout [ 1476.715254][T14793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1476.719253][T14793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1476.721177][T14793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1476.722981][T14793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1476.760208][T14793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1477.498949][T14793] Bluetooth: hci2: command tx timeout [ 1477.884005][T15996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1477.973183][T15996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1478.018151][T16258] lo speed is unknown, defaulting to 1000 [ 1478.018803][T15996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1478.150099][T16258] wlan0 speed is unknown, defaulting to 1000 [ 1478.488083][T16270] lo speed is unknown, defaulting to 1000 [ 1478.520584][T16270] wlan0 speed is unknown, defaulting to 1000 [ 1478.524432][T13901] Bluetooth: hci3: command tx timeout [ 1479.579364][T13901] Bluetooth: hci2: command tx timeout [ 1479.816088][T13901] Bluetooth: hci4: command tx timeout [ 1480.985399][T13901] Bluetooth: hci3: command tx timeout [ 1481.477598][T16242] chnl_net:caif_netlink_parms(): no params data found [ 1481.884317][T13901] Bluetooth: hci4: command tx timeout [ 1483.347799][T13901] Bluetooth: hci3: command tx timeout [ 1483.415315][T16258] chnl_net:caif_netlink_parms(): no params data found [ 1483.963985][T13901] Bluetooth: hci4: command tx timeout [ 1486.114434][T13901] Bluetooth: hci4: command tx timeout [ 1486.425794][T16270] chnl_net:caif_netlink_parms(): no params data found [ 1486.909992][T16351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1487.515249][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.515347][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.515555][T16242] bridge_slave_0: entered allmulticast mode [ 1487.517479][T16242] bridge_slave_0: entered promiscuous mode [ 1487.690533][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.690691][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.690862][T16242] bridge_slave_1: entered allmulticast mode [ 1487.724028][T16242] bridge_slave_1: entered promiscuous mode [ 1489.104438][T16258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.104584][T16258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.105211][T16258] bridge_slave_0: entered allmulticast mode [ 1489.108238][T16258] bridge_slave_0: entered promiscuous mode [ 1489.619931][T16258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.620086][T16258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.620353][T16258] bridge_slave_1: entered allmulticast mode [ 1489.659673][T16258] bridge_slave_1: entered promiscuous mode [ 1489.780245][T14793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1489.793479][T14793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1489.795230][T14793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1489.797688][T14793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1489.799075][T14793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1489.844632][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.844709][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.865560][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.980795][T14793] Bluetooth: hci5: command tx timeout [ 1493.030251][T16270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.030419][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.030686][T16270] bridge_slave_0: entered allmulticast mode [ 1493.037251][T16270] bridge_slave_0: entered promiscuous mode [ 1493.117593][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.286956][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.287165][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.287400][T16270] bridge_slave_1: entered allmulticast mode [ 1493.290510][T16270] bridge_slave_1: entered promiscuous mode [ 1493.647663][T16258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.742314][T16258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.043508][T14793] Bluetooth: hci5: command tx timeout [ 1495.716155][T16242] team0: Port device team_slave_0 added [ 1495.869478][T16270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.898129][T16395] sp0: Synchronizing with TNC [ 1495.906834][T16242] team0: Port device team_slave_1 added [ 1495.978548][T16270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.211675][T16258] team0: Port device team_slave_0 added [ 1496.544910][T16373] lo speed is unknown, defaulting to 1000 [ 1496.549992][T16258] team0: Port device team_slave_1 added [ 1497.528928][T14793] Bluetooth: hci5: command tx timeout [ 1497.567908][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.567928][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.567954][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.568389][T16373] wlan0 speed is unknown, defaulting to 1000 [ 1497.959392][T16403] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1497.959392][T16403] program syz.5.2389 not setting count and/or reply_len properly [ 1499.070064][T16270] team0: Port device team_slave_0 added [ 1499.072892][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.072909][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.072931][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.564391][T14793] Bluetooth: hci5: command tx timeout [ 1500.328199][T16270] team0: Port device team_slave_1 added [ 1501.144091][T16258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.144111][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.144187][T16258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.375302][T16258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.375320][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.375345][T16258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.528579][T16270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.528600][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.528631][T16270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.793631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1501.885708][T16270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.885727][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.885758][T16270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.934418][ T988] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1501.989711][T16242] hsr_slave_0: entered promiscuous mode [ 1501.990914][T16242] hsr_slave_1: entered promiscuous mode [ 1501.991632][T16242] debugfs: 'hsr0' already exists in 'hsr' [ 1501.991656][T16242] Cannot create hsr debugfs directory [ 1502.084123][ T988] usb 6-1: device descriptor read/64, error -71 [ 1502.197567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1502.323965][ T988] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1502.454152][ T988] usb 6-1: device descriptor read/64, error -71 [ 1502.482577][T16258] hsr_slave_0: entered promiscuous mode [ 1502.483934][T16258] hsr_slave_1: entered promiscuous mode [ 1502.485153][T16258] debugfs: 'hsr0' already exists in 'hsr' [ 1502.485184][T16258] Cannot create hsr debugfs directory [ 1502.564437][ T988] usb usb6-port1: attempt power cycle [ 1502.730784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1502.904950][ T988] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1502.925002][ T988] usb 6-1: device descriptor read/8, error -71 [ 1502.958754][T16270] hsr_slave_0: entered promiscuous mode [ 1502.959868][T16270] hsr_slave_1: entered promiscuous mode [ 1502.960582][T16270] debugfs: 'hsr0' already exists in 'hsr' [ 1502.960607][T16270] Cannot create hsr debugfs directory [ 1503.177384][ C0] vkms_vblank_simulate: vblank timer overrun [ 1503.177709][ T988] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1503.201260][ T988] usb 6-1: device descriptor read/8, error -71 [ 1503.304366][ T988] usb usb6-port1: unable to enumerate USB device [ 1504.264393][T16373] chnl_net:caif_netlink_parms(): no params data found [ 1504.474913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.323904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.366280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.651179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.941600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1506.100140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1506.726877][ C0] vkms_vblank_simulate: vblank timer overrun [ 1506.900770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.059751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.138134][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.138289][T16373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.138520][T16373] bridge_slave_0: entered allmulticast mode [ 1507.140718][T16373] bridge_slave_0: entered promiscuous mode [ 1507.142702][T16438] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2399'. [ 1507.193375][T16373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.193523][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.208333][T16373] bridge_slave_1: entered allmulticast mode [ 1507.211438][T16373] bridge_slave_1: entered promiscuous mode [ 1507.475332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.944032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.125164][T16373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.131076][T16373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.214110][ T988] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1509.280179][T16373] team0: Port device team_slave_0 added [ 1509.287707][T16373] team0: Port device team_slave_1 added [ 1509.354513][ T988] usb 6-1: device descriptor read/64, error -71 [ 1509.414682][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.415014][ T37] bridge_slave_1: left allmulticast mode [ 1509.415035][ T37] bridge_slave_1: left promiscuous mode [ 1509.415267][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.496092][ T37] bridge_slave_0: left allmulticast mode [ 1509.496116][ T37] bridge_slave_0: left promiscuous mode [ 1509.496317][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.587675][ T37] bridge_slave_1: left allmulticast mode [ 1509.587701][ T37] bridge_slave_1: left promiscuous mode [ 1509.587914][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.612940][ T988] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1509.656950][ T37] bridge_slave_0: left allmulticast mode [ 1509.656982][ T37] bridge_slave_0: left promiscuous mode [ 1509.657254][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.717922][ T37] bridge_slave_1: left allmulticast mode [ 1509.717946][ T37] bridge_slave_1: left promiscuous mode [ 1509.718132][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.743901][ T988] usb 6-1: device descriptor read/64, error -71 [ 1509.785302][ T37] bridge_slave_0: left allmulticast mode [ 1509.785330][ T37] bridge_slave_0: left promiscuous mode [ 1509.785543][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.855462][ T988] usb usb6-port1: attempt power cycle [ 1510.194011][ T988] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1510.217049][ T988] usb 6-1: device descriptor read/8, error -71 [ 1510.274924][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.355128][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.416382][ T37] bond0 (unregistering): Released all slaves [ 1510.454241][ T988] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1510.476313][ T988] usb 6-1: device descriptor read/8, error -71 [ 1510.596909][ T988] usb usb6-port1: unable to enumerate USB device [ 1512.038447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.100821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.775043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.824696][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.934882][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.063849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.096849][ T37] bond0 (unregistering): Released all slaves [ 1513.445321][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.517599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.600096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.451815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.538030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.774491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.482794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.770904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.827750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.903047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.980228][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.134757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.290866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.335253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.376653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.424375][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.484363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.759648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.813009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1517.135078][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.214696][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.236809][ T37] bond0 (unregistering): Released all slaves [ 1517.639974][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2407'. [ 1517.643510][T16373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.643528][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.643559][T16373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.700768][T16373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.700786][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.700817][T16373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.454405][T16373] hsr_slave_0: entered promiscuous mode [ 1520.465066][T16373] hsr_slave_1: entered promiscuous mode [ 1520.466214][T16373] debugfs: 'hsr0' already exists in 'hsr' [ 1520.466243][T16373] Cannot create hsr debugfs directory [ 1521.034226][ T37] hsr_slave_0: left promiscuous mode [ 1521.433938][ T37] hsr_slave_1: left promiscuous mode [ 1521.436423][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.475640][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.633965][ T37] hsr_slave_0: left promiscuous mode [ 1521.654949][ T37] hsr_slave_1: left promiscuous mode [ 1521.655787][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.790510][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.025096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1522.136247][ T37] hsr_slave_0: left promiscuous mode [ 1522.153904][ T37] hsr_slave_1: left promiscuous mode [ 1522.155350][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.204957][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.777658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.038556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.475666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.836563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.084298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.114661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.351552][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.475554][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1524.544091][T11156] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1524.600684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.654723][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1524.717408][T11156] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1524.717440][T11156] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1524.717463][T11156] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1524.717514][T11156] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.719871][T11156] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1524.719901][T11156] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1524.719924][T11156] usb 6-1: Product: syz [ 1524.719941][T11156] usb 6-1: Manufacturer: syz [ 1524.747284][T11156] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1524.837960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.956492][ T6094] usb 6-1: USB disconnect, device number 64 [ 1525.028100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.079709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.208482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.762622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.770974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.772627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.898630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.988034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.038277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.094880][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1527.245646][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1528.706820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.752791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.798447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.843182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.896866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.948594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.999136][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.048520][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.108073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.160613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.229907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.299416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.531658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.593763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.644147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.716653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.765087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.834170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.900356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.955696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.017718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.197833][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1530.475900][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1533.125659][T13901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.139811][T13901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.141920][T13901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.152357][T13901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.153317][T13901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1534.014807][T16528] lo speed is unknown, defaulting to 1000 [ 1534.144300][T16528] wlan0 speed is unknown, defaulting to 1000 [ 1535.179240][T14793] Bluetooth: hci1: command tx timeout [ 1535.385362][T16528] chnl_net:caif_netlink_parms(): no params data found [ 1537.180874][T13901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1537.253965][ T5803] Bluetooth: hci1: command tx timeout [ 1537.254140][T13901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1537.278910][T13901] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1537.297733][T13901] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1537.352027][T13901] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1537.538282][T16528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.538431][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.538725][T16528] bridge_slave_0: entered allmulticast mode [ 1537.542118][T16528] bridge_slave_0: entered promiscuous mode [ 1537.623949][T16528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.624098][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.624341][T16528] bridge_slave_1: entered allmulticast mode [ 1537.627258][T16528] bridge_slave_1: entered promiscuous mode [ 1539.137211][T13901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1539.169082][T13901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1539.171373][T13901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1539.172592][T13901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1539.173447][T13901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1539.324187][T13901] Bluetooth: hci1: command tx timeout [ 1539.488130][T13901] Bluetooth: hci6: command tx timeout [ 1539.605201][T16528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.649888][T16571] lo speed is unknown, defaulting to 1000 [ 1539.718801][T16571] wlan0 speed is unknown, defaulting to 1000 [ 1539.732080][T16528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.783951][ T6094] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1539.915210][ T6094] usb 6-1: device descriptor read/64, error -71 [ 1540.264046][ T6094] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1540.404013][ T6094] usb 6-1: device descriptor read/64, error -71 [ 1540.514351][ T6094] usb usb6-port1: attempt power cycle [ 1540.863885][ T6094] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1540.894677][ T6094] usb 6-1: device descriptor read/8, error -71 [ 1541.116890][T16528] team0: Port device team_slave_0 added [ 1541.153966][ T6094] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1541.175070][ T6094] usb 6-1: device descriptor read/8, error -71 [ 1541.195187][T16528] team0: Port device team_slave_1 added [ 1541.244068][T13901] Bluetooth: hci2: command tx timeout [ 1541.284385][ T6094] usb usb6-port1: unable to enumerate USB device [ 1541.403995][T13901] Bluetooth: hci1: command tx timeout [ 1541.573984][T13901] Bluetooth: hci6: command tx timeout [ 1541.935168][T16528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.935187][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.935219][T16528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.935886][T16585] lo speed is unknown, defaulting to 1000 [ 1541.952080][T16528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.952102][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.952136][T16528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.963109][T16585] wlan0 speed is unknown, defaulting to 1000 [ 1542.468720][T16528] hsr_slave_0: entered promiscuous mode [ 1542.470274][T16528] hsr_slave_1: entered promiscuous mode [ 1542.471519][T16528] debugfs: 'hsr0' already exists in 'hsr' [ 1542.471548][T16528] Cannot create hsr debugfs directory [ 1543.383070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.456747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.634926][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.672727][T16646] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1543.792579][T13901] Bluetooth: hci2: command tx timeout [ 1543.792618][T13901] Bluetooth: hci6: command tx timeout [ 1544.253859][ T9694] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1544.413901][ T9694] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1544.413933][ T9694] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1544.413955][ T9694] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1544.414012][ T9694] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1544.440711][ T9694] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1544.440751][ T9694] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1544.440777][ T9694] usb 6-1: Product: syz [ 1544.440794][ T9694] usb 6-1: Manufacturer: syz [ 1544.506510][ T9694] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1544.705683][ T6094] usb 6-1: USB disconnect, device number 69 [ 1544.870229][T16571] chnl_net:caif_netlink_parms(): no params data found [ 1545.523280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.804626][T14793] Bluetooth: hci6: command tx timeout [ 1545.804661][T14793] Bluetooth: hci2: command tx timeout [ 1546.034615][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.636416][T16585] chnl_net:caif_netlink_parms(): no params data found [ 1546.658314][T16571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.658476][T16571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.658734][T16571] bridge_slave_0: entered allmulticast mode [ 1546.661517][T16571] bridge_slave_0: entered promiscuous mode [ 1546.696772][T16571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.696902][T16571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.697180][T16571] bridge_slave_1: entered allmulticast mode [ 1546.706117][T16571] bridge_slave_1: entered promiscuous mode [ 1546.815701][T16373] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1547.498486][T16373] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1547.737269][T16373] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1547.780272][T16571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.886764][T13901] Bluetooth: hci2: command tx timeout [ 1547.898706][T16373] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1547.941712][T16571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.084125][ T9694] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1548.214135][ T9694] usb 6-1: device descriptor read/64, error -71 [ 1548.403395][T16571] team0: Port device team_slave_0 added [ 1548.454319][ T9694] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1548.509666][T16571] team0: Port device team_slave_1 added [ 1548.511057][T16585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.511293][T16585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.511520][T16585] bridge_slave_0: entered allmulticast mode [ 1548.552447][T16585] bridge_slave_0: entered promiscuous mode [ 1548.594051][ T9694] usb 6-1: device descriptor read/64, error -71 [ 1548.668799][T16585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.668913][T16585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.669183][T16585] bridge_slave_1: entered allmulticast mode [ 1548.672217][T16585] bridge_slave_1: entered promiscuous mode [ 1548.705215][ T9694] usb usb6-port1: attempt power cycle [ 1548.942861][T16571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.942879][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.942917][T16571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.044009][ T9694] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1549.050305][T16571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.050323][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.050352][T16571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.060327][ T37] bridge_slave_1: left allmulticast mode [ 1549.060366][ T37] bridge_slave_1: left promiscuous mode [ 1549.060687][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.065153][ T9694] usb 6-1: device descriptor read/8, error -71 [ 1549.134448][ T37] bridge_slave_0: left allmulticast mode [ 1549.134472][ T37] bridge_slave_0: left promiscuous mode [ 1549.134679][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.198205][ T37] bridge_slave_1: left allmulticast mode [ 1549.198231][ T37] bridge_slave_1: left promiscuous mode [ 1549.198428][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.255906][ T37] bridge_slave_0: left allmulticast mode [ 1549.255939][ T37] bridge_slave_0: left promiscuous mode [ 1549.256217][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.304052][ T9694] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1549.325741][ T37] bridge_slave_1: left allmulticast mode [ 1549.325775][ T37] bridge_slave_1: left promiscuous mode [ 1549.326025][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.327295][ T9694] usb 6-1: device descriptor read/8, error -71 [ 1549.395198][ T37] bridge_slave_0: left allmulticast mode [ 1549.395223][ T37] bridge_slave_0: left promiscuous mode [ 1549.395418][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.436596][ T9694] usb usb6-port1: unable to enumerate USB device [ 1549.795561][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.874916][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.936315][ T37] bond0 (unregistering): Released all slaves [ 1550.205007][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.284797][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.349795][ T37] bond0 (unregistering): Released all slaves [ 1550.861486][T14793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1550.919769][T14793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1550.933210][T14793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1550.945475][T14793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1550.946309][T14793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1551.270222][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.270278][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.414709][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.494829][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.557583][ T37] bond0 (unregistering): Released all slaves [ 1551.598254][T16585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.821536][T16585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.004488][T13901] Bluetooth: hci3: command tx timeout [ 1553.361849][T16585] team0: Port device team_slave_0 added [ 1553.624021][ T44] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1553.767802][T16585] team0: Port device team_slave_1 added [ 1553.799853][ T44] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1553.799883][ T44] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1553.799906][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1553.799960][ T44] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1553.802417][ T44] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1553.802448][ T44] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1553.802471][ T44] usb 6-1: Product: syz [ 1553.802487][ T44] usb 6-1: Manufacturer: syz [ 1553.817678][ T44] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1553.961668][T16571] hsr_slave_0: entered promiscuous mode [ 1553.962732][T16571] hsr_slave_1: entered promiscuous mode [ 1553.963436][T16571] debugfs: 'hsr0' already exists in 'hsr' [ 1553.963456][T16571] Cannot create hsr debugfs directory [ 1554.021425][T11156] usb 6-1: USB disconnect, device number 74 [ 1554.117649][T16585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.117668][T16585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.117700][T16585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.120859][T16712] lo speed is unknown, defaulting to 1000 [ 1554.123542][T16585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.123559][T16585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.123588][T16585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.227158][T16528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1554.278737][T16712] wlan0 speed is unknown, defaulting to 1000 [ 1554.405741][ T37] hsr_slave_0: left promiscuous mode [ 1554.424059][ T37] hsr_slave_1: left promiscuous mode [ 1554.424987][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.465750][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.608236][ T37] hsr_slave_0: left promiscuous mode [ 1554.625925][ T37] hsr_slave_1: left promiscuous mode [ 1554.626767][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.664714][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.804176][ T37] hsr_slave_0: left promiscuous mode [ 1554.848141][ T37] hsr_slave_1: left promiscuous mode [ 1554.850427][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.897986][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.084214][T13901] Bluetooth: hci3: command tx timeout [ 1556.015662][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1556.232627][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1557.164019][T13901] Bluetooth: hci3: command tx timeout [ 1557.946812][T13782] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1558.116213][T13782] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1558.116245][T13782] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1558.116267][T13782] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1558.116322][T13782] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1558.119710][T13782] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1558.119743][T13782] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1558.119765][T13782] usb 6-1: Product: syz [ 1558.119782][T13782] usb 6-1: Manufacturer: syz [ 1558.237861][T13782] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1558.442707][ T6094] usb 6-1: USB disconnect, device number 75 [ 1558.467222][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1558.664642][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1559.244101][T13901] Bluetooth: hci3: command tx timeout [ 1560.054628][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1560.150231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.213831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.364927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.463829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.523818][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.583241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.784669][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1560.878052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.018846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.217220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.431285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.484771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.574677][T16528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1561.742152][T16528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1561.795754][T16528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1561.830841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.902427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.959417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.122760][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.187744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.280261][T16585] hsr_slave_0: entered promiscuous mode [ 1562.281912][T16585] hsr_slave_1: entered promiscuous mode [ 1562.283048][T16585] debugfs: 'hsr0' already exists in 'hsr' [ 1562.283074][T16585] Cannot create hsr debugfs directory [ 1563.356172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.448731][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.970225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.176466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.508851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.514095][ T44] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1564.562203][T16712] chnl_net:caif_netlink_parms(): no params data found [ 1564.677546][ T44] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1564.677578][ T44] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1564.677600][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1564.677665][ T44] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1564.699735][ T44] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1564.699775][ T44] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1564.699801][ T44] usb 6-1: Product: syz [ 1564.699819][ T44] usb 6-1: Manufacturer: syz [ 1564.801887][ T44] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1565.002467][ T1849] usb 6-1: USB disconnect, device number 76 [ 1565.539956][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.540163][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.540433][T16712] bridge_slave_0: entered allmulticast mode [ 1565.575562][T16712] bridge_slave_0: entered promiscuous mode [ 1565.717843][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.718005][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.718282][T16712] bridge_slave_1: entered allmulticast mode [ 1565.721278][T16712] bridge_slave_1: entered promiscuous mode [ 1565.757517][T16528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.171761][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.222010][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.884361][T16712] team0: Port device team_slave_0 added [ 1567.246733][T16528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.255382][T16712] team0: Port device team_slave_1 added [ 1568.547921][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.548079][T11356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.600943][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.600962][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.600994][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.615080][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.615099][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.615131][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.622771][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.622932][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.294334][T13797] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1570.294428][T16712] hsr_slave_0: entered promiscuous mode [ 1570.296968][T16712] hsr_slave_1: entered promiscuous mode [ 1570.297708][T16712] debugfs: 'hsr0' already exists in 'hsr' [ 1570.297734][T16712] Cannot create hsr debugfs directory [ 1570.446708][T13797] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1570.446739][T13797] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1570.446761][T13797] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1570.446815][T13797] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1570.449164][T13797] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1570.449193][T13797] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1570.449215][T13797] usb 6-1: Product: syz [ 1570.449230][T13797] usb 6-1: Manufacturer: syz [ 1570.525645][T13797] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1570.712229][T13797] usb 6-1: USB disconnect, device number 77 [ 1571.409527][T16571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1571.624563][T16571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1572.020895][T16571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1572.570980][T16571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1572.982240][T16585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1573.070711][T16585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1573.174008][T16585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1573.227844][T16585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1573.458472][T16528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.844171][ T37] bridge_slave_1: left allmulticast mode [ 1573.844204][ T37] bridge_slave_1: left promiscuous mode [ 1573.844472][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.285443][ T37] bridge_slave_0: left allmulticast mode [ 1574.285468][ T37] bridge_slave_0: left promiscuous mode [ 1574.285689][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.360764][ T37] bridge_slave_1: left allmulticast mode [ 1574.360790][ T37] bridge_slave_1: left promiscuous mode [ 1574.360965][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.425798][ T37] bridge_slave_0: left allmulticast mode [ 1574.425834][ T37] bridge_slave_0: left promiscuous mode [ 1574.426096][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.835052][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.925510][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.986482][ T37] bond0 (unregistering): Released all slaves [ 1575.244752][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1575.326921][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1575.392057][ T37] bond0 (unregistering): Released all slaves [ 1575.440999][T16571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.786651][T16528] veth0_vlan: entered promiscuous mode [ 1575.906378][T16528] veth1_vlan: entered promiscuous mode [ 1576.141184][ T37] hsr_slave_0: left promiscuous mode [ 1576.174244][ T37] hsr_slave_1: left promiscuous mode [ 1576.175297][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.225040][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.426865][ T37] hsr_slave_0: left promiscuous mode [ 1576.464201][ T37] hsr_slave_1: left promiscuous mode [ 1576.465000][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.507771][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.816382][ T44] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1576.983807][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 1576.986396][ T44] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1576.986444][ T44] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1576.986475][ T44] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1576.986495][ T44] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1576.986522][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1576.988988][ T44] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1576.989016][ T44] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1576.989032][ T44] usb 6-1: Product: syz [ 1576.989042][ T44] usb 6-1: Manufacturer: syz [ 1576.989053][ T44] usb 6-1: SerialNumber: syz [ 1577.081710][ T44] usb 6-1: config 0 descriptor?? [ 1577.093330][ T44] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1577.140121][ T44] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1577.498316][ T5884] usb 6-1: USB disconnect, device number 78 [ 1577.514412][ T5884] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1577.635379][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1577.795721][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1581.471442][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1581.634692][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1583.145205][T16571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.160121][T16585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.184168][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.184353][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.310094][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.310222][T11356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.393196][T16585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.540523][T16528] veth0_macvtap: entered promiscuous mode [ 1583.556848][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.594878][T11356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.620693][T16528] veth1_macvtap: entered promiscuous mode [ 1583.643390][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.643546][T11356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.778213][T16528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.838764][T16528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.961489][ T1422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.995145][ T1422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.154577][ T1422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.167034][ T1422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.851259][T16571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.967449][T16712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1585.028000][T11356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.028025][T11356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.028643][T16712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1585.252180][T16712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1585.562040][T16712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1585.742417][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.742440][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.862109][T16585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.032328][T16571] veth0_vlan: entered promiscuous mode [ 1586.752058][T16571] veth1_vlan: entered promiscuous mode [ 1587.028046][T16571] veth0_macvtap: entered promiscuous mode [ 1587.055007][T16571] veth1_macvtap: entered promiscuous mode [ 1587.099724][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.282446][T16571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.290815][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.320501][T16571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.403617][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.412324][ T9881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.446628][T16945] siw: device registration error -23 [ 1587.448679][ T3948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.484629][ T3948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.504388][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.504578][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.507524][ T4459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.539017][ T4459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.948759][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.948785][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.103296][T16585] veth0_vlan: entered promiscuous mode [ 1588.246419][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.246443][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.261672][T16585] veth1_vlan: entered promiscuous mode [ 1588.549135][T16585] veth0_macvtap: entered promiscuous mode [ 1588.580402][T16585] veth1_macvtap: entered promiscuous mode [ 1588.727991][T16585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.807005][T16585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.873637][ T1422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.876725][ T1422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.884606][ T1422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.884904][ T1422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.518987][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.013206][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.013232][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.163993][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.164015][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.996635][ T988] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1592.288004][T16712] veth0_vlan: entered promiscuous mode [ 1592.319205][T16712] veth1_vlan: entered promiscuous mode [ 1592.419769][ T988] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1592.419802][ T988] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1592.419823][ T988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1592.419880][ T988] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1592.422298][ T988] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1592.422331][ T988] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1592.422354][ T988] usb 3-1: Product: syz [ 1592.422370][ T988] usb 3-1: Manufacturer: syz [ 1593.084446][ T988] cdc_wdm 3-1:1.0: skipping garbage [ 1593.084470][ T988] cdc_wdm 3-1:1.0: skipping garbage [ 1593.084508][ T988] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1593.093096][T16712] veth0_macvtap: entered promiscuous mode [ 1593.169288][T16712] veth1_macvtap: entered promiscuous mode [ 1593.284718][T11156] usb 3-1: USB disconnect, device number 48 [ 1593.372892][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.416885][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1593.459939][ T6022] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.604509][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.693295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.762771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.853833][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.928734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.000933][ T6022] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.028355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.150169][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.160819][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.358925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.442330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.647465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.701881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.928128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.764626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.920561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.477822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.731259][T17011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.850430][ T9881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.850453][ T9881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.020104][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.020128][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.303925][ T5883] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1597.459975][ T5883] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1597.460008][ T5883] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1597.460029][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1597.460085][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1597.462610][ T5883] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1597.462641][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1597.462665][ T5883] usb 3-1: Product: syz [ 1597.462682][ T5883] usb 3-1: Manufacturer: syz [ 1597.500243][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.929668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.185186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.260223][ T5883] cdc_wdm 3-1:1.0: skipping garbage [ 1598.260247][ T5883] cdc_wdm 3-1:1.0: skipping garbage [ 1598.260287][ T5883] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1598.428040][ T5883] usb 3-1: USB disconnect, device number 49 [ 1599.405909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.593533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1599.612436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.107233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.373823][ T44] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1600.742251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.820339][ T44] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1600.820371][ T44] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1600.820394][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1600.820449][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1600.830385][ T44] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1600.830424][ T44] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1600.830449][ T44] usb 2-1: Product: syz [ 1600.830467][ T44] usb 2-1: Manufacturer: syz [ 1600.972503][T17074] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1600.972503][T17074] program syz.2.2490 not setting count and/or reply_len properly [ 1601.055383][ T44] cdc_wdm 2-1:1.0: skipping garbage [ 1601.055431][ T44] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1601.149712][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.266772][ T5884] usb 2-1: USB disconnect, device number 51 [ 1602.178571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.463856][ T9694] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1602.619890][ T9694] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1602.619962][ T9694] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.622278][ T9694] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1602.622311][ T9694] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1602.622333][ T9694] usb 8-1: Manufacturer: syz [ 1602.648603][ T9694] usb 8-1: config 0 descriptor?? [ 1602.773156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.988543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.011449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.050733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.175293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.196880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.783776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.048705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.420073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.463853][ T9694] rc_core: IR keymap rc-hauppauge not found [ 1604.463877][ T9694] Registered IR keymap rc-empty [ 1604.479012][ T9694] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1604.510279][ T9694] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input43 [ 1604.596099][ T9694] usb 8-1: USB disconnect, device number 2 [ 1604.642051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.147482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.690639][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1606.323926][ T44] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1607.317260][ T44] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1607.317293][ T44] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1607.317314][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1607.317393][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1607.371176][ T44] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1607.371220][ T44] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1607.371242][ T44] usb 5-1: Product: syz [ 1607.371269][ T44] usb 5-1: Manufacturer: syz [ 1607.426497][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 1607.426521][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 1607.426537][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 1607.426576][ T44] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1607.606705][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 1607.655663][ T9694] usb 5-1: USB disconnect, device number 60 [ 1608.038382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.724578][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.749601][T17137] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1608.927298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.183843][T13782] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1609.491336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.514202][T13782] usb 2-1: Using ep0 maxpacket: 8 [ 1609.517019][T13782] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1609.518652][T13782] usb 2-1: config 57 has an invalid interface number: 229 but max is 0 [ 1609.518739][T13782] usb 2-1: config 57 has no interface number 0 [ 1609.518777][T13782] usb 2-1: config 57 interface 229 has no altsetting 0 [ 1609.522110][T13782] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 1609.522139][T13782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.522154][T13782] usb 2-1: Product: syz [ 1609.522165][T13782] usb 2-1: Manufacturer: syz [ 1609.522176][T13782] usb 2-1: SerialNumber: syz [ 1610.617723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.592454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.767716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.804559][T13782] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1611.985088][T13782] usb 2-1: USB disconnect, device number 52 [ 1612.405633][T13782] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1612.557459][T13782] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1612.557493][T13782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1612.557549][T13782] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1612.560320][T13782] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1612.560354][T13782] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1612.560376][T13782] usb 2-1: Product: syz [ 1612.560392][T13782] usb 2-1: Manufacturer: syz [ 1612.691712][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.691791][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.945453][T13782] cdc_wdm 2-1:1.0: skipping garbage [ 1612.945477][T13782] cdc_wdm 2-1:1.0: skipping garbage [ 1612.945515][T13782] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1613.061260][T17190] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1613.061260][T17190] program syz.2.2516 not setting count and/or reply_len properly [ 1613.204906][T13782] usb 2-1: USB disconnect, device number 53 [ 1613.308003][T17193] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1614.298382][T17198] siw: device registration error -23 [ 1619.105778][ T5883] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1619.256239][ T5883] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1619.256271][ T5883] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1619.256293][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1619.256352][ T5883] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1619.261895][ T5883] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1619.261927][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1619.261950][ T5883] usb 2-1: Product: syz [ 1619.261967][ T5883] usb 2-1: Manufacturer: syz [ 1619.343630][ T5883] cdc_wdm 2-1:1.0: skipping garbage [ 1619.344862][ T5883] cdc_wdm 2-1:1.0: skipping garbage [ 1619.344909][ T5883] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1619.423926][ T5884] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1619.537399][ T5883] usb 2-1: USB disconnect, device number 54 [ 1619.573758][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 1619.576180][ T5884] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1619.576229][ T5884] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1619.576276][ T5884] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1619.576307][ T5884] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1619.576337][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1619.579616][ T5884] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1619.579648][ T5884] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1619.579672][ T5884] usb 5-1: Product: syz [ 1619.579688][ T5884] usb 5-1: Manufacturer: syz [ 1619.579704][ T5884] usb 5-1: SerialNumber: syz [ 1619.599282][ T5884] usb 5-1: config 0 descriptor?? [ 1619.687783][ T5884] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1619.695164][ T5884] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1620.109326][ T5884] usb 5-1: USB disconnect, device number 61 [ 1620.135813][ T5884] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1626.644425][T17323] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1626.644425][T17323] program syz.5.2546 not setting count and/or reply_len properly [ 1629.883848][ T988] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1630.034101][ T988] usb 2-1: Using ep0 maxpacket: 32 [ 1630.036576][ T988] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1630.036619][ T988] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1630.036659][ T988] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1630.036685][ T988] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1630.036712][ T988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1630.039737][ T988] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1630.039772][ T988] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1630.039796][ T988] usb 2-1: Product: syz [ 1630.039813][ T988] usb 2-1: Manufacturer: syz [ 1630.039829][ T988] usb 2-1: SerialNumber: syz [ 1630.156167][ T988] usb 2-1: config 0 descriptor?? [ 1630.185361][ T988] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1630.206204][ T988] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1630.527176][ T31] usb 2-1: USB disconnect, device number 55 [ 1630.559790][ T31] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1638.398025][T17417] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1638.398025][T17417] program syz.1.2567 not setting count and/or reply_len properly [ 1639.894038][ T988] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1640.044655][ T988] usb 2-1: Using ep0 maxpacket: 32 [ 1640.050287][ T988] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1640.050323][ T988] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1640.050356][ T988] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1640.050376][ T988] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1640.050396][ T988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1640.155101][ T988] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1640.155136][ T988] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1640.155159][ T988] usb 2-1: Product: syz [ 1640.155174][ T988] usb 2-1: Manufacturer: syz [ 1640.155189][ T988] usb 2-1: SerialNumber: syz [ 1640.206256][ T988] usb 2-1: config 0 descriptor?? [ 1640.221243][ T988] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1640.245901][ T988] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1640.549914][T13782] usb 2-1: USB disconnect, device number 56 [ 1640.564988][T13782] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1644.403851][ T9694] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1644.556528][ T9694] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1644.556561][ T9694] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1644.556584][ T9694] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1644.556639][ T9694] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1644.558977][ T9694] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1644.559009][ T9694] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1644.559032][ T9694] usb 8-1: Product: syz [ 1644.559049][ T9694] usb 8-1: Manufacturer: syz [ 1644.654017][ T9694] cdc_wdm 8-1:1.0: skipping garbage [ 1644.654044][ T9694] cdc_wdm 8-1:1.0: skipping garbage [ 1644.654058][ T9694] cdc_wdm 8-1:1.0: skipping garbage [ 1644.654095][ T9694] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1644.939464][ T9694] usb 8-1: USB disconnect, device number 3 [ 1645.633879][ T31] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1646.430002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.458556][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1646.458591][ T31] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1646.458613][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1646.458742][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1646.458772][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1646.458801][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1646.461073][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1646.461103][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1646.461126][ T31] usb 3-1: Product: syz [ 1646.461142][ T31] usb 3-1: Manufacturer: syz [ 1646.557534][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 1646.557568][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 1646.644388][ T31] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1646.737835][ T31] usb 3-1: USB disconnect, device number 50 [ 1646.808488][T17496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2579'. [ 1647.127214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.428290][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.552297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.562039][T17499] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1647.562039][T17499] program syz.7.2583 not setting count and/or reply_len properly [ 1648.380564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1649.178166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1649.475622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.670204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.263875][ T988] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1652.536710][ T988] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1652.536769][ T988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1652.536817][ T988] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 1652.536844][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.594142][ T988] usb 3-1: config 0 descriptor?? [ 1652.753801][T13782] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1653.429167][T13782] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1653.429201][T13782] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1653.429295][T13782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1653.429358][T13782] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1653.463934][T13782] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1653.464018][T13782] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1653.464035][T13782] usb 2-1: Product: syz [ 1653.464046][T13782] usb 2-1: Manufacturer: syz [ 1653.516875][T13782] cdc_wdm 2-1:1.0: skipping garbage [ 1653.516898][T13782] cdc_wdm 2-1:1.0: skipping garbage [ 1653.516913][T13782] cdc_wdm 2-1:1.0: skipping garbage [ 1653.516952][T13782] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1653.552165][ T988] usbhid 3-1:0.0: can't add hid device: -71 [ 1653.552263][ T988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1653.620318][ T988] usb 3-1: USB disconnect, device number 51 [ 1653.679704][T17539] fuse: Bad value for 'user_id' [ 1653.679719][T17539] fuse: Bad value for 'user_id' [ 1653.764302][ T5884] usb 2-1: USB disconnect, device number 57 [ 1654.404179][ T988] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1654.523359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1654.575175][ T988] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1654.575207][ T988] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1654.575228][ T988] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1654.575283][ T988] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1654.575311][ T988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1654.575339][ T988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1654.578538][ T988] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1654.578568][ T988] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1654.578590][ T988] usb 8-1: Product: syz [ 1654.578606][ T988] usb 8-1: Manufacturer: syz [ 1654.650242][T17567] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1654.650242][T17567] program syz.2.2598 not setting count and/or reply_len properly [ 1655.134437][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.264664][T17568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2595'. [ 1655.526349][ T988] cdc_wdm 8-1:1.0: skipping garbage [ 1655.526374][ T988] cdc_wdm 8-1:1.0: skipping garbage [ 1655.526483][ T988] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1655.704696][ T31] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1656.154259][T14793] Bluetooth: hci1: command 0x0406 tx timeout [ 1656.193557][ T988] usb 8-1: USB disconnect, device number 4 [ 1656.356095][ T31] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1656.356128][ T31] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1656.356151][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1656.356206][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1656.361308][ T31] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1656.361342][ T31] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1656.361365][ T31] usb 2-1: Product: syz [ 1656.361382][ T31] usb 2-1: Manufacturer: syz [ 1656.476874][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 1656.476898][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 1656.476913][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 1656.476953][ T31] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1656.678964][ T31] usb 2-1: USB disconnect, device number 58 [ 1658.342316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.501133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.180353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.463887][ T6094] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1660.472087][T17616] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2608'. [ 1660.616520][ T6094] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1660.616554][ T6094] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1660.616577][ T6094] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1660.616637][ T6094] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1660.619237][ T6094] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1660.619268][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1660.619292][ T6094] usb 2-1: Product: syz [ 1660.619307][ T6094] usb 2-1: Manufacturer: syz [ 1660.790631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.095673][ T6094] cdc_wdm 2-1:1.0: skipping garbage [ 1661.095696][ T6094] cdc_wdm 2-1:1.0: skipping garbage [ 1661.095711][ T6094] cdc_wdm 2-1:1.0: skipping garbage [ 1661.095750][ T6094] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1661.472394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.490256][T14793] Bluetooth: hci6: command 0x0406 tx timeout [ 1661.738057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.836058][ T6094] usb 2-1: USB disconnect, device number 59 [ 1662.267611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1663.225981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1663.729419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1663.998892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.724011][T17657] lo speed is unknown, defaulting to 1000 [ 1665.725910][T17657] wlan0 speed is unknown, defaulting to 1000 [ 1666.384429][T13901] Bluetooth: hci2: command 0x0406 tx timeout [ 1667.073910][T11156] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1667.483875][T11156] usb 6-1: no configurations [ 1667.483907][T11156] usb 6-1: can't read configurations, error -22 [ 1667.635087][T11156] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1671.743981][ T5884] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1671.859775][T17715] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1671.928508][ T5884] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1671.928539][ T5884] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1671.928561][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1671.928616][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1671.930907][ T5884] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1671.930936][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1671.930957][ T5884] usb 2-1: Product: syz [ 1671.930973][ T5884] usb 2-1: Manufacturer: syz [ 1672.009525][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 1672.009548][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 1672.009563][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 1672.009602][ T5884] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1672.223325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.344541][ T6094] usb 2-1: USB disconnect, device number 60 [ 1672.450304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.739986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.743744][ T44] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1672.884137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1672.919502][ T44] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1672.919531][ T44] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1672.919551][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1672.919601][ T44] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1672.919626][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 1672.921806][ T44] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1672.921834][ T44] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1672.921854][ T44] usb 6-1: Product: syz [ 1672.921869][ T44] usb 6-1: Manufacturer: syz [ 1673.031127][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.011148][ T44] cdc_wdm 6-1:1.0: skipping garbage [ 1674.011173][ T44] cdc_wdm 6-1:1.0: skipping garbage [ 1674.011278][ T44] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1674.132683][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.132747][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.193808][ T6094] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1674.300034][T11156] usb 6-1: USB disconnect, device number 81 [ 1674.343758][ T6094] usb 2-1: Using ep0 maxpacket: 8 [ 1674.346257][ T6094] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1674.347706][ T6094] usb 2-1: config 57 has an invalid interface number: 229 but max is 0 [ 1674.347734][ T6094] usb 2-1: config 57 has no interface number 0 [ 1674.347770][ T6094] usb 2-1: config 57 interface 229 has no altsetting 0 [ 1674.353308][ T6094] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 1674.353340][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.353362][ T6094] usb 2-1: Product: syz [ 1674.353378][ T6094] usb 2-1: Manufacturer: syz [ 1674.353393][ T6094] usb 2-1: SerialNumber: syz [ 1675.825260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.928173][ T6094] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1675.971024][ T6094] usb 2-1: USB disconnect, device number 61 [ 1676.297421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1676.316307][T14793] Bluetooth: hci3: command 0x0406 tx timeout [ 1679.094499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.282148][ C1] vkms_vblank_simulate: vblank timer overrun [ 1681.035392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1681.436959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.100303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.478075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.223007][T17809] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1683.253353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.680108][ T6094] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1684.881167][ T6094] usb 8-1: Using ep0 maxpacket: 8 [ 1686.068732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.071953][ T6094] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1686.088855][ T6094] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1686.088897][ T6094] usb 8-1: can't read configurations, error -71 [ 1689.757523][ T6094] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1690.120058][ T6094] usb 3-1: Using ep0 maxpacket: 32 [ 1690.122414][ T6094] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1690.122463][ T6094] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1690.122507][ T6094] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1690.122537][ T6094] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1690.122566][ T6094] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1690.207782][ T6094] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1690.207816][ T6094] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1690.207840][ T6094] usb 3-1: Product: syz [ 1690.207855][ T6094] usb 3-1: Manufacturer: syz [ 1690.207872][ T6094] usb 3-1: SerialNumber: syz [ 1690.285219][ T6094] usb 3-1: config 0 descriptor?? [ 1690.295079][ T6094] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1690.311779][ T6094] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1690.744553][T11156] usb 3-1: USB disconnect, device number 52 [ 1690.768705][T11156] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1691.370571][T17876] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1692.484052][ T988] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1692.689949][ T988] usb 6-1: Using ep0 maxpacket: 8 [ 1693.777455][ T988] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1693.778554][ T988] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1693.778589][ T988] usb 6-1: can't read configurations, error -71 [ 1697.764015][ T6094] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1697.926120][ T6094] usb 5-1: Using ep0 maxpacket: 32 [ 1697.928663][ T6094] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1697.928712][ T6094] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1697.928762][ T6094] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1697.928793][ T6094] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1697.928823][ T6094] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1697.932119][ T6094] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1697.932151][ T6094] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1697.932175][ T6094] usb 5-1: Product: syz [ 1697.932191][ T6094] usb 5-1: Manufacturer: syz [ 1697.932207][ T6094] usb 5-1: SerialNumber: syz [ 1698.997747][ T6094] usb 5-1: config 0 descriptor?? [ 1699.265777][ T6094] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1699.270747][ T6094] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1701.901635][ T988] usb 5-1: USB disconnect, device number 62 [ 1701.918589][ T988] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1707.304638][ T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1707.504362][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1707.522771][ T31] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1707.522803][ T31] usb 8-1: config 0 has no interface number 0 [ 1707.522855][ T31] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1707.522879][ T31] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1707.533318][ T31] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1707.533351][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.533373][ T31] usb 8-1: Product: syz [ 1707.533389][ T31] usb 8-1: Manufacturer: syz [ 1707.533405][ T31] usb 8-1: SerialNumber: syz [ 1707.535111][T17975] tipc: Subscription rejected, illegal request [ 1707.678490][ T31] usb 8-1: config 0 descriptor?? [ 1707.947773][ T31] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1707.988103][ T31] cx231xx 8-1:0.1: Failed to read PCB config [ 1707.988188][ T31] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 1708.008797][ T31] usb 8-1: USB disconnect, device number 7 [ 1708.443849][ T31] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1708.593796][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1708.602839][ T31] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1708.602869][ T31] usb 8-1: config 0 has no interface number 0 [ 1708.602922][ T31] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1708.602945][ T31] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1708.634595][ T31] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1708.634628][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.634650][ T31] usb 8-1: Product: syz [ 1708.634665][ T31] usb 8-1: Manufacturer: syz [ 1708.634681][ T31] usb 8-1: SerialNumber: syz [ 1708.690260][ T31] usb 8-1: config 0 descriptor?? [ 1708.944014][ T31] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1708.954284][ T31] cx231xx 8-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1709.068297][ T31] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1709.068661][ T31] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1709.069001][ T31] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1709.069404][ T31] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1709.069747][ T31] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1709.069762][ T31] cx231xx 8-1:0.1: Failed to set devmode to analog: error: -32 [ 1709.158080][ T31] i2c i2c-2: Added multiplexed i2c bus 4 [ 1709.175552][ T31] i2c i2c-2: Added multiplexed i2c bus 5 [ 1709.177039][ T31] cx231xx 8-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1709.177065][ T31] cx231xx 8-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1709.300220][ T31] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 1709.315624][ T31] usb 8-1: USB disconnect, device number 8 [ 1709.777830][ T5883] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1709.923807][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1709.926590][ T5883] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1709.926640][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1709.926704][ T5883] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1709.926734][ T5883] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1709.926764][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1710.011859][ T5883] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1710.011895][ T5883] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1710.011920][ T5883] usb 5-1: Product: syz [ 1710.011936][ T5883] usb 5-1: Manufacturer: syz [ 1710.011953][ T5883] usb 5-1: SerialNumber: syz [ 1710.105548][ T5883] usb 5-1: config 0 descriptor?? [ 1710.113551][ T5883] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1710.141931][ T5883] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1710.452646][ T6094] usb 5-1: USB disconnect, device number 63 [ 1710.481340][ T6094] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1722.953837][ T988] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1723.138563][ T988] usb 8-1: Using ep0 maxpacket: 32 [ 1723.153141][ T988] usb 8-1: config 2 has an invalid interface number: 194 but max is 0 [ 1723.153229][ T988] usb 8-1: config 2 has no interface number 0 [ 1723.153300][ T988] usb 8-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1723.153326][ T988] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.063739][ T988] usb 8-1: string descriptor 0 read error: -71 [ 1726.070883][ T988] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1728.144833][ T988] usb 8-1: USB disconnect, device number 9 [ 1730.469952][T18210] udevd[18210]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.194/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1735.570110][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.570165][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.691804][T18259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1742.042465][T18291] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1743.113880][ T9694] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1743.274002][ T9694] usb 6-1: Using ep0 maxpacket: 8 [ 1744.414486][ T9694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1744.415377][ T9694] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1744.415404][ T9694] usb 6-1: can't read configurations, error -71 [ 1752.003798][ T9694] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1752.156203][ T9694] usb 3-1: Using ep0 maxpacket: 32 [ 1752.158394][ T9694] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1752.158415][ T9694] usb 3-1: config 0 has no interface number 0 [ 1752.158479][ T9694] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1752.158495][ T9694] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1752.160901][ T9694] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1752.160923][ T9694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.160938][ T9694] usb 3-1: Product: syz [ 1752.160949][ T9694] usb 3-1: Manufacturer: syz [ 1752.160960][ T9694] usb 3-1: SerialNumber: syz [ 1752.177851][ T9694] usb 3-1: config 0 descriptor?? [ 1753.858174][ T9694] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1753.864692][ T9694] cx231xx 3-1:0.1: Failed to read PCB config [ 1753.864782][ T9694] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1753.886608][ T9694] usb 3-1: USB disconnect, device number 53 [ 1754.394610][ T9694] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1754.553943][ T9694] usb 3-1: Using ep0 maxpacket: 32 [ 1754.557984][ T9694] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1754.558014][ T9694] usb 3-1: config 0 has no interface number 0 [ 1754.558076][ T9694] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1754.558101][ T9694] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1754.561174][ T9694] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1754.561197][ T9694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.561211][ T9694] usb 3-1: Product: syz [ 1754.561222][ T9694] usb 3-1: Manufacturer: syz [ 1754.561233][ T9694] usb 3-1: SerialNumber: syz [ 1755.646248][ T9694] usb 3-1: config 0 descriptor?? [ 1755.886820][ T9694] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1755.965703][ T9694] cx231xx 3-1:0.1: Failed to read PCB config [ 1755.965793][ T9694] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1756.061556][ T9694] usb 3-1: USB disconnect, device number 54 [ 1756.815441][T18363] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1758.125586][ T5883] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1758.434025][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 1759.078106][T14793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1759.111249][T14793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1759.122379][T14793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1759.137419][T14793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1759.139187][T14793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1759.241602][T18371] lo speed is unknown, defaulting to 1000 [ 1759.260632][T18371] wlan0 speed is unknown, defaulting to 1000 [ 1760.703329][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1761.027005][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1761.027150][ T5883] usb 3-1: can't read configurations, error -71 [ 1761.334450][T13901] Bluetooth: hci4: command tx timeout [ 1763.404024][T13901] Bluetooth: hci4: command tx timeout [ 1763.823810][ T6094] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1764.007104][ T6094] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1764.007135][ T6094] usb 3-1: config 0 has no interface number 0 [ 1764.007184][ T6094] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1764.007209][ T6094] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1764.007249][ T6094] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1764.007287][ T6094] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1764.007316][ T6094] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1764.007346][ T6094] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1764.007392][ T6094] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1764.007417][ T6094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.195139][ T6094] usb 3-1: config 0 descriptor?? [ 1764.196559][T18383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1764.196782][T18383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1764.257572][ T6094] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1765.564187][T13901] Bluetooth: hci4: command tx timeout [ 1766.562160][ T9694] usb 3-1: USB disconnect, device number 57 [ 1766.853368][ T9694] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1768.043786][T13901] Bluetooth: hci4: command tx timeout [ 1768.770647][T18443] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1769.884914][ T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1770.034128][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1771.824951][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1771.826035][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1771.826074][ T31] usb 2-1: can't read configurations, error -71 [ 1774.460493][T13901] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1775.931439][T14154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.438026][T18371] chnl_net:caif_netlink_parms(): no params data found [ 1778.242831][T18486] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1779.423748][ T9694] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1779.924920][ T9694] usb 8-1: Using ep0 maxpacket: 8 [ 1781.914620][ T9694] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1781.970372][ T9694] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1781.970427][ T9694] usb 8-1: can't read configurations, error -71 [ 1782.430713][T14154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.738785][T14154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.786904][T18371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.787052][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.787344][T18371] bridge_slave_0: entered allmulticast mode [ 1789.792972][T18371] bridge_slave_0: entered promiscuous mode [ 1789.822550][T18371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.822766][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.823078][T18371] bridge_slave_1: entered allmulticast mode [ 1789.850670][T18371] bridge_slave_1: entered promiscuous mode [ 1797.474787][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.474865][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.064057][T14154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.784769][T18371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.913182][T18371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.333779][ T31] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1799.496851][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1799.496910][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1799.496961][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 1799.496987][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.700208][ T31] usb 6-1: config 0 descriptor?? [ 1799.729111][T18371] team0: Port device team_slave_0 added [ 1799.773009][T18371] team0: Port device team_slave_1 added [ 1800.161614][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 1800.161714][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1800.204396][ T31] usb 6-1: USB disconnect, device number 86 [ 1802.974511][T18371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1802.974530][T18371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.974563][T18371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1803.040132][T18371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1803.040152][T18371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1803.040184][T18371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.413402][T14154] bridge_slave_1: left allmulticast mode [ 1803.413434][T14154] bridge_slave_1: left promiscuous mode [ 1803.413886][T14154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.847575][T14154] bridge_slave_0: left allmulticast mode [ 1803.847610][T14154] bridge_slave_0: left promiscuous mode [ 1803.869152][T14154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.066208][ T31] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1805.233724][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1805.237990][ T31] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1805.238021][ T31] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1805.238048][ T31] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1805.238074][ T31] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1805.238098][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1805.241245][ T31] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1805.241277][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.241300][ T31] usb 6-1: Product: syz [ 1805.241317][ T31] usb 6-1: Manufacturer: syz [ 1805.241333][ T31] usb 6-1: SerialNumber: syz [ 1805.261207][ T31] usb 6-1: config 0 descriptor?? [ 1805.479602][ T31] usb 6-1: Can not set alternate setting to 1, error: -71 [ 1805.479679][ T31] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1805.518128][ T31] usb 6-1: USB disconnect, device number 87 [ 1811.254513][T14154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.294414][T14154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.349577][T14154] bond0 (unregistering): Released all slaves [ 1813.425912][T18371] hsr_slave_0: entered promiscuous mode [ 1813.508549][T18371] hsr_slave_1: entered promiscuous mode [ 1813.585974][T18371] debugfs: 'hsr0' already exists in 'hsr' [ 1813.586050][T18371] Cannot create hsr debugfs directory [ 1817.111187][ T6094] IPVS: starting estimator thread 0... [ 1817.263803][T18775] IPVS: using max 7 ests per chain, 16800 per kthread [ 1817.337207][T18753] netlink: 'syz.7.2844': attribute type 14 has an invalid length. [ 1817.337224][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2844'. [ 1817.780469][T18753] netlink: 'syz.7.2844': attribute type 14 has an invalid length. [ 1817.780496][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2844'. [ 1817.814833][ T4459] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1817.863882][ T4459] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1817.866028][ T4459] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1817.866246][ T4459] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1818.650894][T14793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1818.679558][T14793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1818.682943][T14793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1818.703021][T14793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1818.730584][T14793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1820.708011][T14154] hsr_slave_0: left promiscuous mode [ 1820.774762][T14154] hsr_slave_1: left promiscuous mode [ 1820.775805][T14154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1820.775832][T14154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.843717][T13901] Bluetooth: hci2: command tx timeout [ 1820.865158][T14154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1820.865188][T14154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.100272][T18813] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1821.100272][T18813] program syz.2.2850 not setting count and/or reply_len properly [ 1821.459193][T14154] veth1_macvtap: left promiscuous mode [ 1821.459313][T14154] veth0_macvtap: left promiscuous mode [ 1821.459602][T14154] veth1_vlan: left promiscuous mode [ 1821.459796][T14154] veth0_vlan: left promiscuous mode [ 1823.459173][T13901] Bluetooth: hci2: command tx timeout [ 1825.214967][ T6094] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1825.486649][T13901] Bluetooth: hci2: command tx timeout [ 1825.681619][ T6094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.681673][ T6094] usb 6-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1825.681699][ T6094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.713844][ T6094] usb 6-1: config 0 descriptor?? [ 1826.100090][T13901] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 1826.100110][T13901] #PF: supervisor read access in kernel mode [ 1826.100125][T13901] #PF: error_code(0x0000) - not-present page [ 1826.100136][T13901] PGD 80000000687f9067 P4D 80000000687f9067 PUD 0 [ 1826.100161][T13901] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1826.100180][T13901] CPU: 1 UID: 0 PID: 13901 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1826.100199][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1826.100210][T13901] Workqueue: hci3 hci_rx_work [ 1826.100238][T13901] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 1826.100264][T13901] Code: 07 8d 4c 8b b8 b0 db c5 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 40 d7 7f 8d 4d 8b 3f 49 81 ff 40 d7 7f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 d0 c0 ca 02 84 c0 74 0e 49 8b 07 49 [ 1826.100278][T13901] RSP: 0018:ffffc90004f6f988 EFLAGS: 00010207 [ 1826.100291][T13901] RAX: 0000000000000000 RBX: ffff88803ca5da00 RCX: 0000000000000000 [ 1826.100303][T13901] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3f4b00 [ 1826.100313][T13901] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac7bb81 [ 1826.100325][T13901] R10: dffffc0000000000 R11: fffffbfff1deecaf R12: 0000000000000002 [ 1826.100337][T13901] R13: 0000000000000001 R14: ffff88802442df00 R15: 0000000000000000 [ 1826.100348][T13901] FS: 0000000000000000(0000) GS:ffff888126ccb000(0000) knlGS:0000000000000000 [ 1826.100361][T13901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1826.100373][T13901] CR2: 0000000000000010 CR3: 00000000379cc000 CR4: 00000000003526f0 [ 1826.100388][T13901] Call Trace: [ 1826.100396][T13901] [ 1826.100405][T13901] hci_rx_work+0x130/0xe80 [ 1826.100439][T13901] ? process_scheduled_works+0x9ef/0x17b0 [ 1826.100461][T13901] process_scheduled_works+0xade/0x17b0 [ 1826.100491][T13901] ? __pfx_process_scheduled_works+0x10/0x10 [ 1826.100516][T13901] worker_thread+0x8a0/0xda0 [ 1826.100537][T13901] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1826.100560][T13901] ? __kthread_parkme+0x7b/0x200 [ 1826.100584][T13901] kthread+0x711/0x8a0 [ 1826.100608][T13901] ? __pfx_worker_thread+0x10/0x10 [ 1826.100628][T13901] ? __pfx_kthread+0x10/0x10 [ 1826.100650][T13901] ? rt_spin_unlock+0x150/0x200 [ 1826.100675][T13901] ? rt_spin_unlock+0x161/0x200 [ 1826.100698][T13901] ? __pfx_kthread+0x10/0x10 [ 1826.100721][T13901] ret_from_fork+0x4b9/0x870 [ 1826.100741][T13901] ? __pfx_ret_from_fork+0x10/0x10 [ 1826.100762][T13901] ? __switch_to_asm+0x39/0x70 [ 1826.100784][T13901] ? __switch_to_asm+0x33/0x70 [ 1826.100805][T13901] ? __pfx_kthread+0x10/0x10 [ 1826.100828][T13901] ret_from_fork_asm+0x1a/0x30 [ 1826.100855][T13901] [ 1826.100867][T13901] Modules linked in: [ 1826.100878][T13901] CR2: 0000000000000010 [ 1826.100898][T13901] ---[ end trace 0000000000000000 ]--- [ 1826.100910][T13901] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 1826.100933][T13901] Code: 07 8d 4c 8b b8 b0 db c5 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 40 d7 7f 8d 4d 8b 3f 49 81 ff 40 d7 7f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 d0 c0 ca 02 84 c0 74 0e 49 8b 07 49 [ 1826.100948][T13901] RSP: 0018:ffffc90004f6f988 EFLAGS: 00010207 [ 1826.100962][T13901] RAX: 0000000000000000 RBX: ffff88803ca5da00 RCX: 0000000000000000 [ 1826.100973][T13901] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3f4b00 [ 1826.100983][T13901] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac7bb81 [ 1826.100995][T13901] R10: dffffc0000000000 R11: fffffbfff1deecaf R12: 0000000000000002 [ 1826.101006][T13901] R13: 0000000000000001 R14: ffff88802442df00 R15: 0000000000000000 [ 1826.101017][T13901] FS: 0000000000000000(0000) GS:ffff888126ccb000(0000) knlGS:0000000000000000 [ 1826.101031][T13901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1826.101042][T13901] CR2: 0000000000000010 CR3: 00000000379cc000 CR4: 00000000003526f0 [ 1826.101061][T13901] Kernel panic - not syncing: Fatal exception [ 1826.103200][T13901] Kernel Offset: disabled