last executing test programs: 1m12.239626924s ago: executing program 4 (id=225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r7, 0x1000000, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x40046302}], 0x0, 0x1000000, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRESOCT=r7, @ANYRES64=r4, @ANYRES64=r5, @ANYBLOB="95edf2ecbc552fb0954e5f1fd3583e9d325847fa54ca0ed9562f1612f31fcea54faa8b9f8af3b8cdb5bd622e130228ac62bde952ef60aa56c4c93002d9766f4e3301aab53e42d01b148bd2e2b413ed57de4ada72f945d989d2662045d2dee1800eeb9e55aa48022ec4cc5012e6871ee08a41942987f881644ff6b1b763da2ff2f6e379e0c8554e3b20f84eb87454cbec1743254a9fd1340b12acd1f5852483186ccb1e6bbfbffabd", @ANYRESHEX, @ANYRES16, @ANYRESHEX=r9, @ANYRESDEC], 0x10) r12 = fcntl$dupfd(r10, 0x0, r11) write$FUSE_NOTIFY_STORE(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000040000000000008edd000000000000000000000000000600"/40], 0xc388) 1m7.205632534s ago: executing program 4 (id=242): syz_emit_ethernet(0x3e, &(0x7f0000000740)={@broadcast, @dev, @void, {@ipv4={0x800, @tcp={{0x0, 0x4, 0x0, 0x4, 0x0, 0x66, 0x0, 0x4, 0x6, 0x0, @empty, @rand_addr=0x64010100, {[@lsrr={0x83, 0x0, 0x34, [@loopback, @dev={0xac, 0x14, 0x14, 0x13}, @empty]}, @lsrr={0x83, 0x0, 0xce, [@broadcast]}, @noop, @ra, @noop, @ssrr={0x89, 0x0, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x0, 0x8, 0x3, 0x0, 0x6910, {[@fastopen={0x22, 0x0, "e3ee81b6037a4eb0fd34b06d089ce906"}, @exp_smc, @fastopen={0x22, 0x0, "da35d5bcf3c3b03fd2"}, @window={0x3, 0x0, 0xb}]}}, {"ffebda9b8bbf231807759d9b94a7642d6df68dae3933a3e92020b2f56a5e2e6f21008b81bf0949ca6e94232f03c520aa83630a46de7abca986695379bed2b3a772cf81c911220ee5125be76a7921a9f7f593b318e2f2b6000d908cd00101fd852d8d52cc2ab2d5c36b9b86557835285b6fca6f12bf3a01a5b9fc59eef8029f1b0a9d05b322d32e566dadf476e3f6cdc096122ff25420da"}}}}}}, 0x0) 1m6.627779526s ago: executing program 4 (id=243): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x2, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0xa00, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2000042, 0x8, 0x0, 0x0}}, 0x13) shutdown(0xffffffffffffffff, 0x2000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1m5.332580822s ago: executing program 4 (id=255): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) io_setup(0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003"], 0xdc}}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsopen(0x0, 0x0) r5 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89fe, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x4}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_ID={0x8}]}, 0x50}}, 0x24040080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 1m3.987811831s ago: executing program 4 (id=260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x9a4, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x1, 0x20002f5, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r5, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 1m2.962936814s ago: executing program 4 (id=266): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f}) 47.316160727s ago: executing program 32 (id=266): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f}) 14.631753568s ago: executing program 1 (id=385): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 14.508743644s ago: executing program 1 (id=387): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1}) 14.331567699s ago: executing program 5 (id=389): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0x10c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8040) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x8003fde, 0x800, 0x2, 0x184}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x6}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r5, 0x154e, 0x0, 0x41, 0x0, 0x0) 11.351502218s ago: executing program 5 (id=394): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 11.171330305s ago: executing program 5 (id=396): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4d, @rand_addr, 0x10000}, 0x1c) syz_emit_ethernet(0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c200000e08004500002b0002000020119078000000000000000000004e202900179078bb2d1025d72fcad3a56a8ab898f509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x163082) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86"], 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus640-sse2)\x00'}, 0x58) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r4, 0x1) 9.127923631s ago: executing program 1 (id=397): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x14122, 0x0, 0x0) 9.091283078s ago: executing program 0 (id=398): recvmsg(0xffffffffffffffff, 0x0, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'vlan0\x00', {0x8}, 0xff}) 9.000248296s ago: executing program 5 (id=399): socket(0x2a, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0xa7d9}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x237]}}, 0x5c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) ioprio_set$pid(0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 8.915631638s ago: executing program 1 (id=400): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000009c0)={0x1, 'gre0\x00', 0x4}, 0x18) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r8 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r8) keyctl$instantiate(0xc, r8, 0x0, 0x0, 0xffffffffffffffff) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) 8.914956089s ago: executing program 2 (id=401): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$packet(0x11, 0x2, 0x300) 8.891211523s ago: executing program 0 (id=402): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x838a3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.718083665s ago: executing program 3 (id=403): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xfff}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0606120c"], 0x9) 8.51959042s ago: executing program 0 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000002b40), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x0, @value=0x67}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0139caa282fd7a0200000000000000000000010000000000000004030000000000000e0100"/58, @ANYRES16=r0], 0x0, 0x3a, 0x0, 0x1, 0x0, 0x10000}, 0x28) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(r3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 7.723424709s ago: executing program 0 (id=405): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x529d, 0x11900, 0x8000003, 0xe2, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) r6 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_provisioning(&(0x7f0000000100), 0x0, &(0x7f0000000200)={0x3, 0x0, @b}, 0x48, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x14, 0x7, 0x80000000, 0x8, 0xdb28, 0x100000000, 0xfffffff7, 0x3}, 0x0) syz_io_uring_setup(0x2ba9, &(0x7f00000001c0)={0x0, 0x9530, 0x1000, 0x2, 0x184}, &(0x7f0000000380), &(0x7f00000003c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) poll(0x0, 0x0, 0x800) 7.65856804s ago: executing program 2 (id=406): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766cc00a000400000000000000000000bd2d242953d94c9e48109a3f2fb57baba53b03dab7ec568a21dac3520537c583f25e51f79c611c7007260e4150560674fbccb33e8367c96f80eda44d055d58d5a1b51d066fdb226ab7351bc00dac195b09fb6e83b7f390c0c84f0289c455cd8bd38d05cfdcaf7ac1a8bcc441f256a36ef98ac31802c2ca202dcc8d594dbca382ea1b4c92f8799702000000bb3c902dcce86ff5f318c43d2659380cb0e8b5cfcde13f1a31e2b9eac7d623c1e8be2bf218a0851f0b3e77007daca61333de46e480e4ab618ec57e33"], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r3, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.63585659s ago: executing program 3 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xa, 0x73, 0x5, 0x1000000, 0xb, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) 5.94061594s ago: executing program 2 (id=408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffefffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 5.776307468s ago: executing program 1 (id=409): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @host, 0x8, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x846}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000048c0)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x28864aa, &(0x7f0000000300)={[], [{@dont_appraise}]}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4.675897154s ago: executing program 3 (id=410): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x0, 0x0, 0x8}}}}}, 0x0) 4.660172181s ago: executing program 5 (id=411): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = dup(r4) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r8, &(0x7f0000000180)=ANY=[], 0xfffffecc) mmap$binder(&(0x7f0000b3a000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x4) madvise(&(0x7f00004c0000/0x4000)=nil, 0x4000, 0x66) 4.518748988s ago: executing program 0 (id=412): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000940)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r4}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x80000004, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) 4.439851857s ago: executing program 3 (id=413): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x2000e844) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) 4.425149033s ago: executing program 1 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 4.246952745s ago: executing program 2 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.243872312s ago: executing program 3 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414910800060003"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002c9d7000ffdbdf2504"], 0x14}}, 0x800) 3.24274453s ago: executing program 0 (id=417): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0x100}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8040) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x8003fde, 0x800, 0x2, 0x184}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x6}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r5, 0x154e, 0x0, 0x41, 0x0, 0x0) 3.145772429s ago: executing program 2 (id=418): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0x40045010, &(0x7f0000000300)=0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.116427127s ago: executing program 3 (id=419): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc044560f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) syz_usbip_server_init(0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.739485014s ago: executing program 2 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010000bd7000fbdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) r10 = accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80400) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000600)="00d963646680c5f7806496f4f35e95b1825366f90b75a979bad93f3157804ec8ab62a6c5c329c401daa7255c0df376cde51475d17fa56dc76cd4278a3eb553f7af3198fe6c3515b10fcee955683756d3c69bdf08f2ee6a564ca0c672f77040608b80194510f3cd8b9861d6572e208161fee81f3bec5ab7c7d4613a584d856483489a6e8daab99f48186df53f6fc157ee1637ae7f7b61f6f4ea4cade88a301faf3e9983b526be669ee4f212318d7451d38b3d8e12329ea9d871d2df0b70e86a7bc6b2c153259130716ffcb7ef", &(0x7f0000000440)="c3bbf9c96b70bbc01139b48a52a636e2344b426641bb240787df8bcda280e3c43ca3e45b80852b2e9c999b9f9694f7c5ff9e331fac6a1430029c095d1bc7d58490c4f7ea95f182e693c60362713b1b8173d4425dfe9cf701061fe0c5342840d54c769b25b825773834d9f0dad41d79f5b2b9"}}, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) bind$packet(r10, &(0x7f0000000200)={0x11, 0xc, r11, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) recvmsg(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r12, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000540)=0xfffffffc) 0s ago: executing program 5 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000600000029000000b9"], 0x28}}], 0x1, 0x44010) r3 = io_uring_setup(0x2c48, &(0x7f0000000280)={0x0, 0xdfc8, 0x80, 0x2, 0x1af}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000028c0)='asymmetric\x00', &(0x7f0000002980)=@keyring) keyctl$get_persistent(0x16, 0x0, r9) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000300)={{0x240, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @private=0xa010100}, 'syz_tun\x00'}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0xc, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) readv(r11, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f32"], 0x138) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r13, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 65.236496][ T5811] cgroup: Unknown subsys name 'net' [ 65.425949][ T5811] cgroup: Unknown subsys name 'cpuset' [ 65.434382][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.869570][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.075644][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.083390][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.091896][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.099383][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.106777][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.124209][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.124662][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.131534][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.139334][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.146757][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.153093][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.160230][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.173937][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.174419][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.189691][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.190012][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.205781][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.207943][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.213812][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.220808][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.227449][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.248418][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.252825][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.256170][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.275589][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.971619][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.986314][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 70.004588][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.161508][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.255563][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 70.301601][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.309140][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.316848][ T5821] bridge_slave_0: entered allmulticast mode [ 70.324538][ T5821] bridge_slave_0: entered promiscuous mode [ 70.349100][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.356422][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.363628][ T5827] bridge_slave_0: entered allmulticast mode [ 70.370568][ T5827] bridge_slave_0: entered promiscuous mode [ 70.383072][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.390190][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.397659][ T5821] bridge_slave_1: entered allmulticast mode [ 70.405180][ T5821] bridge_slave_1: entered promiscuous mode [ 70.430644][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.437872][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.445259][ T5824] bridge_slave_0: entered allmulticast mode [ 70.452226][ T5824] bridge_slave_0: entered promiscuous mode [ 70.459876][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.467031][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.474627][ T5827] bridge_slave_1: entered allmulticast mode [ 70.481608][ T5827] bridge_slave_1: entered promiscuous mode [ 70.515563][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.522855][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.530107][ T5824] bridge_slave_1: entered allmulticast mode [ 70.537165][ T5824] bridge_slave_1: entered promiscuous mode [ 70.634192][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.650743][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.663983][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.673262][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.680398][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.688015][ T5839] bridge_slave_0: entered allmulticast mode [ 70.695004][ T5839] bridge_slave_0: entered promiscuous mode [ 70.705035][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.727171][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.738827][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.764284][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.771791][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.779483][ T5839] bridge_slave_1: entered allmulticast mode [ 70.786668][ T5839] bridge_slave_1: entered promiscuous mode [ 70.863722][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.870881][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.878872][ T5835] bridge_slave_0: entered allmulticast mode [ 70.886737][ T5835] bridge_slave_0: entered promiscuous mode [ 70.894833][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.901906][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.909128][ T5835] bridge_slave_1: entered allmulticast mode [ 70.916888][ T5835] bridge_slave_1: entered promiscuous mode [ 70.936990][ T5827] team0: Port device team_slave_0 added [ 70.944899][ T5824] team0: Port device team_slave_0 added [ 70.962883][ T5821] team0: Port device team_slave_0 added [ 70.981676][ T5827] team0: Port device team_slave_1 added [ 70.989818][ T5824] team0: Port device team_slave_1 added [ 70.998381][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.010287][ T5821] team0: Port device team_slave_1 added [ 71.056848][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.080425][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.139008][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.149475][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.156782][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.182810][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.198856][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.206895][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.233367][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.255042][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.261987][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.293359][ T5828] Bluetooth: hci0: command tx timeout [ 71.294671][ T5828] Bluetooth: hci1: command tx timeout [ 71.294834][ T5828] Bluetooth: hci2: command tx timeout [ 71.300328][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.306427][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313752][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.321917][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327994][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.366965][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.367075][ T5828] Bluetooth: hci3: command tx timeout [ 71.377560][ T5830] Bluetooth: hci4: command tx timeout [ 71.403895][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.410836][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.437038][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.448781][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.455891][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.482129][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.503236][ T5839] team0: Port device team_slave_0 added [ 71.534944][ T5835] team0: Port device team_slave_0 added [ 71.545590][ T5839] team0: Port device team_slave_1 added [ 71.553987][ T5835] team0: Port device team_slave_1 added [ 71.587895][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.594998][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.620956][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.669774][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.677007][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.703019][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.753291][ T5824] hsr_slave_0: entered promiscuous mode [ 71.759726][ T5824] hsr_slave_1: entered promiscuous mode [ 71.774244][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.781165][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.807159][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.847524][ T5827] hsr_slave_0: entered promiscuous mode [ 71.854485][ T5827] hsr_slave_1: entered promiscuous mode [ 71.860847][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 71.866690][ T5827] Cannot create hsr debugfs directory [ 71.874545][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.881471][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.908237][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.925111][ T5821] hsr_slave_0: entered promiscuous mode [ 71.931914][ T5821] hsr_slave_1: entered promiscuous mode [ 71.938188][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 71.943955][ T5821] Cannot create hsr debugfs directory [ 72.026926][ T5835] hsr_slave_0: entered promiscuous mode [ 72.033697][ T5835] hsr_slave_1: entered promiscuous mode [ 72.040085][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.046491][ T5835] Cannot create hsr debugfs directory [ 72.176333][ T5839] hsr_slave_0: entered promiscuous mode [ 72.183458][ T5839] hsr_slave_1: entered promiscuous mode [ 72.189596][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 72.195354][ T5839] Cannot create hsr debugfs directory [ 72.654492][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.682441][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.694013][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.714591][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.756205][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.771160][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.781240][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.791990][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.902549][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.915562][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.926282][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.937299][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.056648][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.087928][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.101919][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.120690][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.130476][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.191458][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.210421][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.242949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.250177][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.296176][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.305838][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.317199][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.327946][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.340063][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.353132][ T5830] Bluetooth: hci1: command tx timeout [ 73.353239][ T5828] Bluetooth: hci2: command tx timeout [ 73.358572][ T5830] Bluetooth: hci0: command tx timeout [ 73.376561][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.383722][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.392671][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.399908][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.418691][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.425863][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.433534][ T5830] Bluetooth: hci4: command tx timeout [ 73.443422][ T5830] Bluetooth: hci3: command tx timeout [ 73.481969][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.568663][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.581076][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.630865][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.638052][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.680447][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.687657][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.704549][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.788684][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.869128][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.876318][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.930577][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.948384][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.967387][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.974581][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.999882][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.024827][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.130282][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.152370][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.159572][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.185000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.192189][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.216959][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.336766][ T5824] veth0_vlan: entered promiscuous mode [ 74.416500][ T5824] veth1_vlan: entered promiscuous mode [ 74.439100][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.518461][ T5821] veth0_vlan: entered promiscuous mode [ 74.564926][ T5821] veth1_vlan: entered promiscuous mode [ 74.581463][ T5824] veth0_macvtap: entered promiscuous mode [ 74.627465][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.639614][ T5827] veth0_vlan: entered promiscuous mode [ 74.656310][ T5824] veth1_macvtap: entered promiscuous mode [ 74.708909][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.720556][ T5827] veth1_vlan: entered promiscuous mode [ 74.742455][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.808446][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.819160][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.832507][ T5821] veth0_macvtap: entered promiscuous mode [ 74.844881][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.859531][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.868698][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881723][ T5821] veth1_macvtap: entered promiscuous mode [ 74.990197][ T5827] veth0_macvtap: entered promiscuous mode [ 75.001838][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.037254][ T5827] veth1_macvtap: entered promiscuous mode [ 75.079426][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.091166][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.093691][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.120772][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131448][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.144987][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154092][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.179198][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.211046][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.217481][ T5835] veth0_vlan: entered promiscuous mode [ 75.219115][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.233234][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.257233][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.294915][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.315978][ T5839] veth0_vlan: entered promiscuous mode [ 75.324103][ T5835] veth1_vlan: entered promiscuous mode [ 75.335161][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.336431][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.344158][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.433240][ T5830] Bluetooth: hci2: command tx timeout [ 75.438674][ T5830] Bluetooth: hci1: command tx timeout [ 75.446519][ T5828] Bluetooth: hci0: command tx timeout [ 75.454047][ T5839] veth1_vlan: entered promiscuous mode [ 75.514286][ T5822] Bluetooth: hci4: command tx timeout [ 75.519788][ T5830] Bluetooth: hci3: command tx timeout [ 75.547797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.570681][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.617882][ T5835] veth0_macvtap: entered promiscuous mode [ 75.667558][ T5835] veth1_macvtap: entered promiscuous mode [ 75.690901][ T5839] veth0_macvtap: entered promiscuous mode [ 75.717518][ T5839] veth1_macvtap: entered promiscuous mode [ 75.725063][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.738685][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.772375][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.781284][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.824961][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.834025][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.840198][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.858760][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.895448][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.936254][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.972909][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.026077][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040316][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.150794][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194583][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.257386][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.531436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.633898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.642902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.736279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.071630][ T30] audit: type=1326 audit(1762655097.901:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 77.394729][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412799][ T30] audit: type=1326 audit(1762655097.901:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 77.509843][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.566082][ T30] audit: type=1326 audit(1762655097.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 77.569800][ T5830] Bluetooth: hci1: command tx timeout [ 77.593680][ T5830] Bluetooth: hci0: command tx timeout [ 77.599076][ T5830] Bluetooth: hci2: command tx timeout [ 77.599555][ T5822] Bluetooth: hci3: command tx timeout [ 77.604508][ T5830] Bluetooth: hci4: command tx timeout [ 77.634058][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.691713][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.721313][ T5949] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 77.741937][ T30] audit: type=1326 audit(1762655097.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 77.743254][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.777701][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.822215][ T5944] loop0: detected capacity change from 0 to 40427 [ 77.866570][ T5944] ======================================================= [ 77.866570][ T5944] WARNING: The mand mount option has been deprecated and [ 77.866570][ T5944] and is ignored by this kernel. Remove the mand [ 77.866570][ T5944] option from the mount to silence this warning. [ 77.866570][ T5944] ======================================================= [ 77.878342][ T30] audit: type=1326 audit(1762655097.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 77.903006][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.983280][ T5964] loop1: detected capacity change from 0 to 512 [ 77.986085][ T30] audit: type=1326 audit(1762655097.911:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 77.992262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.054056][ T5944] F2FS-fs (loop0): build fault injection rate: 691 [ 78.064186][ T5944] F2FS-fs (loop0): invalid crc value [ 78.089066][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.091072][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.109148][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.118478][ T30] audit: type=1326 audit(1762655097.911:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 78.141200][ T30] audit: type=1326 audit(1762655097.911:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 78.141210][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.144454][ T5964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.164528][ T30] audit: type=1326 audit(1762655097.921:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 78.214281][ T5964] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.347569][ T30] audit: type=1326 audit(1762655097.921:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x7ffc0000 [ 78.681717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.793074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.886598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.895449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.091374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.100215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.490741][ T5944] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 79.536634][ T5944] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.775205][ T5985] loop2: detected capacity change from 0 to 512 [ 79.837866][ T5964] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #2: comm syz.1.8: corrupted inode contents [ 79.851405][ T5964] EXT4-fs error (device loop1): ext4_dirty_inode:6521: inode #2: comm syz.1.8: mark_inode_dirty error [ 79.863489][ T5964] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #2: comm syz.1.8: corrupted inode contents [ 79.875961][ T5964] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.8: mark_inode_dirty error [ 80.140659][ T5985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.164144][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.191065][ T5985] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.331355][ T6000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12'. [ 81.341652][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12'. [ 81.353797][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12'. [ 81.693652][ T5994] EXT4-fs error (device loop2): ext4_do_update_inode:5636: inode #2: comm syz.2.3: corrupted inode contents [ 81.783842][ T5994] EXT4-fs error (device loop2): ext4_dirty_inode:6521: inode #2: comm syz.2.3: mark_inode_dirty error [ 81.815457][ T5994] EXT4-fs error (device loop2): ext4_do_update_inode:5636: inode #2: comm syz.2.3: corrupted inode contents [ 81.832311][ T5994] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3: mark_inode_dirty error [ 81.870230][ T5987] loop3: detected capacity change from 0 to 32768 [ 81.998850][ T5987] non-latin1 character 0x266 found in JFS file name [ 82.043279][ T5987] mount with iocharset=utf8 to access [ 82.075104][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.270630][ T6010] loop0: detected capacity change from 0 to 512 [ 82.356440][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.453101][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.466572][ T6010] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.882124][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 82.953104][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.068204][ T24] usb 2-1: config 0 descriptor?? [ 83.385969][ T24] cp210x 2-1:0.0: cp210x converter detected [ 83.437884][ T6020] loop4: detected capacity change from 0 to 4096 [ 83.587154][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.899516][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 83.930898][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 84.409763][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 84.795051][ T5882] usb 2-1: USB disconnect, device number 2 [ 84.885052][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.934678][ T5882] cp210x 2-1:0.0: device disconnected [ 85.009767][ T6030] loop0: detected capacity change from 0 to 8192 [ 85.017581][ T6030] vfat: Unknown parameter 'i!h-v/' [ 86.020260][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 86.020285][ T30] audit: type=1326 audit(1762655106.781:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 86.117667][ T6043] Invalid source name [ 86.121884][ T6043] UBIFS error (pid: 6043): cannot open "./file0", error -22 [ 86.391469][ T30] audit: type=1326 audit(1762655106.781:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 86.409688][ T6039] loop4: detected capacity change from 0 to 4096 [ 86.597895][ T6044] bridge_slave_0: left allmulticast mode [ 86.628265][ T30] audit: type=1326 audit(1762655106.781:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 86.670316][ T6048] io-wq is not configured for unbound workers [ 86.691964][ T794] cfg80211: failed to load regulatory.db [ 86.716248][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.788577][ T30] audit: type=1326 audit(1762655106.791:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 86.841838][ T6044] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.908675][ T30] audit: type=1326 audit(1762655106.791:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 86.971165][ T6046] loop2: detected capacity change from 0 to 1024 [ 87.022846][ T30] audit: type=1326 audit(1762655106.791:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 87.092812][ T30] audit: type=1326 audit(1762655106.791:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 87.304642][ T6056] loop3: detected capacity change from 0 to 4096 [ 87.338639][ T30] audit: type=1326 audit(1762655106.791:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 87.384533][ T30] audit: type=1326 audit(1762655106.801:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 87.412972][ T6056] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 87.906293][ T30] audit: type=1326 audit(1762655106.801:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6186d8f6c9 code=0x7ffc0000 [ 87.959726][ T6064] FAULT_INJECTION: forcing a failure. [ 87.959726][ T6064] name failslab, interval 1, probability 0, space 0, times 1 [ 87.969828][ T6056] ntfs3(loop3): Failed to load $Extend (-22). [ 87.972464][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(full) [ 87.972483][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.972499][ T6064] Call Trace: [ 87.972507][ T6064] [ 87.972516][ T6064] dump_stack_lvl+0x189/0x250 [ 87.972545][ T6064] ? __pfx____ratelimit+0x10/0x10 [ 87.972567][ T6064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.972590][ T6064] ? __pfx__printk+0x10/0x10 [ 87.972609][ T6064] ? skb_network_protocol+0x4fe/0x760 [ 87.972640][ T6064] should_fail_ex+0x414/0x560 [ 87.972664][ T6064] should_failslab+0xa8/0x100 [ 87.972689][ T6064] kmem_cache_alloc_noprof+0x88/0x700 [ 87.972714][ T6064] ? skb_clone+0x212/0x3a0 [ 87.972740][ T6064] skb_clone+0x212/0x3a0 [ 87.972760][ T6064] ? dev_queue_xmit_nit+0x268/0xad0 [ 87.972783][ T6064] dev_queue_xmit_nit+0x29a/0xad0 [ 87.972803][ T6064] ? dev_queue_xmit_nit+0x2d/0xad0 [ 87.972833][ T6064] dev_hard_start_xmit+0x1be/0x830 [ 87.972872][ T6064] __dev_queue_xmit+0x172a/0x3740 [ 87.972909][ T6064] ? do_syscall_64+0xfa/0xfa0 [ 87.972929][ T6064] ? __dev_queue_xmit+0x284/0x3740 [ 87.972962][ T6064] ? __pfx___dev_queue_xmit+0x10/0x10 [ 87.973004][ T6064] ? __copy_skb_header+0xa7/0x550 [ 87.973026][ T6064] ? __asan_memcpy+0x40/0x70 [ 87.973048][ T6064] ? __skb_clone+0x63/0x7a0 [ 87.973081][ T6064] ? __skb_clone+0x483/0x7a0 [ 87.973109][ T6064] ? skb_clone+0x246/0x3a0 [ 87.973133][ T6064] __netlink_deliver_tap+0x5d9/0x8b0 [ 87.973168][ T6064] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.973190][ T6064] netlink_deliver_tap+0x19c/0x1b0 [ 87.973212][ T6064] netlink_unicast+0x7fa/0x9e0 [ 87.973240][ T6064] ? __pfx_netlink_unicast+0x10/0x10 [ 87.973260][ T6064] ? netlink_sendmsg+0x642/0xb30 [ 87.973278][ T6064] ? skb_put+0x11b/0x210 [ 87.973301][ T6064] netlink_sendmsg+0x805/0xb30 [ 87.973332][ T6064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.973356][ T6064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 87.973382][ T6064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.973398][ T6064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.973420][ T6064] __sock_sendmsg+0x21c/0x270 [ 87.973440][ T6064] ____sys_sendmsg+0x505/0x830 [ 87.973468][ T6064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.973499][ T6064] ? import_iovec+0x74/0xa0 [ 87.973525][ T6064] ___sys_sendmsg+0x21f/0x2a0 [ 87.973549][ T6064] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.973606][ T6064] ? __fget_files+0x2a/0x420 [ 87.973628][ T6064] ? __fget_files+0x3a0/0x420 [ 87.973660][ T6064] __x64_sys_sendmsg+0x19b/0x260 [ 87.973684][ T6064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.973715][ T6064] ? __pfx_ksys_write+0x10/0x10 [ 87.973739][ T6064] ? do_syscall_64+0xbe/0xfa0 [ 87.973764][ T6064] do_syscall_64+0xfa/0xfa0 [ 87.973786][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.973802][ T6064] ? clear_bhb_loop+0x60/0xb0 [ 87.973822][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.973838][ T6064] RIP: 0033:0x7f6186d8f6c9 [ 87.973858][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.973871][ T6064] RSP: 002b:00007f6187be6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.973888][ T6064] RAX: ffffffffffffffda RBX: 00007f6186fe5fa0 RCX: 00007f6186d8f6c9 [ 87.973900][ T6064] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 87.973911][ T6064] RBP: 00007f6187be6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.973921][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.973940][ T6064] R13: 00007f6186fe6038 R14: 00007f6186fe5fa0 R15: 00007ffd288a3458 [ 87.973970][ T6064] [ 88.103208][ T6066] loop0: detected capacity change from 0 to 512 [ 88.309057][ T6056] ntfs3(loop3): Failed to initialize $Extend. [ 88.352830][ T6066] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.435643][ T6066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.456616][ T6053] loop1: detected capacity change from 0 to 32768 [ 88.558135][ T6053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.25 (6053) [ 88.585843][ T6066] EXT4-fs (loop0): 1 truncate cleaned up [ 88.648034][ T6066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.722089][ T6053] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.780895][ T6053] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 88.939231][ T6078] loop2: detected capacity change from 0 to 512 [ 89.034575][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.181010][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.198477][ T6078] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.961887][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.138542][ T6053] BTRFS error (device loop1): open_ctree failed: -4 [ 91.251476][ T6127] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 97.478806][ T6300] warning: `syz.1.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.316612][ T6337] overlayfs: failed to get inode (-116) [ 101.330934][ T6346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.433768][ T6343] overlayfs: failed to get inode (-116) [ 101.498997][ T6337] overlayfs: failed to get inode (-116) [ 101.533361][ T6343] overlayfs: failed to get inode (-116) [ 103.744618][ T5974] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.904904][ T5974] usb 4-1: Using ep0 maxpacket: 8 [ 103.926614][ T5974] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.938234][ T5974] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.949444][ T5974] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.959587][ T5974] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.973060][ T5974] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.983746][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.052135][ T6349] v: renamed from ip6_vti0 (while UP) [ 104.083561][ T6354] vlan2: entered allmulticast mode [ 104.088688][ T6354] hsr_slave_1: entered allmulticast mode [ 104.331347][ T6370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.153'. [ 105.062013][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 105.075819][ T6377] binder: 6365:6377 ioctl 0 200000000040 returned -22 [ 105.760177][ T6401] loop1: detected capacity change from 0 to 512 [ 106.053699][ T5974] usb 4-1: usb_control_msg returned -71 [ 106.059818][ T5974] usbtmc 4-1:16.0: can't read capabilities [ 106.082832][ T5974] usb 4-1: USB disconnect, device number 2 [ 106.182546][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.231061][ T6410] loop3: detected capacity change from 0 to 1024 [ 106.262805][ T6401] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.670769][ T5194] udevd[5194]: worker [6035] terminated by signal 33 (Unknown signal 33) [ 106.707061][ T5194] udevd[5194]: worker [6035] failed while handling '/devices/virtual/block/loop1' [ 106.762236][ T5194] udevd[5194]: worker [6072] terminated by signal 33 (Unknown signal 33) [ 106.772411][ T5194] udevd[5194]: worker [6072] failed while handling '/devices/virtual/block/loop3' [ 106.873141][ T6422] Zero length message leads to an empty skb [ 106.916358][ T6422] loop2: detected capacity change from 0 to 764 [ 107.391822][ T6422] rock: directory entry would overflow storage [ 107.398243][ T6422] rock: sig=0x4654, size=5, remaining=4 [ 107.756103][ T6415] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #2: comm syz.1.166: corrupted inode contents [ 108.121998][ T1165] hfsplus: b-tree write err: -5, ino 4 [ 108.154701][ T6415] EXT4-fs error (device loop1): ext4_dirty_inode:6521: inode #2: comm syz.1.166: mark_inode_dirty error [ 108.504363][ T6415] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #2: comm syz.1.166: corrupted inode contents [ 108.521027][ T6415] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.166: mark_inode_dirty error [ 109.661466][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.770505][ T6463] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 111.770505][ T6463] program syz.3.176 not setting count and/or reply_len properly [ 112.445270][ T6467] loop8: detected capacity change from 0 to 8 [ 112.462123][ T5965] Dev loop8: unable to read RDB block 8 [ 112.498275][ T5965] loop8: unable to read partition table [ 112.526106][ T5965] loop8: partition table beyond EOD, truncated [ 112.642540][ T6467] Dev loop8: unable to read RDB block 8 [ 112.677208][ T6467] loop8: unable to read partition table [ 112.710663][ T6467] loop8: partition table beyond EOD, truncated [ 112.747230][ T6467] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 113.108056][ T6476] input: syz0 as /devices/virtual/input/input6 [ 115.241134][ T6490] 9pnet_virtio: no channels available for device syz [ 115.380915][ T6491] loop3: detected capacity change from 0 to 164 [ 115.390335][ T6491] iso9660: Unknown parameter 'GPL' [ 115.522477][ T6491] loop3: detected capacity change from 0 to 2048 [ 115.541393][ T6491] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 115.836004][ T6491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.979885][ T6532] ceph: No mds server is up or the cluster is laggy [ 119.014366][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 119.016448][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 119.308330][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 119.347058][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 120.583722][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 120.764607][ T6559] netlink: 56 bytes leftover after parsing attributes in process `syz.3.206'. [ 121.544490][ T6577] syz.4.203 (6577) used greatest stack depth: 17864 bytes left [ 121.913762][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.929616][ T6589] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 121.953861][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.044862][ T6592] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 122.073606][ T6592] netlink: 2 bytes leftover after parsing attributes in process `syz.3.209'. [ 122.125119][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.136134][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 122.152925][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 122.163122][ T6589] batman_adv: batadv0: Adding interface: team0 [ 122.169292][ T6589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.214436][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.233135][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.251594][ T6589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 122.917980][ T6592] team0: entered promiscuous mode [ 122.930023][ T5902] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 122.949821][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.985227][ T6592] team_slave_0: entered promiscuous mode [ 122.991251][ T6592] team_slave_1: entered promiscuous mode [ 123.004125][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 123.012364][ T5902] usb 1-1: config 0 descriptor?? [ 123.023409][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.030262][ T6592] batman_adv: batadv0: Interface activated: team0 [ 123.037027][ T9] pvrusb2: ********** [ 123.041079][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 123.055823][ T6592] batman_adv: batadv0: Interface deactivated: team0 [ 123.062526][ T6592] batman_adv: batadv0: Removing interface: team0 [ 123.069015][ T9] pvrusb2: Important functionality might not be entirely working. [ 123.132814][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 123.144393][ T9] pvrusb2: ********** [ 123.257359][ T2343] pvrusb2: Invalid write control endpoint [ 123.267139][ T6592] bridge0: port 1(team0) entered blocking state [ 123.287613][ T6592] bridge0: port 1(team0) entered disabled state [ 123.294134][ T6592] team0: entered allmulticast mode [ 123.299459][ T6592] team_slave_0: entered allmulticast mode [ 123.305254][ T6592] team_slave_1: entered allmulticast mode [ 123.323600][ T6592] bridge0: port 1(team0) entered blocking state [ 123.329997][ T6592] bridge0: port 1(team0) entered forwarding state [ 123.498536][ T2343] pvrusb2: Invalid write control endpoint [ 123.509258][ T5936] usb 3-1: USB disconnect, device number 2 [ 123.536717][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 123.631239][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 123.645088][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 123.655632][ T2343] pvrusb2: Device being rendered inoperable [ 123.664265][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 123.672476][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 123.672753][ T5902] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 123.740418][ T2343] pvrusb2: Attached sub-driver cx25840 [ 123.758961][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 123.779396][ T6604] mmap: syz.1.216 (6604) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.802889][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 123.830228][ T5902] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 123.863579][ T5902] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 123.902025][ T5902] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 123.984161][ T5902] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 124.097235][ T5902] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 124.157387][ T6611] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.472912][ T5936] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.713232][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 125.309410][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.344302][ T5936] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.452764][ T5936] usb 3-1: config 1 interface 0 has no altsetting 0 [ 125.468642][ T5936] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 125.490722][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.538052][ T5936] usb 3-1: Product: syz [ 125.734456][ T5936] usb 3-1: Manufacturer: 瑏 [ 125.739073][ T5936] usb 3-1: SerialNumber: syz [ 126.964169][ T5902] usb 1-1: USB disconnect, device number 2 [ 127.020037][ T5936] usbhid 3-1:1.0: can't add hid device: -71 [ 127.064293][ T5936] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 127.129245][ T5936] usb 3-1: USB disconnect, device number 3 [ 127.154773][ T6649] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.181178][ T6649] overlayfs: failed to set xattr on upper [ 127.212030][ T6649] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.272273][ T6656] input: syz1 as /devices/virtual/input/input8 [ 127.385308][ T6649] overlayfs: ...falling back to index=off. [ 127.498053][ T6649] overlayfs: ...falling back to uuid=null. [ 128.782216][ T6667] syz.0.231 uses obsolete (PF_INET,SOCK_PACKET) [ 128.794115][ T6646] binder: BC_ACQUIRE_RESULT not supported [ 128.799993][ T6646] binder: 6641:6646 ioctl c0306201 200000000140 returned -22 [ 129.965308][ T6671] netlink: 176 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.170495][ T6685] ubi31: attaching mtd0 [ 130.183160][ T6685] ubi31: scanning is finished [ 130.187863][ T6685] ubi31: empty MTD device detected [ 131.274128][ T6685] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.298430][ T6685] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.308062][ T6685] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.315941][ T6685] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 131.332878][ T6685] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.339852][ T6685] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.352885][ T6685] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3234989168 [ 131.392204][ T6685] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.426083][ T6697] ubi31: background thread "ubi_bgt31d" started, PID 6697 [ 132.076410][ T6704] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.594907][ T6708] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.719468][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729493][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.731804][ T6708] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.760648][ T6720] loop2: detected capacity change from 0 to 7 [ 132.769218][ T5965] Dev loop2: unable to read RDB block 7 [ 132.775426][ T5965] loop2: unable to read partition table [ 132.781681][ T5965] loop2: partition table beyond EOD, truncated [ 132.792399][ T6720] Dev loop2: unable to read RDB block 7 [ 132.798034][ T6720] loop2: unable to read partition table [ 132.810297][ T6720] loop2: partition table beyond EOD, truncated [ 132.817163][ T6720] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 132.882236][ T6708] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.940166][ T6725] 9pnet_virtio: no channels available for device syz [ 132.949476][ T6725] netlink: zone id is out of range [ 132.970893][ T6708] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.981665][ T5882] IPVS: starting estimator thread 0... [ 133.072964][ T6726] IPVS: using max 50 ests per chain, 120000 per kthread [ 133.138835][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.213087][ T1165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.308509][ T1165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.499596][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.901518][ T6743] netlink: 88 bytes leftover after parsing attributes in process `syz.4.255'. [ 137.732780][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.902842][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 139.227058][ T5825] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 139.239159][ T5825] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.249223][ T5825] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.259190][ T5825] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.272224][ T5825] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.402761][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.759686][ T5825] usb 3-1: can't set config #16, error -71 [ 139.784361][ T5825] usb 3-1: USB disconnect, device number 4 [ 141.561645][ T6824] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 141.576167][ T6824] batman_adv: batadv0: Adding interface: team0 [ 141.582333][ T6824] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.607655][ T6824] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 141.623431][ T6825] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 141.631157][ T6825] netlink: 2 bytes leftover after parsing attributes in process `syz.0.276'. [ 141.641884][ T6825] team0: entered promiscuous mode [ 141.646959][ T6825] team_slave_0: entered promiscuous mode [ 141.652820][ T6825] team_slave_1: entered promiscuous mode [ 141.661584][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.669013][ T6825] batman_adv: batadv0: Interface activated: team0 [ 141.683786][ T6825] batman_adv: batadv0: Interface deactivated: team0 [ 141.690450][ T6825] batman_adv: batadv0: Removing interface: team0 [ 141.937502][ T6825] bridge0: port 3(team0) entered blocking state [ 141.946705][ T6825] bridge0: port 3(team0) entered disabled state [ 142.070889][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 142.257628][ T6825] team0: entered allmulticast mode [ 142.303903][ T6825] team_slave_0: entered allmulticast mode [ 142.323571][ T6825] team_slave_1: entered allmulticast mode [ 142.676912][ T6825] bridge0: port 3(team0) entered blocking state [ 142.683276][ T6825] bridge0: port 3(team0) entered forwarding state [ 142.816122][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.847315][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.891028][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 142.917901][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.947045][ T9] usb 4-1: config 0 descriptor?? [ 142.957827][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 142.973012][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 142.999095][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 143.023367][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.034252][ T9] usb 4-1: media controller created [ 143.049711][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.104694][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 143.110655][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.166834][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 143.215624][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 143.222584][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 143.275774][ T9] usb 4-1: USB disconnect, device number 3 [ 144.033720][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.382107][ T6856] random: crng reseeded on system resumption [ 145.389541][ T6854] 9pnet_virtio: no channels available for device syz [ 145.980292][ T6879] 9pnet_virtio: no channels available for device syz [ 146.984930][ T6876] netlink: 'syz.3.290': attribute type 12 has an invalid length. [ 147.694152][ T6874] syzkaller0: entered promiscuous mode [ 147.726499][ T6874] syzkaller0: entered allmulticast mode [ 148.226673][ T6893] usb usb8: usbfs: process 6893 (syz.3.296) did not claim interface 0 before use [ 148.412863][ T6899] 9p: Bad value for 'wfdno' [ 148.431228][ T6899] 9pnet_virtio: no channels available for device syz [ 149.429041][ T6911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 149.435650][ T6911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.491780][ T6911] vhci_hcd vhci_hcd.0: Device attached [ 149.669700][ T6912] vhci_hcd: connection closed [ 149.707325][ T38] vhci_hcd vhci_hcd.3: stop threads [ 149.740704][ T38] vhci_hcd vhci_hcd.3: release socket [ 149.753021][ T5936] usb 40-1: SetAddress Request (2) to port 0 [ 149.763081][ T5936] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 149.763807][ T38] vhci_hcd vhci_hcd.3: disconnect device [ 152.610912][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.621196][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.629070][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.640908][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.652593][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.610270][ T6966] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 153.616813][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.636671][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 153.884359][ T6967] vhci_hcd: connection closed [ 153.885516][ T5954] vhci_hcd vhci_hcd.0: stop threads [ 153.922759][ T793] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 153.979451][ T1165] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.037471][ T5954] vhci_hcd vhci_hcd.0: release socket [ 154.050798][ T5954] vhci_hcd vhci_hcd.0: disconnect device [ 154.263916][ T6943] chnl_net:caif_netlink_parms(): no params data found [ 155.030560][ T5936] usb 40-1: device descriptor read/8, error -110 [ 155.488186][ T5828] Bluetooth: hci5: command tx timeout [ 155.519936][ T1165] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.815314][ T1165] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.890461][ T5936] usb usb40-port1: attempt power cycle [ 156.003134][ T1165] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.339185][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.348673][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.357654][ T6943] bridge_slave_0: entered allmulticast mode [ 156.389715][ T6943] bridge_slave_0: entered promiscuous mode [ 156.429769][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.500085][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.523400][ T5936] usb usb40-port1: unable to enumerate USB device [ 156.564794][ T6943] bridge_slave_1: entered allmulticast mode [ 156.565983][ T6943] bridge_slave_1: entered promiscuous mode [ 156.738949][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.825308][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.896066][ T7007] ubi: mtd0 is already attached to ubi31 [ 157.175697][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 157.175711][ T30] audit: type=1326 audit(1762655178.581:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0e58f6c9 code=0x0 [ 157.226483][ T6943] team0: Port device team_slave_0 added [ 157.243549][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 157.281620][ T6943] team0: Port device team_slave_1 added [ 157.512971][ T5828] Bluetooth: hci5: command tx timeout [ 158.616148][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.671997][ T7020] binder: 7019:7020 ioctl c0306201 200000004a40 returned -14 [ 158.774120][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.831012][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.846690][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.855180][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.889008][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.072607][ T7026] netlink: 'syz.2.332': attribute type 2 has an invalid length. [ 159.170317][ T1165] bridge_slave_1: left allmulticast mode [ 159.197884][ T1165] bridge_slave_1: left promiscuous mode [ 159.213026][ T793] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 159.222879][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.602819][ T5828] Bluetooth: hci5: command tx timeout [ 159.840432][ T1165] bridge_slave_0: left allmulticast mode [ 159.847292][ T1165] bridge_slave_0: left promiscuous mode [ 159.854248][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.680623][ T5828] Bluetooth: hci5: command tx timeout [ 163.402085][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.523584][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.675984][ T7063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 163.683807][ T7063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.697271][ T7063] vhci_hcd vhci_hcd.0: Device attached [ 164.480014][ T1165] bond0 (unregistering): Released all slaves [ 164.504682][ T30] audit: type=1326 audit(1762655185.921:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9843b8f6c9 code=0x0 [ 164.532824][ T5895] usb 34-1: SetAddress Request (2) to port 0 [ 164.540077][ T5895] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 164.866883][ T6943] hsr_slave_0: entered promiscuous mode [ 165.000214][ T6943] hsr_slave_1: entered promiscuous mode [ 165.071708][ T6943] debugfs: 'hsr0' already exists in 'hsr' [ 165.178356][ T6943] Cannot create hsr debugfs directory [ 165.188581][ T7066] vhci_hcd: connection reset by peer [ 165.195292][ T79] vhci_hcd vhci_hcd.0: stop threads [ 165.205105][ T79] vhci_hcd vhci_hcd.0: release socket [ 165.212239][ T79] vhci_hcd vhci_hcd.0: disconnect device [ 165.260501][ T7083] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 165.293297][ T7083] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 165.333902][ T7083] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.344'. [ 165.582235][ T1165] hsr_slave_0: left promiscuous mode [ 165.614072][ T1165] hsr_slave_1: left promiscuous mode [ 165.647422][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.687469][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.724300][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.759901][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.839315][ T1165] veth1_macvtap: left promiscuous mode [ 165.860050][ T1165] veth0_macvtap: left promiscuous mode [ 165.866966][ T1165] veth1_vlan: left promiscuous mode [ 165.873820][ T1165] veth0_vlan: left promiscuous mode [ 166.006181][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 166.223263][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'. [ 166.235284][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 169.052793][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.192904][ T7118] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 169.223349][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 169.241203][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.266298][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.278738][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.290974][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.308570][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 169.345771][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.368559][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.417734][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 169.455672][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 169.752834][ T5895] usb 34-1: device descriptor read/8, error -110 [ 170.155817][ T5895] usb usb34-port1: attempt power cycle [ 170.381971][ T7100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.451314][ T7100] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.767124][ T5895] usb usb34-port1: unable to enumerate USB device [ 170.897155][ T6943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.997697][ T6943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.099414][ T24] usb 1-1: usb_control_msg returned -71 [ 171.106321][ T24] usbtmc 1-1:16.0: can't read capabilities [ 171.132155][ T6943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.222729][ T24] usb 1-1: USB disconnect, device number 3 [ 171.309046][ T6943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.615187][ T7151] syzkaller0: entered promiscuous mode [ 171.635689][ T7151] syzkaller0: entered allmulticast mode [ 172.311582][ T7172] random: crng reseeded on system resumption [ 173.065350][ T7176] input: syz1 as /devices/virtual/input/input13 [ 174.009926][ T7181] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 174.017754][ T7181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.039460][ T7181] vhci_hcd vhci_hcd.0: Device attached [ 174.096681][ T5828] Bluetooth: hci3: connection err: -111 [ 174.164604][ T30] audit: type=1800 audit(1762655195.571:94): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.361" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 174.322796][ T793] usb 34-1: SetAddress Request (6) to port 0 [ 174.330621][ T793] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 174.359350][ T7182] vhci_hcd: connection closed [ 174.359622][ T38] vhci_hcd vhci_hcd.0: stop threads [ 174.371748][ T38] vhci_hcd vhci_hcd.0: release socket [ 174.378407][ T38] vhci_hcd vhci_hcd.0: disconnect device [ 175.702054][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.348978][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.460425][ T7214] 9pnet_virtio: no channels available for device syz [ 177.544277][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.552932][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.625324][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.633958][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.451541][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.475168][ T793] usb 34-1: device descriptor read/8, error -110 [ 179.847465][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 179.921512][ T793] usb usb34-port1: attempt power cycle [ 181.074792][ T793] usb usb34-port1: unable to enumerate USB device [ 181.279475][ T7294] block nbd0: NBD_DISCONNECT [ 181.956747][ T5936] Process accounting resumed [ 182.580228][ T6943] veth0_vlan: entered promiscuous mode [ 182.582772][ T5936] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.664983][ T7322] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 182.672823][ T7322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.677246][ T6943] veth1_vlan: entered promiscuous mode [ 182.703804][ T7322] vhci_hcd vhci_hcd.0: Device attached [ 182.762813][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 182.771200][ T5936] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.806426][ T5936] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.838380][ T5936] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.873391][ T7324] vhci_hcd: connection closed [ 182.873650][ T7059] vhci_hcd vhci_hcd.3: stop threads [ 182.903152][ T6943] veth0_macvtap: entered promiscuous mode [ 182.924380][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.950828][ T7059] vhci_hcd vhci_hcd.3: release socket [ 182.966087][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.972066][ T6943] veth1_macvtap: entered promiscuous mode [ 182.984797][ T793] usb 40-1: SetAddress Request (6) to port 0 [ 182.994882][ T7059] vhci_hcd vhci_hcd.3: disconnect device [ 183.009819][ T793] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 183.052853][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.072895][ T793] usb 40-1: enqueue for inactive port 0 [ 183.097965][ T5936] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 183.116706][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.122814][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.165608][ T5936] usb 2-1: config 0 descriptor?? [ 183.236868][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.310135][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.402010][ T5936] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.404337][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.428226][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.492320][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.517695][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.528865][ T793] usb usb40-port1: attempt power cycle [ 183.611212][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.624403][ T5882] usb 2-1: USB disconnect, device number 3 [ 183.680210][ T5882] usblp0: removed [ 183.817964][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.817964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.817986][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.858438][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.176943][ T793] usb usb40-port1: unable to enumerate USB device [ 184.443138][ T7354] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 184.639984][ T7354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.742563][ T7369] bond1: (slave geneve2): making interface the new active one [ 184.772046][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.774709][ T7369] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 184.954099][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 184.969257][ T7354] bond1: entered promiscuous mode [ 184.977402][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.993208][ T7354] geneve2: entered promiscuous mode [ 185.010378][ T5902] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.034230][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.072834][ T5902] usb 2-1: Product: syz [ 185.085765][ T5902] usb 2-1: Manufacturer: syz [ 185.100074][ T5902] usb 2-1: SerialNumber: syz [ 185.149318][ T5902] usb 2-1: config 0 descriptor?? [ 185.180472][ T5902] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 185.194914][ T5902] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 185.610827][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.0.390'. [ 185.621916][ T7380] netlink: 43 bytes leftover after parsing attributes in process `syz.0.390'. [ 185.632749][ T7380] netlink: 'syz.0.390': attribute type 6 has an invalid length. [ 185.642179][ T7380] netlink: 43 bytes leftover after parsing attributes in process `syz.0.390'. [ 185.856629][ T5902] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 187.273372][ T5902] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 187.352278][ T5902] em28xx 2-1:0.0: board has no eeprom [ 187.491686][ T5902] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 187.522907][ T5902] em28xx 2-1:0.0: dvb set to bulk mode. [ 187.567975][ T5882] em28xx 2-1:0.0: Binding DVB extension [ 187.633552][ T5902] usb 2-1: USB disconnect, device number 4 [ 187.686495][ T5902] em28xx 2-1:0.0: Disconnecting em28xx [ 187.705379][ T5882] em28xx 2-1:0.0: Registering input extension [ 187.747240][ T5902] em28xx 2-1:0.0: Closing input extension [ 187.974487][ T5902] em28xx 2-1:0.0: Freeing device [ 189.537501][ T7408] fuse: Unknown parameter '0x000000000000000b00000000000000000000' [ 190.279573][ T30] audit: type=1326 audit(1762655211.691:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb0e58f6c9 code=0x0 [ 190.338048][ T7435] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 4, id = 0 [ 191.414127][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 193.102727][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.252776][ T24] usb 1-1: device descriptor read/64, error -71 [ 193.317237][ T7463] overlayfs: failed to resolve '/Dr'c.}zQ!F(r& Y_mYl!M õlcKTw_)133v€+wHU%|BJoverlay': -2 [ 194.174889][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195351][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.325602][ T7472] team_slave_0 (unregistering): left promiscuous mode [ 195.373297][ T7472] team_slave_0 (unregistering): left allmulticast mode [ 195.439465][ T7472] team0: Port device team_slave_0 removed [ 195.894610][ T7500] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 195.902438][ T7500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.915831][ T7500] vhci_hcd vhci_hcd.0: Device attached [ 196.121085][ T7502] vhci_hcd: connection closed [ 196.121264][ T7059] vhci_hcd vhci_hcd.1: stop threads [ 196.176715][ T7059] vhci_hcd vhci_hcd.1: release socket [ 196.207405][ T7059] vhci_hcd vhci_hcd.1: disconnect device [ 196.214915][ T5902] usb 36-1: SetAddress Request (2) to port 0 [ 196.222095][ T5902] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 196.234869][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 196.247885][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.255258][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.293364][ T5902] usb 36-1: enqueue for inactive port 0 [ 196.741806][ T5902] usb usb36-port1: attempt power cycle [ 198.704040][ T5902] usb usb36-port1: unable to enumerate USB device [ 199.165278][ T7531] ------------[ cut here ]------------ [ 199.172045][ T7531] WARNING: arch/x86/kvm/x86.c:13965 at kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0, CPU#0: syz.2.420/7531 [ 199.186768][ T7531] Modules linked in: [ 199.191612][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 199.202919][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.215408][ T7531] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 199.224965][ T7531] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00 [ 199.248600][ T7531] RSP: 0018:ffffc90002f87460 EFLAGS: 00010287 [ 199.255917][ T7531] RAX: ffffffff81479ee8 RBX: ffff8880593c2940 RCX: 0000000000080000 [ 199.265556][ T7531] RDX: ffffc9000bea9000 RSI: 00000000000026ec RDI: 00000000000026ed [ 199.281058][ T7531] RBP: ffffc90002f874e8 R08: ffff8880593c297f R09: 1ffff1100b27852f [ 199.292973][ T7531] R10: dffffc0000000000 R11: ffffed100b278530 R12: 1ffff920005f0e8c [ 199.302548][ T7531] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 199.312547][ T7531] FS: 00007f6187be66c0(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000 [ 199.323630][ T7531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.331531][ T7531] CR2: 0000000000000000 CR3: 0000000031c6c000 CR4: 00000000003526f0 [ 199.341143][ T7531] Call Trace: [ 199.345126][ T7531] [ 199.348641][ T7531] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 199.358404][ T7531] kvm_check_async_pf_completion+0x102/0x3c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.366072][ T7531] ? kvm_service_local_tlb_flush_requests+0xed/0x130 [ 199.374570][ T7531] vcpu_run+0x26be/0x7760 [ 199.380120][ T7531] ? vcpu_run+0x364e/0x7760 [ 199.385652][ T7531] ? __pfx_vcpu_run+0x10/0x10 [ 199.391267][ T7531] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 199.398172][ T7531] ? rcu_is_watching+0x15/0xb0 [ 199.403920][ T7531] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 199.410652][ T7531] ? __mutex_trylock_common+0x153/0x260 [ 199.417646][ T7531] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 199.424878][ T7531] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 199.432057][ T7531] ? rcu_is_watching+0x15/0xb0 [ 199.437805][ T7531] ? trace_contention_end+0x39/0x120 [ 199.444157][ T7531] ? look_up_lock_class+0x74/0x170 [ 199.450262][ T7531] ? register_lock_class+0x51/0x320 [ 199.456516][ T7531] ? __lock_acquire+0xab9/0xd20 [ 199.462339][ T7531] kvm_vcpu_ioctl+0x99a/0xed0 [ 199.467992][ T7531] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 199.474240][ T7531] ? __fget_files+0x2a/0x420 [ 199.479733][ T7531] ? __fget_files+0x3a0/0x420 [ 199.485375][ T7531] ? __fget_files+0x2a/0x420 [ 199.490858][ T7531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 199.496778][ T7531] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 199.503005][ T7531] __se_sys_ioctl+0xfc/0x170 [ 199.508483][ T7531] do_syscall_64+0xfa/0xfa0 [ 199.514265][ T7531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.521529][ T7531] ? clear_bhb_loop+0x60/0xb0 [ 199.527361][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.534443][ T7531] RIP: 0033:0x7f6186d8f6c9 [ 199.539718][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.563271][ T7531] RSP: 002b:00007f6187be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.573458][ T7531] RAX: ffffffffffffffda RBX: 00007f6186fe5fa0 RCX: 00007f6186d8f6c9 [ 199.583026][ T7531] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 199.592556][ T7531] RBP: 00007f6186e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.602334][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.611897][ T7531] R13: 00007f6186fe6038 R14: 00007f6186fe5fa0 R15: 00007ffd288a3458 [ 199.621672][ T7531] [ 199.625480][ T7531] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.634180][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 199.645172][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.657200][ T7531] Call Trace: [ 199.661106][ T7531] [ 199.664591][ T7531] dump_stack_lvl+0x99/0x250 [ 199.670067][ T7531] ? __asan_memcpy+0x40/0x70 [ 199.675541][ T7531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.681744][ T7531] ? __pfx__printk+0x10/0x10 [ 199.687224][ T7531] vpanic+0x237/0x6d0 [ 199.691970][ T7531] ? __pfx_vpanic+0x10/0x10 [ 199.697331][ T7531] ? is_bpf_text_address+0x292/0x2b0 [ 199.703640][ T7531] ? is_bpf_text_address+0x26/0x2b0 [ 199.709846][ T7531] panic+0xb9/0xc0 [ 199.714276][ T7531] ? __pfx_panic+0x10/0x10 [ 199.719561][ T7531] __warn+0x334/0x4c0 [ 199.724316][ T7531] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 199.732719][ T7531] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 199.741131][ T7531] report_bug+0x2be/0x4f0 [ 199.746293][ T7531] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 199.754684][ T7531] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 199.763077][ T7531] ? kvm_arch_can_dequeue_async_page_present+0x1ab/0x2f0 [ 199.771470][ T7531] handle_bug+0x84/0x160 [ 199.776523][ T7531] exc_invalid_op+0x1a/0x50 [ 199.781902][ T7531] asm_exc_invalid_op+0x1a/0x20 [ 199.787691][ T7531] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 199.796812][ T7531] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00 [ 199.820302][ T7531] RSP: 0018:ffffc90002f87460 EFLAGS: 00010287 [ 199.827551][ T7531] RAX: ffffffff81479ee8 RBX: ffff8880593c2940 RCX: 0000000000080000 [ 199.837085][ T7531] RDX: ffffc9000bea9000 RSI: 00000000000026ec RDI: 00000000000026ed [ 199.846615][ T7531] RBP: ffffc90002f874e8 R08: ffff8880593c297f R09: 1ffff1100b27852f [ 199.856143][ T7531] R10: dffffc0000000000 R11: ffffed100b278530 R12: 1ffff920005f0e8c [ 199.865675][ T7531] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 199.875209][ T7531] ? kvm_arch_can_dequeue_async_page_present+0x1a8/0x2f0 [ 199.883610][ T7531] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 199.892430][ T7531] kvm_check_async_pf_completion+0x102/0x3c0 [ 199.899583][ T7531] ? kvm_service_local_tlb_flush_requests+0xed/0x130 [ 199.907566][ T7531] vcpu_run+0x26be/0x7760 [ 199.912746][ T7531] ? vcpu_run+0x364e/0x7760 [ 199.918152][ T7531] ? __pfx_vcpu_run+0x10/0x10 [ 199.923743][ T7531] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 199.930594][ T7531] ? rcu_is_watching+0x15/0xb0 [ 199.936284][ T7531] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 199.943021][ T7531] ? __mutex_trylock_common+0x153/0x260 [ 199.949669][ T7531] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 199.956494][ T7531] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 199.963633][ T7531] ? rcu_is_watching+0x15/0xb0 [ 199.969322][ T7531] ? trace_contention_end+0x39/0x120 [ 199.975630][ T7531] ? look_up_lock_class+0x74/0x170 [ 199.981734][ T7531] ? register_lock_class+0x51/0x320 [ 199.987941][ T7531] ? __lock_acquire+0xab9/0xd20 [ 199.993747][ T7531] kvm_vcpu_ioctl+0x99a/0xed0 [ 199.999329][ T7531] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 200.005543][ T7531] ? __fget_files+0x2a/0x420 [ 200.011018][ T7531] ? __fget_files+0x3a0/0x420 [ 200.016594][ T7531] ? __fget_files+0x2a/0x420 [ 200.022068][ T7531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.027957][ T7531] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 200.034174][ T7531] __se_sys_ioctl+0xfc/0x170 [ 200.039666][ T7531] do_syscall_64+0xfa/0xfa0 [ 200.045041][ T7531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.052285][ T7531] ? clear_bhb_loop+0x60/0xb0 [ 200.057860][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.064895][ T7531] RIP: 0033:0x7f6186d8f6c9 [ 200.070155][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.093648][ T7531] RSP: 002b:00007f6187be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.103710][ T7531] RAX: ffffffffffffffda RBX: 00007f6186fe5fa0 RCX: 00007f6186d8f6c9 [ 200.113242][ T7531] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 200.122771][ T7531] RBP: 00007f6186e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.132300][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.141838][ T7531] R13: 00007f6186fe6038 R14: 00007f6186fe5fa0 R15: 00007ffd288a3458 [ 200.151381][ T7531] [ 200.155223][ T7531] Kernel Offset: disabled [ 200.160380][ T7531] Rebooting in 86400 seconds..