last executing test programs: 12.565047023s ago: executing program 3 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18, 0x801}], 0x1, 0x54) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18, 0x801}], 0x1, 0x54) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa36, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2e, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) mlockall(0x2) (async) mlockall(0x2) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000133000/0x3000)=nil) (async) r8 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000133000/0x3000)=nil) shmctl$SHM_LOCK(r8, 0xb) shmat(r8, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) shmat(r8, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8000000) (async) unshare(0x8000000) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 12.456862785s ago: executing program 4 (id=93): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000700)=""/253, 0xfd}, {&(0x7f0000000800)=""/135, 0x87}, {&(0x7f00000008c0)=""/209, 0xd1}], 0x6, &(0x7f00000000c0)=""/51, 0x33}, 0x4}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xa) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002bbd7000fbdbdf2501000000000000000841000000140018000000087564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="20000000030301010000001000004843000000d936a6c6000c000200fffffffe00000093c20519f468b3d4c2d6b760af6c4d58002c636e1c875f353d3a8bd8f6599d86d461dfa7f4988ec57c3511dafd822657695bed85c343"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) 12.3416279s ago: executing program 3 (id=94): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000000000104c05f20d00002000000109022400010000000c09040000020300000009210900710122050009058103"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_emit_vhci(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x140000, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000380)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FIONCLEX(r6, 0x5450) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6a7abd6a00006701fc0000000000000000047b000000000000ff0200"/54], 0x0) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000"], 0x78) 9.719670894s ago: executing program 4 (id=100): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x3f, 0x1}, 0x8) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) close(r1) r2 = getpid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x24004041) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x88, r10, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 9.457310623s ago: executing program 0 (id=102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 8.464752298s ago: executing program 3 (id=106): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) r0 = syz_pidfd_open(0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x10000002) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1a1) socket$rds(0x15, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf7, 0x9}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 8.210601191s ago: executing program 1 (id=107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r1, 0x0, 0xb0}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x33}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000002, 0xad, 0x800000}, {0xfffffffffffffffd, 0x200000, 0x7, 0xfffffffffffff800}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x40000, 0xa, 0x4, 0x0, 0x74}}, 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x8, 0x4000000b}, 0x50) 8.016883836s ago: executing program 1 (id=108): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) (async) keyctl$read(0xb, r3, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f0000000100)="17d72030", 0x4) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) (async) r6 = gettid() (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x36}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_open_dev$usbmon(0x0, 0xc260, 0x20000) 7.748243178s ago: executing program 0 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x5) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/44, 0x2c}], 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = fanotify_init(0x10, 0x101000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x455, 0x8000008, r3, 0x0) (async) fanotify_mark(r2, 0x7e, 0x800003a, r3, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) read$FUSE(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000380)=""/50, 0x32}], 0x5}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 7.560520664s ago: executing program 0 (id=111): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd2a, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2009}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x50}}, 0x2000e994) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0xc010) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x6c}}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) (async) r6 = fsmount(r4, 0x1, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f00000000c0)={0x18, r7, 0x0, 0x0, &(0x7f0000000340)}) (async) fchdir(r6) (async) socket$inet(0x2, 0x800, 0x7269) (async) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) (async) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) 6.624569984s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000004216fc7e26679e85726000f14a1e6442b5625e1c071341e9bc7de74553565c08d8c205fd5344f6d1a7e42071ad0ce0876d6acdbbcac8005d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000000000441850700000000000000000002000000850000000500000095003300000000009500a5050000000078f89bf1d906ee2978c89cf97b3bd0b18975e47785459a5c756c23803f2790bce28129500d8d51921174dec7b5f1a040fadfac1c90ffb1bdd67074b70afb5fa924c980812d8ee957eaaa14"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 6.53730284s ago: executing program 0 (id=114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd608a37f200142c00fc000000000000000000000000000000fc0100000000000000000000000000003a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9dbf0ad91af458a3df61a39620d6f325edb42e06d758c0f8cdec074b652c0b0b67a406a6"], 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.516601627s ago: executing program 1 (id=115): timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000600), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_hwaddr=@local}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r9, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) 6.440109275s ago: executing program 4 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) close(0x3) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) setresuid(0xee01, 0xee00, 0x0) (async) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0xd26237a4afdd0f18) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', r8) 5.985313189s ago: executing program 0 (id=119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5.913376178s ago: executing program 2 (id=120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0x0, 0x5, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xec\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8a\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xe2`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xfbg\xdbB\xcdbX\xb6q\x82g\x8bOX}q\xc6{S\x93\xf9\x99\x92r\x1b\\z\xd8)\xd6\xb76\xb8\xe9\xaa:\xe5\xec6\xd0\x18\xad\xeb!QU\xe31\f\xe6\x8c\x93d\x89d\xf5\xbc\b#\xe2y\x93I\x1c9\xd2\xcc\x8cxTj\xfcxQ\b\x19=0\xba\xbd\xc2\xda\xdc$*\x93#1\x97r\xe3-\xab$Q\xa6\x02\t\xba\xfb@\x11\aP\xcbO\xccb\x93l1EZ\x94\xe2\x1d\xc7\"N\x8f\xff\xad\xe8\x03\x01\x8fr`f\x91\x9f\x17\xa5=^~d?\xff;)\xc0\xbe(rD4;\xc4\xd2\xd3\xdc\xad\xa28\xa4Wny\xfaI\x96$#\xc3\x10\xd6\x95\x02\xad\x00\x94\xcdqC>\x94\x19\xa8W\xb5\x7f0b\x7f\xe4\x82\xe2sGL\xc9Q\xeb\xee\b\v?e\xaa\a<\xe4\x1a\xabH\xc5', 0x3) lseek(r4, 0xfffffffffffffff9, 0x1) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6fe2ebcd49868da3f214aa93bfa584ac80f128c42a710e1d37bbc96b297011028296a797fd28d7c3cef0684ed5799366be29d5e2d7bfb1e8db17f33066fd46848e7585f43a76ebba307a1a9567815ebdac80bbf7db82b28cbaa1fa3b4253faa75f58ddab24e9ef5f06cc467ee97bf63ddb1befdb6dcd71baec203eec136590bd2d3803f03986a12d2f1f2cb5d7fbc6a4d9b8b48af3dfca9714663885e7e7ea", @ANYRES16=r1, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x20040004) 5.909974119s ago: executing program 4 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_CAPBSET_READ(0x17, 0x3fffffffd) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x22) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x2, 0x1, 0x5}, 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x2a0, 0x24, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xb, 0x6}, {0x8}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0xf, 0x800, 0x1, 0x5, 0xb, 0x5}}, {0xe, 0x2, [0xab90, 0x8, 0x400, 0x5, 0x2]}}, {{0x1c, 0x1, {0x2, 0x8, 0x6, 0x5, 0x0, 0xabff, 0x9, 0x1}}, {0x6, 0x2, [0xc2]}}, {{0x1c, 0x1, {0xa, 0x3, 0x565e, 0x3, 0x1, 0x8000, 0x7f, 0x9}}, {0x16, 0x2, [0xfff, 0xa, 0x7, 0x70, 0x6, 0x6751, 0x9, 0x200, 0x5]}}, {{0x1c, 0x1, {0x1, 0x9, 0x100, 0x3d5, 0x2, 0xfffffff9, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x7, 0xdc, 0x2, 0xfffffff8, 0x0, 0x3}}, {0xa, 0x2, [0x80, 0xf6a1, 0x8c1d]}}, {{0x1c, 0x1, {0x5, 0xfd, 0x2, 0x400, 0x0, 0x5, 0x0, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x45, 0x1, 0x5, 0xff, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x398d]}}, {{0x1c, 0x1, {0x8, 0x53, 0x8, 0x3, 0x2, 0x1000, 0x9, 0xa}}, {0x18, 0x2, [0x0, 0x2, 0x6, 0x0, 0x0, 0x4, 0x78, 0x8000, 0x4, 0x2]}}, {{0x1c, 0x1, {0xf8, 0xce, 0x5, 0x72d, 0x1, 0x8b4, 0x5e2, 0x1}}, {0x6, 0x2, [0x4]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0xae, 0x1, 0x2, 0x3d, 0x4, 0x9}}, {0x16, 0x2, [0x3, 0x9, 0x4000, 0x4, 0x81, 0x5, 0x4, 0xe, 0x5]}}, {{0x1c, 0x1, {0x7, 0x1, 0x2, 0x929, 0x3, 0x1, 0x4, 0x4}}, {0xc, 0x2, [0xb, 0x3, 0x9, 0xa]}}, {{0x1c, 0x1, {0xab, 0x8, 0x40, 0x97, 0x1, 0x7, 0x4, 0x2}}, {0x8, 0x2, [0xffff, 0x1]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5166}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xbe9}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x10, 0xb, 0x5, 0xd, 0x0, 0x5, 0x2, 0xe, 0xb, 0x8, 0x8, 0xe, 0xe, 0x5, 0xd], 0x0, [0x9, 0x9, 0x2, 0x2, 0x5, 0x40, 0x10, 0x0, 0x5, 0x4c, 0x2, 0x3, 0xff5, 0x7, 0xfff7, 0x7fc], [0x8, 0x6, 0x4, 0xfffd, 0xfff, 0x8, 0x7f, 0x67, 0x400, 0x9, 0x5, 0x3a1, 0x9, 0x3, 0x6, 0x5]}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4050}, 0x2505146c44626001) close(r5) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delchain={0x34, 0x65, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x9, 0xb}, {0xc, 0xfff1}, {0xf, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040002) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0x3, 0xc}, {0xfff3, 0xfff1}, {0x10, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x4041080) 5.592575138s ago: executing program 2 (id=122): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a900000070109021200010000000009040000008082990079165e4ae991ce60d119607cea7f31ccf439617a10bc2b44b719a027384abc893175e5ae6301076cf282db4f731cb484e4c952d9113f71d2d2f03c2ab17257d48e7df71e283c27bdaa51e9cc8d45badc36b4a34c0e3ed5fee8d06e40dab49c3138a58eff3f4e516c465ced5c3938eee0aaf67e2c1e954dee05eafd723f8c56abb4efb6db28d46483b192d9a3d78ed20922b2f7bbf7cd7fcd59a82c98106bd7ebe2826c4a707a6a3e7fe6f22148298b15986c5c7e1c6a5a07de45703cf1c186c87c898958c5868d84"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.141820115s ago: executing program 3 (id=123): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x88, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'bond0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x4000050) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf25100000000500100080000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0xaab1336501aa5da2}, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000050) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r9, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 4.996672191s ago: executing program 1 (id=124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000952a4045c402ab2591e40be904fd27503bb01797be9e82b479293dcef8e5d273f9c40c119e025caa56f63405c6f67325edaf1ffc82691d77fa5487a1df76605dc9c997926da32fc8ec046f007cb3021ebb75237328ff1b3144dd235e28713b95114e90456318b0dea1d1ae81d90ac0509bf493eae4a6ebd70e067204b199849521fd531c919e9ba393c9c4916c636b54c3943939efaf2917146b7e00aedd06d82d51ae25982b28b406d82e2829b9b672929e77b4c01995926847eb9196231b0ceefb8ad0b1b268ce9b24b02325cb00"/244], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe39}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() fsopen(&(0x7f0000000500)='ocfs2\x00', 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x14, 0x39, 0x8, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 4.855191191s ago: executing program 4 (id=125): socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) syz_usb_connect(0x0, 0x1b, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async, rerun: 64) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0xc) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c885a5c8cdb0120ab711c000000080603000000000000000000030000040500010007000600"], 0x1c}}, 0x20000010) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (rerun: 32) 3.907830056s ago: executing program 3 (id=126): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) unshare(0x28000600) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @pix_mp={0xfffffffb, 0x1c6c, 0x34524742, 0x1, 0x2, [{0x5, 0x9}, {0x87, 0x6}, {0x4, 0x9}, {0x8dae, 0x3}, {0x6, 0x60000000}, {0x10}, {0x7fffffff, 0x4}, {0x10000008, 0x1}], 0x5, 0x7, 0x4, 0x1, 0x2}}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x3a) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma -cpu'], 0xe) 3.24487218s ago: executing program 4 (id=127): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000a40)={0xe, 0x9}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.18832966s ago: executing program 0 (id=128): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ustat(0x5, 0x0) unshare(0x8040480) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x7) tee(r3, r2, 0x8001, 0xa) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x9}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.187583539s ago: executing program 1 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(0x0, 0x0, 0x40000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000100, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000d80)=0x75d) socket$kcm(0x2, 0xa, 0x2) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) 2.26164802s ago: executing program 2 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0xa, 0x4e22, 0x7, @empty, 0xfffffff2}}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000020c0)=[{r2, 0x80}, {r2, 0x738}], 0x2, &(0x7f0000002100)={0x77359400}, &(0x7f0000002140)={[0x5]}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}}, 0x4000040) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='btrfs\x00', 0x210818, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) listen(r2, 0x0) getpid() 2.161221881s ago: executing program 3 (id=131): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000014) (async) shutdown(r0, 0x1) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESDEC=r1], 0xf4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = socket(0x23, 0x5, 0x0) r6 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) (async) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe"], 0x34c}}, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRESDEC=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r10, r10, &(0x7f0000000000)=0x2eb4, 0x2000007ff) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000200)={0x0, 0x2, 0xfffffffffffffffa, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000880)={r11, 0x4, 0xd}) 2.042874287s ago: executing program 2 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x34, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r6, 0x30, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4008050) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file0\x00', 0x4000, 0x400, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0, 0x0}, &(0x7f0000002800)=0xc) r12 = geteuid() fstat(r3, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002ac0)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002c00)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000002d00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002d40)={0x0, 0x0, 0x0}, &(0x7f0000002d80)=0xc) syz_fuse_handle_req(r4, &(0x7f0000000640)="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", 0x2000, &(0x7f0000002f00)={&(0x7f0000000180)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x18c3, 0x2, 0x6, 0x8, 0xf, 0x5, 0x0, 0x0, 0x8, 0x7}}, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x5ff}}, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x40000000000}}, &(0x7f0000000240)={0x18, 0x0, 0x76bb, {0x4}}, &(0x7f0000000280)={0x18, 0x0, 0x8, {0x155}}, &(0x7f0000000300)={0x28, 0xfffffffffffffffe, 0x7, {{0x4, 0x281, 0x0, r8}}}, &(0x7f0000000340)={0x60, 0x0, 0x2, {{0x9, 0x6e479e3b, 0x400, 0x10, 0x10000, 0x6, 0x8, 0xffff}}}, &(0x7f00000003c0)={0x18, 0x0, 0x7fffffff, {0x7}}, &(0x7f0000000400)={0x15, 0x0, 0x30000000, {'syz0\x00'}}, &(0x7f00000004c0)={0x20, 0x0, 0x8552, {0x0, 0x1}}, &(0x7f0000000540)={0x78, 0x0, 0x7fff, {0xffffffffffffffc0, 0x2, 0x0, {0x4, 0x9, 0x1, 0x3, 0x2, 0x4, 0x2, 0x3, 0x80, 0x4000, 0x0, 0xee01, r9, 0x1, 0x6}}}, &(0x7f0000002840)={0x90, 0xffffffffffffffda, 0x7f, {0x2, 0x2, 0x100000001, 0x63d9, 0x7, 0xfa0, {0x5, 0x6, 0x9, 0x7f, 0x83bc, 0x5, 0x4, 0x8f6, 0x4, 0x8000, 0x8, r10, r11, 0xb0, 0x101}}}, &(0x7f0000002900)={0x70, 0x0, 0x40c, [{0x1, 0xd5, 0x1, 0x4, '%'}, {0x1, 0x6, 0x3, 0x3, '}\x9b+'}, {0x0, 0x1da, 0x5, 0xa, 'syz0\x00'}]}, &(0x7f0000002a00)={0xb0, 0xfffffffffffffffe, 0x2, [{{0x1, 0x2, 0x6, 0xe6, 0x2, 0x2, {0x1, 0x9, 0x0, 0x7f, 0x64, 0x100000001, 0x4, 0x9, 0x40, 0x8000, 0x2, r12, r13, 0x2d7, 0x2}}, {0x4, 0x81, 0x5, 0x8, 'syz0\x00'}}]}, &(0x7f0000002b00)={0xa0, 0x0, 0x4, {{0x1, 0x3, 0x7, 0x7, 0x3, 0x2, {0x0, 0x3, 0x6, 0x9, 0x9, 0x1, 0x4, 0x1, 0x3ff, 0x8000, 0x64, r14, r15, 0x0, 0x1}}, {0x0, 0x3}}}, &(0x7f0000002bc0)={0x20, 0x0, 0x7cd, {0x8001, 0x0, 0x9, 0x3}}, &(0x7f0000002dc0)={0x130, 0x0, 0x10001, {0x1, 0x7, 0x0, '\x00', {0x200, 0x8, 0x101, 0xc768, r16, r17, 0x6000, '\x00', 0xf, 0x13703f32, 0xc8f8, 0x2, {0x5, 0x401}, {0x800}, {0x8, 0x6}, {0x3ff, 0x6}, 0x1, 0x3, 0x0, 0x1}}}}) 551.305718ms ago: executing program 2 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fsopen(&(0x7f0000000000)='autofs\x00', 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x100, @local, 0xa66c}, {0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1, {[0xa, 0x2, 0x40, 0x100, 0x6, 0xfffffffd, 0x0, 0x7]}}, 0x5c) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a000000010021", 0x7) 0s ago: executing program 2 (id=134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0x5, 0x6, 0xb6d}, {0x7, 0x0, 0x9, 0xd7a}, {0x800, 0x5, 0x2a, 0x5}, {0x5, 0xf6, 0x4, 0x3ff}]}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6463671c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x4, r2, r3, 0x25a250, 0x100000000, 0x2, 0x20704f}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0x4, @sliced={0x7, [0x66, 0x8, 0x4, 0x4, 0x4, 0x8001, 0x960a, 0x1566, 0xf30, 0x8, 0x1, 0xfff, 0x75, 0x2, 0x9fe, 0x2, 0x7, 0x6, 0x8, 0x5, 0x3, 0x6, 0x2, 0x10, 0x799, 0x8, 0xf514, 0xef2, 0x5, 0x1, 0xfffc, 0xf1, 0xf, 0x1000, 0x100, 0x4, 0x5, 0x2, 0x5, 0x1ff, 0x2, 0x8, 0x6, 0x4, 0xa916, 0x4, 0x8001, 0x200], 0x1}}) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000003c0)) r4 = syz_open_dev$vbi(&(0x7f0000000c00), 0x0, 0x2) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000001100)={{'\x00', 0x1}, {0x1}, 0x146, 0x0, 0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)="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", 0x1f3, 0x0, &(0x7f0000000ec0)={0x2, 0x172, {0x1, 0xc, 0xbd, "a9fca41ccfea6130eb853e9518e4ae50ba7427488b2256b22f2c9b25312f2ec2bddd12f14fffad334825d6c80cc36d86aaea1e1202ad72348031320fc5a33e2fa8154132b026bb55f30c6c4f0cddb42b61e2dff9fa21a8389b17658b1b50e2fd58d5932c60a7341481279ade96318d2cc2cfdbcd86a8946c17c223d5a6668ada8f98fc033125b4bc62a9ef32408075c08be79b145ec55bc92ff39ee67e0ed7c9abb2d8fda54a6c9c3025593e79f3369c96439c40c6fe2a6b7285e4d9fc", 0xa8, "283f88410e4e460fb5bfff6bb6a97cc18da90dbdf802f2db1207282977b158791b3fe2c2207e8e4260e386ce37eb2e6b324a245cfaf36027d6c70b17e62a51fed7c077d846bd64bb637c5b6cca0d06b4b89d1cbc39c6220c981edc57b5152cce14ebb01b397746052aff071f281579b9223a57dd9591cf2e92649c2264fb97cf7f6ae47ec16cb6615e98d0afe287e25762965c8b6028574f21ec80c2174feeb061c869cda0018734"}, 0x9f, "7a1d1051f9bd5c002e9053a4d48402ae936666c9e38f96a9f3007e7fa3ad4ce37787e5aaa812a125a7a5e3cd0907149239754a46fd4919867fd2741d539b461fad6a75b35bc0b3ee74ad0dcf7c0da1d7f33578394b37736bb566f083e9b415f191c25ee6f47bb1356405f5ad0fdadeb5e0f186d52ff2cfd612233cc827e00224aff4ccd3b88c05aba1acc5d19081844006a9a2f51cb2ecabd4f139878790ac"}, 0x21d}) r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000001180)={0x62, 0x9, 0x8000, "b62c239157a11e80e995c850ef484a0763049cd06e7a2bca64b827d2c5b3615ec2b13bd30a54cf4a6a600a56931735021f115a3afcbd659f015f3a785a4b8a883aa62a15dbfbfd3e6bd6f0b259c2583963d53aa04f3f80bc7a391320e0535108cc28"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) accept4$inet(r6, &(0x7f0000001280)={0x2, 0x0, @remote}, &(0x7f00000012c0)=0x10, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000001300)={0x8f, 0x0, 0x8}) getpid() setrlimit(0x0, &(0x7f0000001380)={0x8, 0x380}) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x128, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x45}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2a}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x801}, 0x40804) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000015c0)={0x2, "20df0e4fcaa855824988b3a7f26ce17273a72c86d53b63dde2935d5a1ea4dd5c", 0x2, 0x8, 0x3, 0x3200e0, 0x50204, 0x2}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r7, 0xc0385650, &(0x7f0000001680)={{0x4, @addr=0x1000}, 0x8, 0x80, 0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000016c0)={0xe0, 0x1, 0x4, {0xc, @raw_data="0b62d6c795f7e6fedf27b4e7f24e7247735fada87676acbc45e6c8e26b8182d1b0f8b89ff9fa5deef6fd9be3c1f785a48c771adbf20b8f2689c72fb1816d09604e6763e1daae46fe197e73d76a01ca2df88bb2ba8437b70cf491980250fe33875b3eb8b9e88c44b04a88735d8ef8cef72e8d69aa6099237db92cc12ca10ab7106a1348eda565eb059c83487fffdb3b5ffd1d921659a8f700c33fa8e670416903364c34115ec93ab291cf60464e2f888c72403b28e0f0802c28910d00c71dce1a6cafddaa4e57bac7"}, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28000000}, 0x40000) read$FUSE(0xffffffffffffffff, &(0x7f00000018c0)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003bc0)={r6, 0xe0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000003940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003980)=[0x0], 0x0, 0x19, &(0x7f00000039c0)=[{}, {}], 0x10, 0x10, &(0x7f0000003a00), &(0x7f0000003a40), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000003a80)}}, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003c00), 0x0, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000003c40)={0x2f, 0x4, 0x0, {0x5, 0x50a, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000003c80)=0x37, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 63.951304][ T30] audit: type=1400 audit(1766772204.400:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.974602][ T30] audit: type=1400 audit(1766772204.430:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.976966][ T5798] cgroup: Unknown subsys name 'net' [ 64.004754][ T30] audit: type=1400 audit(1766772204.460:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.107759][ T5798] cgroup: Unknown subsys name 'cpuset' [ 64.115382][ T5798] cgroup: Unknown subsys name 'rlimit' [ 64.293628][ T30] audit: type=1400 audit(1766772204.750:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.317439][ T30] audit: type=1400 audit(1766772204.750:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.353409][ T30] audit: type=1400 audit(1766772204.750:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.375826][ T30] audit: type=1400 audit(1766772204.750:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.396170][ T30] audit: type=1400 audit(1766772204.770:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.398477][ T5800] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.420995][ T30] audit: type=1400 audit(1766772204.770:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 64.453749][ T30] audit: type=1400 audit(1766772204.910:71): avc: denied { relabelto } for pid=5800 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.445478][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.459529][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.468467][ T5136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.481142][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.483784][ T5136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.495580][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.496597][ T5136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.510786][ T5136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.519785][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.527185][ T5136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.533926][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.534600][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.542191][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.549258][ T5136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.556772][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.563855][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.575139][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.576475][ T5136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.583764][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.590338][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.597321][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.605185][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.613839][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.632765][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.640552][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.648374][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.089209][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 68.100458][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 68.136238][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 68.248853][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 68.346936][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 68.362843][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.370730][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.378028][ T5815] bridge_slave_0: entered allmulticast mode [ 68.384703][ T5815] bridge_slave_0: entered promiscuous mode [ 68.405524][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.412632][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.419797][ T5808] bridge_slave_0: entered allmulticast mode [ 68.426617][ T5808] bridge_slave_0: entered promiscuous mode [ 68.434018][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.441223][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.448552][ T5815] bridge_slave_1: entered allmulticast mode [ 68.455222][ T5815] bridge_slave_1: entered promiscuous mode [ 68.462174][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.469795][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.477198][ T5809] bridge_slave_0: entered allmulticast mode [ 68.483893][ T5809] bridge_slave_0: entered promiscuous mode [ 68.503886][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.510971][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.518373][ T5808] bridge_slave_1: entered allmulticast mode [ 68.525090][ T5808] bridge_slave_1: entered promiscuous mode [ 68.545886][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.553378][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.560529][ T5809] bridge_slave_1: entered allmulticast mode [ 68.567270][ T5809] bridge_slave_1: entered promiscuous mode [ 68.621313][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.633011][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.652733][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.659914][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.667226][ T5810] bridge_slave_0: entered allmulticast mode [ 68.673956][ T5810] bridge_slave_0: entered promiscuous mode [ 68.681876][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.692394][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.704246][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.717001][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.724164][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.731249][ T5810] bridge_slave_1: entered allmulticast mode [ 68.737926][ T5810] bridge_slave_1: entered promiscuous mode [ 68.759100][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.817368][ T5808] team0: Port device team_slave_0 added [ 68.824961][ T5815] team0: Port device team_slave_0 added [ 68.837983][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.845150][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.852233][ T5821] bridge_slave_0: entered allmulticast mode [ 68.859130][ T5821] bridge_slave_0: entered promiscuous mode [ 68.868021][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.878496][ T5808] team0: Port device team_slave_1 added [ 68.885581][ T5815] team0: Port device team_slave_1 added [ 68.892157][ T5809] team0: Port device team_slave_0 added [ 68.898022][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.905813][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.912889][ T5821] bridge_slave_1: entered allmulticast mode [ 68.919616][ T5821] bridge_slave_1: entered promiscuous mode [ 68.927270][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.950925][ T5809] team0: Port device team_slave_1 added [ 69.005579][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.012529][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.038900][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.051047][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.058133][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.084131][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.102866][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.113186][ T5810] team0: Port device team_slave_0 added [ 69.119337][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.126404][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.152918][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.169540][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.176572][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.202609][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.214426][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.221352][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.247631][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.259870][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.269996][ T5810] team0: Port device team_slave_1 added [ 69.284956][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.291880][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.317939][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.362327][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.369812][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.396640][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.408436][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.415424][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.441441][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.455683][ T5821] team0: Port device team_slave_0 added [ 69.481134][ T5821] team0: Port device team_slave_1 added [ 69.526980][ T5808] hsr_slave_0: entered promiscuous mode [ 69.532989][ T5808] hsr_slave_1: entered promiscuous mode [ 69.543735][ T5815] hsr_slave_0: entered promiscuous mode [ 69.549810][ T5815] hsr_slave_1: entered promiscuous mode [ 69.556021][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 69.561769][ T5815] Cannot create hsr debugfs directory [ 69.577450][ T5809] hsr_slave_0: entered promiscuous mode [ 69.583597][ T5809] hsr_slave_1: entered promiscuous mode [ 69.589610][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 69.595491][ T5809] Cannot create hsr debugfs directory [ 69.609212][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.616484][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.642463][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.674138][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.681075][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.707410][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.707513][ T5812] Bluetooth: hci3: command tx timeout [ 69.707518][ T5819] Bluetooth: hci4: command tx timeout [ 69.707689][ T5822] Bluetooth: hci2: command tx timeout [ 69.718454][ T5812] Bluetooth: hci1: command tx timeout [ 69.718534][ T5812] Bluetooth: hci0: command tx timeout [ 69.749539][ T5810] hsr_slave_0: entered promiscuous mode [ 69.756099][ T5810] hsr_slave_1: entered promiscuous mode [ 69.761985][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 69.767786][ T5810] Cannot create hsr debugfs directory [ 69.889435][ T5821] hsr_slave_0: entered promiscuous mode [ 69.895906][ T5821] hsr_slave_1: entered promiscuous mode [ 69.901849][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 69.907616][ T5821] Cannot create hsr debugfs directory [ 70.159335][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.170879][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.180587][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.200142][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.246488][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.267932][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.286240][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.299891][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.342853][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.356394][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.366595][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.383999][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.450621][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.459493][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.476901][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.498828][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.517026][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.558556][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.594480][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.601601][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.618013][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.630700][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.640852][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.651124][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.658371][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.671313][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.729939][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.772765][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.817734][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 70.817749][ T30] audit: type=1400 audit(1766772211.270:85): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.821957][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.851963][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.870665][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.885267][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.892351][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.912762][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.920498][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.927729][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.959478][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.986674][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.993773][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.018068][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.025146][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.055616][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.067801][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.089970][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.098176][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.105269][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.122558][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.129651][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.175474][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.205423][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.212548][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.246677][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.253826][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.275321][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.359313][ T5808] veth0_vlan: entered promiscuous mode [ 71.381074][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.434659][ T5808] veth1_vlan: entered promiscuous mode [ 71.524477][ T5808] veth0_macvtap: entered promiscuous mode [ 71.546409][ T5809] veth0_vlan: entered promiscuous mode [ 71.574695][ T5808] veth1_macvtap: entered promiscuous mode [ 71.601438][ T5809] veth1_vlan: entered promiscuous mode [ 71.650697][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.672505][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.688279][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.705911][ T180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.716023][ T180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.730817][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.738466][ T180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.748360][ T180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.781920][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.789072][ T5822] Bluetooth: hci3: command tx timeout [ 71.789799][ T5812] Bluetooth: hci0: command tx timeout [ 71.797217][ T5809] veth0_macvtap: entered promiscuous mode [ 71.800550][ T5819] Bluetooth: hci1: command tx timeout [ 71.805992][ T5827] Bluetooth: hci4: command tx timeout [ 71.811653][ T5822] Bluetooth: hci2: command tx timeout [ 71.820454][ T5809] veth1_macvtap: entered promiscuous mode [ 71.911511][ T5815] veth0_vlan: entered promiscuous mode [ 71.961675][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.972784][ T5810] veth0_vlan: entered promiscuous mode [ 71.980480][ T5815] veth1_vlan: entered promiscuous mode [ 71.997241][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.010088][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.013545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.045217][ T5810] veth1_vlan: entered promiscuous mode [ 72.057446][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.094195][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.105707][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.117536][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.127156][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.137734][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.156177][ T5815] veth0_macvtap: entered promiscuous mode [ 72.161938][ T30] audit: type=1400 audit(1766772212.610:86): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.ys7Og6/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.190645][ T30] audit: type=1400 audit(1766772212.610:87): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.225395][ T5810] veth0_macvtap: entered promiscuous mode [ 72.232525][ T30] audit: type=1400 audit(1766772212.610:88): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.ys7Og6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.233088][ T5815] veth1_macvtap: entered promiscuous mode [ 72.267961][ T30] audit: type=1400 audit(1766772212.610:89): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.292128][ T30] audit: type=1400 audit(1766772212.620:90): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.ys7Og6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.300810][ T5810] veth1_macvtap: entered promiscuous mode [ 72.324682][ T30] audit: type=1400 audit(1766772212.620:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.ys7Og6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.364417][ T30] audit: type=1400 audit(1766772212.620:92): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.367367][ T5821] veth0_vlan: entered promiscuous mode [ 72.392770][ T30] audit: type=1400 audit(1766772212.670:93): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.416154][ T30] audit: type=1400 audit(1766772212.670:94): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.417843][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.483697][ T5821] veth1_vlan: entered promiscuous mode [ 72.506822][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.517282][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.526180][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.541175][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.585114][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.602676][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.627625][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.635629][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.645223][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.656377][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.666133][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.678260][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699755][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.720805][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.736926][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.756785][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819731][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.838245][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.854348][ T5821] veth0_macvtap: entered promiscuous mode [ 72.893539][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.896919][ T5821] veth1_macvtap: entered promiscuous mode [ 72.934275][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.942103][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.975243][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.986634][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.040315][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.061054][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.071580][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.073690][ T9] usb 1-1: device descriptor read/64, error -71 [ 73.088158][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.137838][ T180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.175451][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.201989][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.220210][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.236460][ T5945] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.354258][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.402214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.516061][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 73.570756][ T9] usb 1-1: device descriptor read/64, error -71 [ 73.606885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.856416][ T9] usb usb1-port1: attempt power cycle [ 73.868286][ T5812] Bluetooth: hci0: command tx timeout [ 73.873483][ T5822] Bluetooth: hci2: command tx timeout [ 73.873739][ T5812] Bluetooth: hci1: command tx timeout [ 73.879083][ T5822] Bluetooth: hci3: command tx timeout [ 73.884991][ T5819] Bluetooth: hci4: command tx timeout [ 74.016981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.214252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.223349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 74.232043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.240647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.249237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.257682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.268655][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 74.277137][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.285301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.313019][ T5962] tmpfs: Bad value for 'mpol' [ 74.319963][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.333918][ T9] usb 1-1: device descriptor read/8, error -71 [ 74.453031][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.573414][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.604104][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 75.944567][ T5819] Bluetooth: hci3: command tx timeout [ 75.949987][ T5819] Bluetooth: hci2: command tx timeout [ 75.955463][ T5819] Bluetooth: hci0: command tx timeout [ 75.960844][ T5819] Bluetooth: hci4: command tx timeout [ 75.966977][ T5819] Bluetooth: hci1: command tx timeout [ 76.066395][ T9] usb 1-1: device descriptor read/8, error -71 [ 76.164321][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 76.189379][ T9] usb usb1-port1: unable to enumerate USB device [ 76.212451][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 76.212466][ T30] audit: type=1400 audit(1766772216.660:145): avc: denied { ioctl } for pid=5976 comm="syz.2.13" path="socket:[8156]" dev="sockfs" ino=8156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.404002][ T30] audit: type=1400 audit(1766772216.760:146): avc: denied { read write } for pid=5978 comm="syz.0.14" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.489203][ T30] audit: type=1400 audit(1766772216.760:147): avc: denied { open } for pid=5978 comm="syz.0.14" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.555164][ T30] audit: type=1400 audit(1766772216.810:148): avc: denied { watch } for pid=5978 comm="syz.0.14" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.604637][ T30] audit: type=1400 audit(1766772216.810:149): avc: denied { create } for pid=5978 comm="syz.0.14" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.675870][ T30] audit: type=1400 audit(1766772216.810:150): avc: denied { map } for pid=5978 comm="syz.0.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.836580][ T30] audit: type=1400 audit(1766772216.810:151): avc: denied { read write } for pid=5978 comm="syz.0.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.353496][ T30] audit: type=1400 audit(1766772216.820:152): avc: denied { bind } for pid=5978 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.473340][ T5987] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 77.526315][ T30] audit: type=1400 audit(1766772216.820:153): avc: denied { setopt } for pid=5978 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.614186][ T30] audit: type=1400 audit(1766772216.820:154): avc: denied { accept } for pid=5978 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.650271][ T5999] evm: overlay not supported [ 77.659293][ T5999] ======================================================= [ 77.659293][ T5999] WARNING: The mand mount option has been deprecated and [ 77.659293][ T5999] and is ignored by this kernel. Remove the mand [ 77.659293][ T5999] option from the mount to silence this warning. [ 77.659293][ T5999] ======================================================= [ 77.723745][ T5987] usb 3-1: device descriptor read/64, error -71 [ 78.038614][ T5987] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.113341][ T89] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.333384][ T5987] usb 3-1: device descriptor read/64, error -71 [ 78.362761][ T6016] Zero length message leads to an empty skb [ 78.468292][ T5987] usb usb3-port1: attempt power cycle [ 78.753629][ T89] usb 1-1: device descriptor read/64, error -71 [ 79.069160][ T5987] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 79.154079][ T5987] usb 3-1: device descriptor read/8, error -71 [ 79.180740][ T6027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 79.268752][ T6031] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 79.299024][ T89] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.393331][ T5987] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 79.413801][ T5987] usb 3-1: device descriptor read/8, error -71 [ 79.433353][ T89] usb 1-1: device descriptor read/64, error -71 [ 79.536817][ T5987] usb usb3-port1: unable to enumerate USB device [ 79.544900][ T89] usb usb1-port1: attempt power cycle [ 79.573606][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.781516][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 80.223347][ T89] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 80.235053][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 80.252169][ T5825] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 80.260773][ T89] usb 1-1: device descriptor read/8, error -71 [ 80.280233][ T5825] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 80.309206][ T5825] usb 5-1: config 127 has no interface number 1 [ 80.325318][ T5825] usb 5-1: config 127 interface 171 has no altsetting 0 [ 80.336411][ T5825] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 80.346654][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.354892][ T5825] usb 5-1: Product: syz [ 80.359342][ T5825] usb 5-1: Manufacturer: syz [ 80.364219][ T5825] usb 5-1: SerialNumber: syz [ 80.523337][ T89] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.553898][ T89] usb 1-1: device descriptor read/8, error -71 [ 80.673875][ T89] usb usb1-port1: unable to enumerate USB device [ 81.243528][ T49] cfg80211: failed to load regulatory.db [ 81.293565][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.302485][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 81.302499][ T30] audit: type=1400 audit(1766772221.740:187): avc: denied { create } for pid=6051 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.647169][ T30] audit: type=1400 audit(1766772222.000:188): avc: denied { append } for pid=6051 comm="syz.1.31" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.063120][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 82.125760][ T5899] usb 4-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 82.231533][ T5899] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 82.243758][ T5987] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.260758][ T5899] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 25491, setting to 1024 [ 82.274153][ T5899] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 82.287413][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.297509][ T5899] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 82.306654][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.440310][ T6062] hub 8-0:1.0: USB hub found [ 82.448260][ T6062] hub 8-0:1.0: 1 port detected [ 82.513722][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 82.556322][ T30] audit: type=1400 audit(1766772222.850:189): avc: denied { write } for pid=6059 comm="syz.0.32" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.715207][ T5987] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 82.826503][ T5899] usb 4-1: config 0 descriptor?? [ 82.881400][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.921000][ T5987] usb 2-1: Product: syz [ 82.939579][ T5987] usb 2-1: Manufacturer: syz [ 82.956389][ T5987] usb 2-1: SerialNumber: syz [ 82.977747][ T5987] usb 2-1: config 0 descriptor?? [ 83.010131][ T5987] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 83.156547][ T30] audit: type=1400 audit(1766772223.610:190): avc: denied { mount } for pid=6065 comm="syz.2.34" name="/" dev="ramfs" ino=9441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.319875][ T5825] xr_serial 5-1:127.171: xr_serial converter detected [ 83.359827][ T5825] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 83.386297][ T5825] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 83.423410][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.450561][ T5825] usb 5-1: USB disconnect, device number 2 [ 83.467840][ T5899] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 83.484928][ T5825] xr_serial 5-1:127.171: device disconnected [ 83.501387][ T5899] hid-thrustmaster 0003:044F:B65D.0001: item fetching failed at offset 3/5 [ 83.537514][ T5899] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 83.561441][ T5987] gspca_topro: reg_w err -110 [ 83.571157][ T5899] hid-thrustmaster 0003:044F:B65D.0001: probe with driver hid-thrustmaster failed with error -22 [ 83.594691][ T5987] gspca_topro: Sensor soi763a [ 83.615175][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.646611][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.674262][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.703744][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.760250][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.816575][ T5817] usb 4-1: USB disconnect, device number 2 [ 83.839330][ T5925] usb 3-1: config 0 descriptor?? [ 84.077484][ T30] audit: type=1400 audit(1766772224.530:191): avc: denied { remount } for pid=6065 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.122963][ T30] audit: type=1400 audit(1766772224.550:192): avc: denied { ioctl } for pid=6065 comm="syz.2.34" path="socket:[9464]" dev="sockfs" ino=9464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.167168][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 84.173223][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.225744][ T5925] usb 3-1: USB disconnect, device number 6 [ 84.233874][ T6079] mmap: syz.2.37 (6079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.269663][ T5987] usb 2-1: USB disconnect, device number 2 [ 84.337440][ T30] audit: type=1400 audit(1766772224.790:193): avc: denied { create } for pid=6078 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.381720][ T30] audit: type=1400 audit(1766772224.820:194): avc: denied { connect } for pid=6078 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.518573][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.527391][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.660774][ T30] audit: type=1400 audit(1766772225.110:195): avc: denied { read write } for pid=6089 comm="syz.1.40" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.733930][ T30] audit: type=1400 audit(1766772225.110:196): avc: denied { open } for pid=6089 comm="syz.1.40" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.763629][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 84.772735][ T5987] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.787061][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.808250][ T6096] netlink: 'syz.1.42': attribute type 12 has an invalid length. [ 84.815972][ T6096] netlink: 'syz.1.42': attribute type 29 has an invalid length. [ 84.823996][ T6096] netlink: 148 bytes leftover after parsing attributes in process `syz.1.42'. [ 84.832841][ T6096] netlink: 'syz.1.42': attribute type 2 has an invalid length. [ 84.841378][ T6096] netlink: 23 bytes leftover after parsing attributes in process `syz.1.42'. [ 84.974745][ T5987] usb 5-1: device descriptor read/64, error -71 [ 85.003765][ T5925] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 85.017893][ T5925] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 85.027022][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.038591][ T5925] usb 3-1: config 0 descriptor?? [ 85.283447][ T5987] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.453083][ T89] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 85.484565][ T5825] usb 3-1: USB disconnect, device number 7 [ 85.593335][ T5987] usb 5-1: device descriptor read/64, error -71 [ 85.600801][ T6105] team0: No ports can be present during mode change [ 85.610238][ T6105] fuse: Bad value for 'fd' [ 85.628670][ T89] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.646223][ T89] usb 1-1: config 1 interface 0 has no altsetting 0 [ 85.657378][ T89] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 85.680409][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.696585][ T89] usb 1-1: Product: Љ [ 85.700779][ T89] usb 1-1: Manufacturer: й [ 85.705397][ T89] usb 1-1: SerialNumber: 둎᪄⣰劣㿎鉹龖蝭댚ꕥ蘲뺘亓댷본棼呧꺏煝缩쩋鸮喠燝嵢␾쇸폐ｷ마큾씪㙷蛢떶鴴⦆专蘒삢婑슔ॅǨ滸ꒈ蚚ⶫ싑䋹햪ౢꎋ얌赹锘遮쏂䍢☍辖꤯⁠⌑쬚㢪◔ℓ鄰ɯ膀ꀽ卆颫圸퉾䱾聫⍘偕暍滨⛼Ҕ侙ﱙ顇泘 [ 85.714168][ T5987] usb usb5-port1: attempt power cycle [ 85.805370][ T6107] futex_wake_op: syz.3.46 tries to shift op by -1; fix this program [ 86.021728][ T89] usbhid 1-1:1.0: can't add hid device: -71 [ 86.034246][ T89] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 86.077958][ T89] usb 1-1: USB disconnect, device number 10 [ 86.163396][ T5987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.193993][ T5987] usb 5-1: device descriptor read/8, error -71 [ 86.506797][ T5987] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.533946][ T5987] usb 5-1: device descriptor read/8, error -71 [ 86.575024][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.599885][ T3064] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.608899][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.619421][ T3064] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.644537][ T5987] usb usb5-port1: unable to enumerate USB device [ 86.659511][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.680230][ T3064] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.695383][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.721002][ T3064] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.743995][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.943667][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 86.943678][ T30] audit: type=1400 audit(1766772227.390:209): avc: denied { execute } for pid=6135 comm="syz.2.53" path="/12/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.997930][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 87.040103][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 87.059891][ T30] audit: type=1400 audit(1766772227.430:210): avc: denied { getopt } for pid=6135 comm="syz.2.53" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.087266][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 87.103399][ T30] audit: type=1400 audit(1766772227.500:211): avc: denied { create } for pid=6137 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.458547][ T30] audit: type=1400 audit(1766772227.550:212): avc: denied { bind } for pid=6137 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.478387][ T30] audit: type=1400 audit(1766772227.550:213): avc: denied { listen } for pid=6137 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.499821][ T6144] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.525084][ T6144] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 87.566381][ T30] audit: type=1400 audit(1766772227.550:214): avc: denied { accept } for pid=6137 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.615461][ T30] audit: type=1400 audit(1766772227.750:215): avc: denied { read } for pid=6139 comm="syz.1.55" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.665937][ T30] audit: type=1400 audit(1766772227.750:216): avc: denied { open } for pid=6139 comm="syz.1.55" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.385147][ T30] audit: type=1400 audit(1766772227.750:217): avc: denied { ioctl } for pid=6139 comm="syz.1.55" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.415180][ T30] audit: type=1400 audit(1766772227.980:218): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.971818][ T6174] bridge: RTM_NEWNEIGH with invalid ether address [ 89.251613][ T6171] Bluetooth: MGMT ver 1.23 [ 89.421992][ T6177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.868813][ T6177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.650952][ T6190] __nla_validate_parse: 67 callbacks suppressed [ 90.650963][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 90.813373][ T5924] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 91.043334][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 91.065705][ T5924] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 91.106100][ T5924] usb 1-1: config 179 has no interface number 0 [ 91.120507][ T5924] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 91.154106][ T5924] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 91.183336][ T5924] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.215311][ T5924] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 91.232347][ T5924] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.293374][ T5924] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 91.313332][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.340588][ T6191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.695493][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 92.564118][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 92.723569][ T6218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.724398][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 92.724410][ T30] audit: type=1400 audit(1766772233.180:237): avc: denied { map } for pid=6199 comm="syz.2.71" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.880478][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.74'. [ 93.164008][ T6224] syz.3.75 uses obsolete (PF_INET,SOCK_PACKET) [ 93.975761][ T6228] lo speed is unknown, defaulting to 1000 [ 93.982273][ T6228] lo speed is unknown, defaulting to 1000 [ 94.006347][ T6228] lo speed is unknown, defaulting to 1000 [ 94.044980][ T5987] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.063124][ T6228] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.104659][ T6228] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.216629][ T6228] lo speed is unknown, defaulting to 1000 [ 94.226981][ T6228] lo speed is unknown, defaulting to 1000 [ 94.233574][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 94.235953][ T6228] lo speed is unknown, defaulting to 1000 [ 94.248976][ T6228] lo speed is unknown, defaulting to 1000 [ 94.257162][ T5987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.260118][ T6228] lo speed is unknown, defaulting to 1000 [ 94.304298][ T5987] usb 2-1: config 255 has an invalid interface number: 63 but max is 0 [ 94.312578][ T5987] usb 2-1: config 255 has no interface number 0 [ 94.348227][ T5987] usb 2-1: config 255 interface 63 has no altsetting 0 [ 94.370696][ T5987] usb 2-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=ea.92 [ 94.401951][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.425222][ T5987] usb 2-1: Product: syz [ 94.442461][ T5987] usb 2-1: Manufacturer: syz [ 94.455059][ T5987] usb 2-1: SerialNumber: syz [ 94.678347][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.839140][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.852903][ T5925] IPVS: starting estimator thread 0... [ 94.866294][ T30] audit: type=1400 audit(1766772235.310:238): avc: denied { create } for pid=6255 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.889144][ T30] audit: type=1400 audit(1766772235.320:239): avc: denied { connect } for pid=6255 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.948381][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.983828][ T6257] IPVS: using max 49 ests per chain, 117600 per kthread [ 95.020038][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.084066][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.144816][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.260082][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.289392][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.303481][ T89] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.375316][ T5987] sierra 2-1:255.63: Sierra USB modem converter detected [ 95.429900][ T5933] usb 1-1: USB disconnect, device number 11 [ 95.429975][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.444460][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.527513][ T5987] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 95.543035][ T89] usb 5-1: device descriptor read/all, error -71 [ 95.571492][ T5987] usb 2-1: USB disconnect, device number 3 [ 95.626702][ T5987] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 95.657597][ T5987] sierra 2-1:255.63: device disconnected [ 96.643496][ T30] audit: type=1400 audit(1766772237.100:240): avc: denied { node_bind } for pid=6280 comm="syz.1.90" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.260669][ T5987] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 97.283369][ T89] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.375448][ T30] audit: type=1400 audit(1766772237.830:241): avc: denied { ioctl } for pid=6290 comm="syz.4.93" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.409942][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 97.424296][ T89] usb 2-1: device descriptor read/64, error -71 [ 97.431321][ T3064] Bluetooth: hci5: Frame reassembly failed (-90) [ 97.443334][ T5987] usb 1-1: Using ep0 maxpacket: 32 [ 97.452223][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.463659][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.474989][ T5987] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 97.484327][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.505335][ T5987] usb 1-1: config 0 descriptor?? [ 97.523720][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.663331][ T89] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.673680][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 97.681113][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.693522][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.704467][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.722035][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 97.732305][ T9] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 97.740658][ T9] usb 4-1: Manufacturer: syz [ 97.760186][ T9] usb 4-1: config 0 descriptor?? [ 97.803367][ T89] usb 2-1: device descriptor read/64, error -71 [ 97.926213][ T89] usb usb2-port1: attempt power cycle [ 98.087857][ T6296] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 98.127721][ T5987] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 98.323987][ T30] audit: type=1400 audit(1766772238.730:242): avc: denied { ioctl } for pid=6295 comm="syz.3.94" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.349684][ T89] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.396028][ T6296] bond1: entered promiscuous mode [ 98.421384][ T6296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.504033][ T89] usb 2-1: device descriptor read/8, error -71 [ 98.921859][ T89] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.999198][ T5987] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 99.003853][ T89] usb 2-1: device descriptor read/8, error -71 [ 99.011450][ T5987] usb 1-1: USB disconnect, device number 12 [ 99.085771][ T30] audit: type=1400 audit(1766772239.510:243): avc: denied { create } for pid=6319 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.121350][ T30] audit: type=1400 audit(1766772239.510:244): avc: denied { getopt } for pid=6319 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.146340][ T89] usb usb2-port1: unable to enumerate USB device [ 99.258567][ T6315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.269615][ T6315] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 99.280009][ T6315] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 99.283441][ T30] audit: type=1400 audit(1766772239.510:245): avc: denied { ioctl } for pid=6319 comm="syz.0.98" path="socket:[10860]" dev="sockfs" ino=10860 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.473440][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.480727][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 99.867490][ T30] audit: type=1400 audit(1766772239.870:246): avc: denied { write } for pid=6321 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.901442][ T6315] bond1: (slave vcan1): making interface the new active one [ 99.921800][ T6315] vcan1: entered promiscuous mode [ 99.928996][ T30] audit: type=1400 audit(1766772240.370:247): avc: denied { setopt } for pid=6327 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.955046][ T6315] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 100.331586][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 100.364307][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.398547][ T9] usb 4-1: USB disconnect, device number 3 [ 100.404031][ T30] audit: type=1400 audit(1766772240.860:248): avc: denied { write } for pid=6335 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.821431][ T30] audit: type=1400 audit(1766772241.270:249): avc: denied { read } for pid=6340 comm="syz.1.104" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 100.851166][ T30] audit: type=1400 audit(1766772241.300:250): avc: denied { open } for pid=6340 comm="syz.1.104" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.424380][ T30] audit: type=1400 audit(1766772241.880:251): avc: denied { nlmsg_write } for pid=6357 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.626166][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.936696][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.948700][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 101.963087][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.976286][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.989768][ T9] usb 4-1: config 0 descriptor?? [ 102.031715][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 102.939354][ T6379] lo speed is unknown, defaulting to 1000 [ 103.095266][ T6389] xt_hashlimit: size too large, truncated to 1048576 [ 103.377762][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 103.377773][ T30] audit: type=1400 audit(1766772243.830:259): avc: denied { relabelfrom } for pid=6396 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.409965][ T30] audit: type=1400 audit(1766772243.860:260): avc: denied { relabelto } for pid=6396 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.418111][ T5899] usb 4-1: USB disconnect, device number 4 [ 104.553319][ T30] audit: type=1400 audit(1766772244.990:261): avc: denied { create } for pid=6424 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.688048][ T89] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.749979][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 104.877639][ T89] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 105.733306][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=7 [ 105.741321][ T89] usb 3-1: SerialNumber: syz [ 105.775145][ T89] usb 3-1: config 0 descriptor?? [ 105.804476][ T89] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 106.063567][ T30] audit: type=1400 audit(1766772246.520:262): avc: denied { execute } for pid=6422 comm="syz.2.122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.145252][ T30] audit: type=1400 audit(1766772246.600:263): avc: denied { ioctl } for pid=6422 comm="syz.2.122" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.145745][ T89] gspca_sn9c2028: read1 error -71 [ 106.193913][ T6434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6434 comm=syz.1.124 [ 106.258399][ T89] gspca_sn9c2028: read1 error -71 [ 106.274729][ T89] gspca_sn9c2028: read1 error -71 [ 106.279922][ T89] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 106.312576][ T89] usb 3-1: USB disconnect, device number 8 [ 106.471950][ T30] audit: type=1400 audit(1766772246.920:264): avc: denied { getattr } for pid=6444 comm="syz.0.128" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.573344][ T30] audit: type=1400 audit(1766772246.930:265): avc: denied { write } for pid=6445 comm="syz.4.127" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.620170][ T6451] input: syz0 as /devices/virtual/input/input5 [ 106.756999][ T30] audit: type=1400 audit(1766772246.970:266): avc: denied { execute } for pid=6444 comm="syz.0.128" path="/21/blkio.bfq.group_wait_time" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.383700][ T5997] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.488782][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 107.491024][ T6446] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888073ed5f00 pfn:0x73ed5 [ 107.544809][ T6446] memcg:ffff88801d2bc240 [ 107.553357][ T5997] usb 2-1: Using ep0 maxpacket: 16 [ 107.568155][ T5997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.583327][ T6446] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 107.612445][ T6446] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 107.627791][ T5997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.658088][ T6446] raw: ffff888073ed5f00 0000000000000000 00000001ffffffff ffff88801d2bc240 [ 107.673480][ T5997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.686701][ T6446] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 107.718611][ T5997] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.727858][ T6446] page_owner tracks the page as allocated [ 107.743345][ T6446] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6446, tgid 6445 (syz.4.127), ts 107490988615, free_ts 107260197890 [ 107.764102][ T5997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.773348][ T30] audit: type=1400 audit(1766772248.190:267): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 107.834254][ T5997] usb 2-1: config 0 descriptor?? [ 107.849299][ T6446] post_alloc_hook+0x1af/0x220 [ 109.031540][ T6446] get_page_from_freelist+0xd0b/0x31a0 [ 109.058377][ T30] audit: type=1400 audit(1766772248.190:268): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.082505][ T6446] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 109.088513][ T6446] alloc_pages_mpol+0x1fb/0x550 [ 109.093397][ T6446] folio_alloc_noprof+0x20/0x2d0 [ 109.101593][ T30] audit: type=1400 audit(1766772248.190:269): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.129470][ T6446] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 109.142121][ T6446] filemap_alloc_folio_noprof+0x5e/0x80 [ 109.162187][ T6446] page_cache_ra_order+0x571/0xed0 [ 109.182925][ T6446] filemap_fault+0x16ac/0x29d0 [ 109.195437][ T30] audit: type=1400 audit(1766772248.190:270): avc: denied { add_name } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.216192][ T6446] __do_fault+0x10d/0x490 [ 109.231419][ T6446] do_fault+0xae4/0x1ad0 [ 109.246840][ T6446] __handle_mm_fault+0x1919/0x2bb0 [ 109.266509][ T6446] handle_mm_fault+0x3fe/0xad0 [ 109.282034][ T6446] __get_user_pages+0x54e/0x3590 [ 109.290318][ T30] audit: type=1400 audit(1766772248.190:271): avc: denied { create } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.316114][ T6446] populate_vma_page_range+0x267/0x3f0 [ 109.323287][ T6446] __mm_populate+0x1d8/0x380 [ 109.327911][ T6446] page last free pid 6420 tgid 6420 stack trace: [ 109.335472][ T6446] __free_frozen_pages+0x7df/0x1170 [ 109.341414][ T30] audit: type=1400 audit(1766772248.190:272): avc: denied { append open } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.365764][ T6446] __put_partials+0x130/0x170 [ 109.370485][ T6446] qlist_free_all+0x4c/0xf0 [ 109.375228][ T6446] kasan_quarantine_reduce+0x195/0x1e0 [ 109.380711][ T6446] __kasan_slab_alloc+0x69/0x90 [ 109.388896][ T30] audit: type=1400 audit(1766772248.190:273): avc: denied { getattr } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.411659][ T6446] kmem_cache_alloc_noprof+0x25e/0x770 [ 109.417338][ T6446] ptlock_alloc+0x1f/0x70 [ 109.421681][ T6446] pte_alloc_one+0x84/0x3d0 [ 109.426480][ T6446] do_fault+0x8b8/0x1ad0 [ 109.430731][ T6446] __handle_mm_fault+0x1919/0x2bb0 [ 109.444559][ T30] audit: type=1400 audit(1766772249.550:274): avc: denied { create } for pid=6461 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.465321][ T6446] handle_mm_fault+0x3fe/0xad0 [ 109.475952][ T6446] __get_user_pages+0x54e/0x3590 [ 109.485722][ T6446] get_dump_page+0x257/0x3d0 [ 109.490350][ T6446] dump_user_range+0x195/0xb70 [ 109.495334][ T30] audit: type=1400 audit(1766772249.840:275): avc: denied { create } for pid=6468 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.515168][ T6446] elf_core_dump+0x29c3/0x3c10 [ 109.519959][ T6446] vfs_coredump+0x2b85/0x55e0 [ 109.530566][ T6446] ------------[ cut here ]------------ [ 109.536313][ T6446] kernel BUG at mm/filemap.c:858! [ 109.543165][ T30] audit: type=1400 audit(1766772249.840:276): avc: denied { setopt } for pid=6468 comm="syz.2.133" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.571075][ T6446] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 109.577499][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT(full) [ 109.586688][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.596721][ T6446] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 109.602693][ T6446] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 109.622284][ T6446] RSP: 0018:ffffc9000e037490 EFLAGS: 00010293 [ 109.628325][ T6446] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 109.636270][ T6446] RDX: ffff88807b9d8000 RSI: ffffffff81f84f78 RDI: ffff88807b9d8484 [ 109.644388][ T6446] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 109.652332][ T6446] R10: ffffffff9088b4d7 R11: 0000000000000001 R12: 0000000000000004 [ 109.660276][ T6446] R13: ffffea0001cfb540 R14: 0000000000000000 R15: 0000000000000000 [ 109.668219][ T6446] FS: 00007efc3eef76c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 109.677135][ T6446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.683693][ T6446] CR2: 0000200001000000 CR3: 0000000055cc6000 CR4: 00000000003526f0 [ 109.691640][ T6446] Call Trace: [ 109.694898][ T6446] [ 109.697804][ T6446] ? __pfx___filemap_add_folio+0x10/0x10 [ 109.703411][ T6446] filemap_add_folio+0x19a/0x610 [ 109.708321][ T6446] ? __lock_acquire+0x436/0x2890 [ 109.713230][ T6446] ? __pfx_filemap_add_folio+0x10/0x10 [ 109.718674][ T6446] ? __pfx_filemap_get_entry+0x10/0x10 [ 109.724107][ T6446] page_cache_ra_order+0x637/0xed0 [ 109.729207][ T6446] filemap_fault+0x16ac/0x29d0 [ 109.733957][ T6446] ? __pfx_filemap_fault+0x10/0x10 [ 109.739048][ T6446] ? __pfx_filemap_map_pages+0x10/0x10 [ 109.744480][ T6446] __do_fault+0x10d/0x490 [ 109.748780][ T6446] ? __pfx_filemap_map_pages+0x10/0x10 [ 109.754211][ T6446] do_fault+0xae4/0x1ad0 [ 109.758456][ T6446] ? __pfx_filemap_map_pages+0x10/0x10 [ 109.763887][ T6446] __handle_mm_fault+0x1919/0x2bb0 [ 109.768978][ T6446] ? __pfx___handle_mm_fault+0x10/0x10 [ 109.774444][ T6446] handle_mm_fault+0x3fe/0xad0 [ 109.779194][ T6446] __get_user_pages+0x54e/0x3590 [ 109.784123][ T6446] ? __pfx___get_user_pages+0x10/0x10 [ 109.789477][ T6446] populate_vma_page_range+0x267/0x3f0 [ 109.794914][ T6446] ? __pfx_populate_vma_page_range+0x10/0x10 [ 109.800867][ T6446] ? __pfx_find_vma_intersection+0x10/0x10 [ 109.806657][ T6446] ? do_mmap+0x69c/0x1210 [ 109.810973][ T6446] __mm_populate+0x1d8/0x380 [ 109.815537][ T6446] ? __pfx___mm_populate+0x10/0x10 [ 109.820625][ T6446] ? up_write+0x282/0x4e0 [ 109.824937][ T6446] vm_mmap_pgoff+0x37f/0x470 [ 109.829590][ T6446] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 109.834676][ T6446] ? __fget_files+0x20e/0x3c0 [ 109.839334][ T6446] ksys_mmap_pgoff+0x32c/0x5c0 [ 109.844084][ T6446] ? __pfx_ksys_write+0x10/0x10 [ 109.848920][ T6446] __x64_sys_mmap+0x125/0x190 [ 109.853579][ T6446] do_syscall_64+0xcd/0xf80 [ 109.858085][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.863954][ T6446] RIP: 0033:0x7efc3df8f749 [ 109.868345][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.887938][ T6446] RSP: 002b:00007efc3eef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.896331][ T6446] RAX: ffffffffffffffda RBX: 00007efc3e1e5fa0 RCX: 00007efc3df8f749 [ 109.904274][ T6446] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 109.912218][ T6446] RBP: 00007efc3e013f91 R08: 0000000000000004 R09: 000000002c93a000 [ 109.920174][ T6446] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 109.928114][ T6446] R13: 00007efc3e1e6038 R14: 00007efc3e1e5fa0 R15: 00007ffe228efe08 [ 109.936059][ T6446] [ 109.939048][ T6446] Modules linked in: [ 109.943298][ T6446] ---[ end trace 0000000000000000 ]--- [ 109.983300][ T6446] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 109.989392][ T6446] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 110.027719][ T6446] RSP: 0018:ffffc9000e037490 EFLAGS: 00010293 [ 110.043917][ T6446] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 110.052783][ T6446] RDX: ffff88807b9d8000 RSI: ffffffff81f84f78 RDI: ffff88807b9d8484 [ 110.075573][ T6446] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 110.086555][ T6446] R10: ffffffff9088b4d7 R11: 0000000000000001 R12: 0000000000000004 [ 110.095452][ T6446] R13: ffffea0001cfb540 R14: 0000000000000000 R15: 0000000000000000 [ 110.095541][ T5997] usbhid 2-1:0.0: can't add hid device: -71 [ 110.110689][ T5997] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.118644][ T6446] FS: 00007efc3eef76c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 110.129440][ T5997] usb 2-1: USB disconnect, device number 8 [ 110.135450][ T6446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.144569][ T6446] CR2: 000055558444f808 CR3: 0000000055cc6000 CR4: 00000000003526f0 [ 110.152629][ T6446] Kernel panic - not syncing: Fatal exception [ 110.159044][ T6446] Kernel Offset: disabled [ 110.163347][ T6446] Rebooting in 86400 seconds..