last executing test programs: 28m20.262260309s ago: executing program 2 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x8}, &(0x7f0000000480)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030402000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) 28m17.436016271s ago: executing program 2 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 28m11.634026444s ago: executing program 2 (id=23): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000740)={0x0, 0x4, 0x9b, 0x1, @vifc_lcl_addr=@multicast2, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x10, 0x21, 0xffffffff, 0x8, {{0x17, 0x4, 0x0, 0x3c, 0x5c, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0xb, 0x6, [@loopback, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_addr={0x44, 0x3c, 0xa, 0x1, 0x8, [{@multicast2, 0x2ff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8}, {@local, 0x7fffffff}, {@private=0xa010100, 0xfffffffc}, {@private=0xa010101, 0x26}, {@empty, 0x9}, {@multicast2, 0x1}]}]}}}}}) r6 = fcntl$dupfd(r2, 0x406, r4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d00)={0x18, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="09915cc7", @ANYRES32=r3, @ANYBLOB="0000000000000000a516f4ff08000000186a00000c000000000000001fe000008520000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0xa98, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002bc0)={0xdc, 0xf, 0x7, 0xa}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002c00)=[r3, r1, r1, r3, r3, r3], &(0x7f0000002c40)=[{0x5, 0x1, 0xe, 0x7}, {0x1, 0x4, 0x9}, {0x1, 0x1, 0xa, 0x7}, {0x4, 0x1, 0x7}, {0x0, 0x3, 0x1, 0x8}, {0x1, 0x2, 0x10, 0x3}, {0x5, 0x5, 0xe, 0x1}, {0x3, 0x5, 0xf, 0x1}, {0x5, 0x3, 0xc, 0xb}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x3, '\x00', r5, @fallback=0x2c, r6, 0x8, &(0x7f0000001ac0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001b00)={0x5, 0x1, 0x800, 0x4}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000002dc0)=[r1, r3, r1], &(0x7f0000002e00)=[{0x1, 0x3, 0x7, 0xc}, {0x5, 0x2, 0x10, 0x9}], 0x10, 0x6d5}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000140)={0x4, {0x4, 0x3, 0x80000001, 0x401, 0x3, 0x6}}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180100170000000000020010000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000100000000000000ff010000000000000000000000000001ff020000000000000000000000000001030006000000000002000000ffffffff000000f71300000007001900000000000a00000000000000ff0200000000000000000000000000010000000002004e23e000000100"/184], 0xb8}}, 0x20000000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000340)=0x8, 0x4) 28m2.617436284s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, 0x0, 0x10) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000580)=r3}, 0x20) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="b7836f1c1b5be19805e133cc"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 28m0.995548391s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x10) io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0x710d, 0x16dff, 0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) r5 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) bind$netlink(r4, 0x0, 0x0) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) 27m56.088020749s ago: executing program 2 (id=36): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) 27m50.150752203s ago: executing program 32 (id=26): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_getres(0x17, 0xfffffffffffffffe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x844) connect$bt_l2cap(r0, 0x0, 0x0) 27m40.684355793s ago: executing program 33 (id=36): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) 25m12.727341189s ago: executing program 1 (id=172): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2}, 0x24048894) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x0, 0x0, 0x128, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@srh={{0x30}, {0x0, 0x1, 0x9f, 0x4, 0x7ff, 0x1100, 0x200}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff, 0xff, 0xffffff00], [0x0, 0x0, 0xffffff00], 'ip6_vti0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xfb, 0xfe, 0x1, 0x38}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@mcast2, 0xe, 0x1b, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@rand_addr=' \x01\x00', 0x9, 0x19, 0x4}}}, {{@ipv6={@private0, @private0, [0xff, 0xff000000, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff00], 'pim6reg\x00', 'wg2\x00', {}, {}, 0x5e, 0x7, 0x4, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x1}, {0x0, 0x1, 0x2}, {0x3, 0x5, 0x2}, 0x6, 0x6b5}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x7ff, 0x6, 0x1, [0xeee, 0x1000, 0x2, 0x9, 0x0, 0x9, 0x8ae4, 0x8, 0x4, 0xfff, 0x6, 0xe700, 0x9, 0x4, 0x7ff, 0x8], 0xb}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@multicast1, 0x3d, 0x1a, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r6, 0x8, 0x10}, [@NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x28}}, 0x20024090) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x6b06, 0x0, 0x0, 0x41000, 0xb5, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f00000000c0)=0x6) 25m8.020694207s ago: executing program 1 (id=175): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="12d03715a316", 'vxcan1\x00'}}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x1906) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000100)=0x2c0000) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) readv(0xffffffffffffffff, &(0x7f0000002740)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getpolicy={0x50, 0x15, 0xa35e0d24b534d643, 0x70bd29, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e21, 0x8, 0x2, 0xa0, 0x80, 0x2c}, 0x6e6bba, 0x1}}, 0x50}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 25m1.481739598s ago: executing program 1 (id=181): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x76421000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000009cc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1}, 0xfffffff0}], 0x1, 0x40, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x1, 0x8c) fchdir(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) 24m58.29229648s ago: executing program 1 (id=183): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0xb01, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x4000800}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x0, 0x3, @scatter={0x0, 0x5c00, 0x0}, &(0x7f00000004c0), 0x0, 0x6, 0x5bb727690d5f0ff2, 0x1, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x0, &(0x7f00000001c0)='discard') 24m50.374033134s ago: executing program 1 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="01030000000000000000170000000e8c926d6edfe74fc2e41fdece4bcb6724e39b2e79253dc03659cf4d6cb7acea928a269812a19ddf3d86305a115be28819cbe996f1e6550a5c74270cebcd40cd14f22375beeb7ae6bcaf9c9d"], 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 24m42.363717928s ago: executing program 1 (id=195): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000740)={0x8, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc840) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd", 0x8d, 0x5e, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='proc\x00', 0x2000002, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/mnt\x00') 24m27.029544125s ago: executing program 34 (id=195): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000740)={0x8, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc840) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd", 0x8d, 0x5e, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='proc\x00', 0x2000002, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/mnt\x00') 9m27.153551453s ago: executing program 4 (id=2216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x7, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x1c}}, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) fchdir(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x32}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x5, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x1, 0x200000, 0xfffffffd, 0x47ae1eb}}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb0301090224", @ANYRES16], 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) 9m23.709174157s ago: executing program 4 (id=2231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/154, 0x9a, 0x9c70) 9m23.36193656s ago: executing program 4 (id=2234): pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14000002}, 0x90) 9m22.824667046s ago: executing program 4 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 9m21.756881222s ago: executing program 4 (id=2239): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0x4cf5}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x0, 0x10000000, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x689, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 9m20.231271628s ago: executing program 4 (id=2246): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000027c0)="8ac4", 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 9m19.415163695s ago: executing program 35 (id=2246): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000027c0)="8ac4", 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 6m30.841841215s ago: executing program 6 (id=2705): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b73191", 0x17}, {&(0x7f0000000380)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24605016d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118", 0x9f}], 0x2}}], 0x1, 0x400a090) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffffffffffe5d, 0x10008095, 0x0, 0xfffffffffffffeb2) 6m29.111452922s ago: executing program 6 (id=2710): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b400000000009000100"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 6m27.603744879s ago: executing program 6 (id=2714): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x7, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x1c}}, 0x0) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x32}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x5, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x1, 0x200000, 0xfffffffd, 0x47ae1eb}}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb0301090224", @ANYRES16], 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) 6m23.223771339s ago: executing program 6 (id=2725): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x9, 0xfffffdfffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0xb96f, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x54000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m21.463092086s ago: executing program 6 (id=2727): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0d32818e2cede722e231", 0xa}]) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 6m20.942078334s ago: executing program 6 (id=2734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r7 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r8, 0x0, 0x880) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 6m5.755378867s ago: executing program 36 (id=2734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r7 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r8, 0x0, 0x880) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 4m58.183077885s ago: executing program 5 (id=2905): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 4m57.746710955s ago: executing program 5 (id=2909): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x3, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 4m53.143977665s ago: executing program 5 (id=2915): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m50.144045782s ago: executing program 5 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 4m49.552847133s ago: executing program 5 (id=2922): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56c79, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 4m42.374773592s ago: executing program 5 (id=2945): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) 4m41.986881447s ago: executing program 37 (id=2945): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) 20.346900091s ago: executing program 3 (id=3676): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff"], 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000180)={0x7, 0x0, 0x3, 0x41, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000001680)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="751852e4bfeb52f266c6adc0f9c6d682474f1edd563c1db7ca8f799e5a5bc9368c9088eaf3fab609010df791a19b5cdb19b32b453e0d0220f4cc9621eb12ab5b2705b4b20320633ae3297ed7399a9f2c4599fde751ba97377df6cb21191f72e523ee2993bcfc5bb31ff207864d7e61d6e1a62d31820a2f884bcbf248922bb97f49296af128fad2a6b239660be118db01864c49fef9f7f41885095e12bd92c523ad76a5ec4fff6fb453e8", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x9, &(0x7f0000000040)=""/9, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000d00)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) readv(r5, &(0x7f0000000440)=[{&(0x7f00000019c0)=""/4098, 0x1002}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) syz_usb_connect$cdc_ecm(0x3, 0x8b, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109027900010107003b090400eb020206c4cfad8e0fa1e6e63405240000000d240f0175ffffff00100700050824fb65000900800424020c072414070007000c241b0200800006d0cb000308241c80b4dd03000c240707310e08000800e00009058103ff030e01030905820220000804090905030210000907c6b8c49214c5f5e59f39bb45a31a4bbd10b1eeebec4885de738a6220fed000066b8f6d47c7d71611b2aa5b351c34f46825df1acf683a754c82b003ce88939b64fbf3615ece"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6c, 0x1, 0x6, 0x40, 0x8}, 0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="050f440003141004099f1884e6ba7e468ab6f74c35ccffcf0f0b1001024000057f0600ec20100acde50f00000000e80000ff000030000000c0000000cf3f1100f0000000bcbc80b6fdf8729f44632d115ec19f8539b27d3a7eda9ad5863ca753fbcfcfe2f7870bc04114"]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x10) 19.207805093s ago: executing program 7 (id=3677): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 17.174076152s ago: executing program 3 (id=3684): io_setup(0x8, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 16.265931788s ago: executing program 7 (id=3685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0), 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 16.116373153s ago: executing program 8 (id=3686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0x3, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 14.478625194s ago: executing program 9 (id=3689): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents64(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 14.155164223s ago: executing program 7 (id=3691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0xc4c, 0x0, 0x8, 0x10000, 0x8000}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x578410eb) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x400000005, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0xffffffffffffffff, 0x14, 0x1, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0x4, 0x100000000, 0x809, 0x10, 0x5, 0x6, 0x1}) 14.154898098s ago: executing program 8 (id=3692): r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x183842, 0x101) sendfile(r0, r0, 0x0, 0x4) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x1, 0x8, r0, 0x0, 0x0, 0x7, 0x0, 0x2}]) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x2, 0xd5fa, 0xc, 0x3f, 0x0, 0x5}, 0xc) listen(r1, 0xfffffc01) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x80400) sync() sync() 13.594193174s ago: executing program 7 (id=3694): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff"], 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000180)={0x7, 0x0, 0x3, 0x41, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000001680)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="751852e4bfeb52f266c6adc0f9c6d682474f1edd563c1db7ca8f799e5a5bc9368c9088eaf3fab609010df791a19b5cdb19b32b453e0d0220f4cc9621eb12ab5b2705b4b20320633ae3297ed7399a9f2c4599fde751ba97377df6cb21191f72e523ee2993bcfc5bb31ff207864d7e61d6e1a62d31820a2f884bcbf248922bb97f49296af128fad2a6b239660be118db01864c49fef9f7f41885095e12bd92c523ad76a5ec4fff6fb453e8", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x9, &(0x7f0000000040)=""/9, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000d00)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) readv(r5, &(0x7f0000000440)=[{&(0x7f00000019c0)=""/4098, 0x1002}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) syz_usb_connect$cdc_ecm(0x3, 0x8b, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109027900010107003b090400eb020206c4cfad8e0fa1e6e63405240000000d240f0175ffffff00100700050824fb65000900800424020c072414070007000c241b0200800006d0cb000308241c80b4dd03000c240707310e08000800e00009058103ff030e01030905820220000804090905030210000907c6b8c49214c5f5e59f39bb45a31a4bbd10b1eeebec4885de738a6220fed000066b8f6d47c7d71611b2aa5b351c34f46825df1acf683a754c82b003ce88939b64fbf3615ece"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6c, 0x1, 0x6, 0x40, 0x8}, 0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="050f440003141004099f1884e6ba7e468ab6f74c35ccffcf0f0b1001024000057f0600ec20100acde50f00000000e80000ff000030000000c0000000cf3f1100f0000000bcbc80b6fdf8729f44632d115ec19f8539b27d3a7eda9ad5863ca753fbcfcfe2f7870bc04114"]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x10) 13.147172629s ago: executing program 0 (id=3695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 12.683899292s ago: executing program 3 (id=3696): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) unshare(0x6020400) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0xc000000b}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r2, 0x5501) 12.629685082s ago: executing program 8 (id=3697): syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) fcntl$setlease(r1, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) socket$nl_netfilter(0x10, 0x3, 0xc) 12.579320596s ago: executing program 0 (id=3698): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0xff) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 12.45502204s ago: executing program 9 (id=3699): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7}, 0x20) 12.350962408s ago: executing program 3 (id=3700): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r4, 0x2) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 12.239059033s ago: executing program 0 (id=3701): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x13, 0x0, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) 11.222689613s ago: executing program 8 (id=3702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) 9.958081388s ago: executing program 9 (id=3703): socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 8.771550624s ago: executing program 0 (id=3704): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.948512735s ago: executing program 3 (id=3705): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 6.746997045s ago: executing program 8 (id=3706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7) 6.676949729s ago: executing program 7 (id=3707): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 6.624503504s ago: executing program 9 (id=3708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 6.146941156s ago: executing program 0 (id=3709): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x21, 0x402, 0x772d42, 0x0, 0x0, 0x6c9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000006f00)="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", 0x2000, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17c22, 0x40000, 0x4d3c, 0x3, 0x9, 0x0, 0x0, 0x0, 0x4, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) lstat(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$netlink(0x10, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 5.287923105s ago: executing program 3 (id=3710): r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) 4.311703556s ago: executing program 9 (id=3711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 4.131763635s ago: executing program 8 (id=3712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) 3.911130027s ago: executing program 0 (id=3713): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.385449376s ago: executing program 7 (id=3714): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0xff) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 0s ago: executing program 9 (id=3715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() poll(0x0, 0x0, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c 1 [ 1462.483655][T15041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1462.498483][T15041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1462.527529][T15041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1462.577619][T15041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1462.822442][ T36] audit: type=1326 audit(1779544528.296:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16717 comm="syz.8.2764" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x0 [ 1463.308383][T16729] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2765'. [ 1464.156174][T16712] lo speed is unknown, defaulting to 1000 [ 1464.777576][ T5609] Bluetooth: hci2: command tx timeout [ 1465.397598][ T31] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1465.590835][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 1465.613406][ T31] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1465.613499][ T31] usb 9-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1465.613576][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.613626][ T31] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1465.705815][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1465.706200][ T31] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1465.706419][ T31] usb 9-1: Product: syz [ 1465.706765][ T31] usb 9-1: Manufacturer: syz [ 1465.707129][ T31] usb 9-1: SerialNumber: syz [ 1465.962663][ T31] usb 9-1: config 0 descriptor?? [ 1466.810638][ T5609] Bluetooth: hci2: command tx timeout [ 1467.478516][T12376] smc: removing ib device syz1 [ 1467.691184][ T5734] usb 9-1: USB disconnect, device number 14 [ 1467.915811][ T31] syz1: Port: 1 Link DOWN [ 1468.549146][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2776'. [ 1468.549645][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2776'. [ 1469.183190][ T5609] Bluetooth: hci2: command tx timeout [ 1469.766890][T12376] smbdirect: ib_dev[syz1] removed [ 1470.298824][T16778] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2779'. [ 1471.220614][T15041] Bluetooth: hci2: command tx timeout [ 1471.545676][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.548449][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.548730][T16712] bridge_slave_0: entered allmulticast mode [ 1471.599103][T16712] bridge_slave_0: entered promiscuous mode [ 1471.881523][T16788] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1471.887315][T16788] team0 (unregistering): Port device team_slave_0 removed [ 1471.985232][T16788] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1471.994128][T16788] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1472.013584][T16788] team0 (unregistering): Port device team_slave_1 removed [ 1472.102116][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.102438][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.102851][T16712] bridge_slave_1: entered allmulticast mode [ 1472.116363][T16712] bridge_slave_1: entered promiscuous mode [ 1474.272996][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.276747][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.445332][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2788'. [ 1476.445420][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2788'. [ 1476.934357][T16712] team0: Port device team_slave_0 added [ 1477.219724][T16712] team0: Port device team_slave_1 added [ 1477.803200][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.803219][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.803250][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.911793][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.911812][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.911844][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.686179][T16712] hsr_slave_0: entered promiscuous mode [ 1478.689381][T16712] hsr_slave_1: entered promiscuous mode [ 1478.707210][T16712] debugfs: 'hsr0' already exists in 'hsr' [ 1478.707239][T16712] Cannot create hsr debugfs directory [ 1479.767937][T16830] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2792'. [ 1485.053433][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.053520][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.594174][T16867] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 1486.674197][T16867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1486.674961][T16712] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1486.714127][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1487.149194][ T1490] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.444390][T16869] veth0_virt_wifi: entered promiscuous mode [ 1487.457550][T16869] bond4: (slave veth0_virt_wifi): making interface the new active one [ 1487.479941][T16869] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1487.489898][T16712] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1487.562408][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1487.607921][T16867] bond4: (slave veth0_virt_wifi): Releasing active interface [ 1487.746195][T16712] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1487.818652][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1487.836532][T16712] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1487.925595][T16712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1488.844163][ T1490] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.820994][T16912] fuse: fd is not a fuse device [ 1490.081553][ T1490] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.295282][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.626178][ T1490] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.679923][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.698902][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.699069][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.730590][ T5611] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1490.735904][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.736020][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.885798][ T5611] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1490.885836][ T5611] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.885850][ T5611] usb 9-1: Product: syz [ 1490.885861][ T5611] usb 9-1: Manufacturer: syz [ 1490.885871][ T5611] usb 9-1: SerialNumber: syz [ 1491.383846][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1491.383903][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1492.322815][ T5791] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1492.341318][ T1490] bridge_slave_1: left allmulticast mode [ 1492.341355][ T1490] bridge_slave_1: left promiscuous mode [ 1492.341643][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.496601][ T5791] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1492.496638][ T5791] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1492.514558][ T5791] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1492.514626][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.514648][ T5791] usb 6-1: Product: syz [ 1492.514665][ T5791] usb 6-1: Manufacturer: syz [ 1492.514695][ T5791] usb 6-1: SerialNumber: syz [ 1492.556644][ T1490] bridge_slave_0: left allmulticast mode [ 1492.556894][ T1490] bridge_slave_0: left promiscuous mode [ 1492.557582][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.573326][ T5791] usb 6-1: config 0 descriptor?? [ 1492.578617][T16936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1492.585411][T16936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1492.624261][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1492.624779][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1492.625430][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1492.625488][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1492.626591][ T5611] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1492.722928][ T5611] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1492.746419][ T5611] usb 9-1: USB disconnect, device number 15 [ 1492.859645][T16936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1492.859771][T16936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1493.278120][ T5791] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1494.265910][ T5791] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1496.957964][ T1490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.031569][ T1490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.095758][ T1490] bond0 (unregistering): Released all slaves [ 1497.158004][T16946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2826'. [ 1497.168699][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1497.329856][ T5791] dm9601 6-1:0.0 eth17: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 5e:17:d5:aa:53:bf [ 1497.467065][T14228] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1497.528211][ T5791] usb 6-1: USB disconnect, device number 48 [ 1497.537890][ T5791] dm9601 6-1:0.0 eth17: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 1497.712995][T14228] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1497.713025][T14228] usb 8-1: config 0 has no interface number 0 [ 1497.713073][T14228] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.713105][T14228] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.713148][T14228] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1497.713174][T14228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.827178][T14228] usb 8-1: config 0 descriptor?? [ 1497.992304][ T1490] tipc: Left network mode [ 1498.223002][ T5611] kernel read not supported for file [fscontext] (pid: 5611 comm: kworker/1:3) [ 1498.247307][T14228] prodikeys 0003:041E:2801.0018: item fetching failed at offset 5/7 [ 1498.248170][T14228] prodikeys 0003:041E:2801.0018: hid parse failed [ 1498.248284][T14228] prodikeys 0003:041E:2801.0018: probe with driver prodikeys failed with error -22 [ 1498.446168][ T5791] usb 8-1: USB disconnect, device number 43 [ 1498.562821][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.945707][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1498.945791][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1499.233833][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1499.233916][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1499.750608][T14228] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1499.920726][T14228] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.920810][T14228] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1499.920836][T14228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.963243][T14228] usb 9-1: config 0 descriptor?? [ 1500.232532][T14228] usb 9-1: USB disconnect, device number 16 [ 1500.774244][ T1490] hsr_slave_0: left promiscuous mode [ 1500.812107][ T1490] hsr_slave_1: left promiscuous mode [ 1500.814886][ T1490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.814916][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.900592][T16636] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1501.939936][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.083466][ T1490] veth1_macvtap: left promiscuous mode [ 1502.083585][ T1490] veth0_macvtap: left promiscuous mode [ 1502.084018][ T1490] veth0_vlan: left promiscuous mode [ 1502.110594][T16636] usb 6-1: Using ep0 maxpacket: 16 [ 1502.112747][T16636] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1502.112775][T16636] usb 6-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1502.112797][T16636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.112818][T16636] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1502.115145][T16636] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1502.115175][T16636] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1502.115198][T16636] usb 6-1: Product: syz [ 1502.115214][T16636] usb 6-1: Manufacturer: syz [ 1502.115229][T16636] usb 6-1: SerialNumber: syz [ 1502.196972][T16636] usb 6-1: config 0 descriptor?? [ 1503.252079][ T1490] team0 (unregistering): Port device team_slave_1 removed [ 1503.301311][ T1490] team0 (unregistering): Port device team_slave_0 removed [ 1503.643878][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1503.666401][ T5611] usb 6-1: USB disconnect, device number 49 [ 1503.795978][T16712] veth0_vlan: entered promiscuous mode [ 1503.845733][T16712] veth1_vlan: entered promiscuous mode [ 1504.029080][T16712] veth0_macvtap: entered promiscuous mode [ 1504.129221][T16712] veth1_macvtap: entered promiscuous mode [ 1504.277500][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.399166][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.426734][T12376] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.427898][T12376] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.428184][T12376] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.458352][T12376] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.204051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.204075][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.457598][T14149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.457624][T14149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.648223][T17093] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2854'. [ 1507.774916][ T1490] IPVS: stop unused estimator thread 0... [ 1507.783637][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1511.260527][T15286] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1511.451031][T15286] usb 9-1: Using ep0 maxpacket: 16 [ 1511.453190][T15286] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1511.453218][T15286] usb 9-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1511.453241][T15286] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.453263][T15286] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1511.456977][T15286] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1511.457011][T15286] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1511.457035][T15286] usb 9-1: Product: syz [ 1511.457052][T15286] usb 9-1: Manufacturer: syz [ 1511.457070][T15286] usb 9-1: SerialNumber: syz [ 1511.575301][T15286] usb 9-1: config 0 descriptor?? [ 1512.046851][T17126] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1512.969223][T14228] usb 9-1: USB disconnect, device number 17 [ 1512.987986][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1515.001679][ T822] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1515.752498][ T822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.752557][ T822] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.752588][ T822] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.752605][ T822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1515.752631][ T822] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1515.752648][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.756349][ T822] usb 6-1: config 0 descriptor?? [ 1516.049087][ T822] usbhid 6-1:0.0: can't add hid device: -71 [ 1516.049215][ T822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1516.090563][ T822] usb 6-1: USB disconnect, device number 50 [ 1517.934377][T15041] Bluetooth: hci1: command 0x0406 tx timeout [ 1519.930716][ T5734] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1521.475694][ T5734] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.475758][ T5734] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1521.475784][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.587815][ T5734] usb 9-1: config 0 descriptor?? [ 1521.759200][ T5734] pwc: Askey VC010 type 2 USB webcam detected. [ 1522.150788][ T5734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1522.152447][ T5734] pwc: recv_control_msg error -32 req 02 val 2700 [ 1522.154191][ T5734] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1522.155902][ T5734] pwc: recv_control_msg error -32 req 04 val 1000 [ 1522.366862][ T5734] pwc: recv_control_msg error -71 req 04 val 1400 [ 1522.367375][ T5734] pwc: recv_control_msg error -71 req 02 val 2000 [ 1522.367861][ T5734] pwc: recv_control_msg error -71 req 02 val 2100 [ 1522.369836][ T5734] pwc: recv_control_msg error -71 req 04 val 1500 [ 1522.370346][ T5734] pwc: recv_control_msg error -71 req 02 val 2500 [ 1522.730978][ T5734] pwc: recv_control_msg error -71 req 02 val 2400 [ 1522.733915][ T5734] pwc: recv_control_msg error -71 req 02 val 2600 [ 1522.786142][ T5734] pwc: recv_control_msg error -71 req 02 val 2900 [ 1522.789414][ T5734] pwc: recv_control_msg error -71 req 02 val 2800 [ 1523.051336][ T5734] pwc: recv_control_msg error -71 req 04 val 1100 [ 1523.185430][ T5734] pwc: recv_control_msg error -71 req 04 val 1200 [ 1523.470805][ T5734] pwc: Registered as video103. [ 1523.477133][ T5734] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input30 [ 1523.480569][ T5335] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1523.528590][ T5734] usb 9-1: USB disconnect, device number 18 [ 1523.680601][ T5335] usb 8-1: Using ep0 maxpacket: 16 [ 1523.692823][ T5335] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1523.692891][ T5335] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1523.692954][ T5335] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.693002][ T5335] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1523.700802][ T5335] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1523.700939][ T5335] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1523.700996][ T5335] usb 8-1: Product: syz [ 1523.701039][ T5335] usb 8-1: Manufacturer: syz [ 1523.701084][ T5335] usb 8-1: SerialNumber: syz [ 1523.824699][ T5335] usb 8-1: config 0 descriptor?? [ 1524.240091][T17237] siw: device registration error -23 [ 1525.206496][ T5611] usb 8-1: USB disconnect, device number 44 [ 1525.945142][T17255] binder: 17254:17255 ioctl c0306201 200000000640 returned -22 [ 1527.737381][T17277] loop2: detected capacity change from 0 to 7 [ 1527.797737][T17277] loop2: [ 1527.797789][T17277] loop2: partition table partially beyond EOD, truncated [ 1530.060684][T15286] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1530.245065][T15286] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1530.245101][T15286] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.245124][T15286] usb 10-1: Product: syz [ 1530.245142][T15286] usb 10-1: Manufacturer: syz [ 1530.245158][T15286] usb 10-1: SerialNumber: syz [ 1531.834001][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1531.834067][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1534.790495][ T822] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1534.832337][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1534.835312][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1534.835938][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1534.835994][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1534.838193][T15286] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1535.451258][ T822] usb 8-1: Using ep0 maxpacket: 8 [ 1535.841811][T15286] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1535.853768][ T822] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.853806][ T822] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1535.853836][ T822] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1535.853874][ T822] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1535.853900][ T822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.971318][ T822] usb 8-1: config 0 descriptor?? [ 1535.990821][T15286] usb 10-1: USB disconnect, device number 2 [ 1536.400317][ T822] hid_parser_main: 4007 callbacks suppressed [ 1536.412042][ T822] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 1536.412091][ T822] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 1536.412121][ T822] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 1536.463995][ T822] petalynx 0003:18B1:0037.0019: hidraw0: USB HID v0.0a Device [HID 18b1:0037] on usb-dummy_hcd.7-1/input0 [ 1536.599774][ T822] usb 8-1: USB disconnect, device number 45 [ 1536.709382][T17397] fido_id[17397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1537.322186][T17404] loop8: detected capacity change from 0 to 524287999 [ 1540.407010][T17436] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1540.735397][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2928'. [ 1541.911094][T16636] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1542.401185][T16636] usb 10-1: Using ep0 maxpacket: 8 [ 1542.859063][T16636] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1542.859094][T16636] usb 10-1: config 0 has no interface number 0 [ 1542.859154][T16636] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1542.859180][T16636] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1542.859208][T16636] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1542.859237][T16636] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1542.859281][T16636] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1542.859306][T16636] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.949392][T16636] usb 10-1: config 0 descriptor?? [ 1543.070167][T17460] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2937'. [ 1543.785831][T16636] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1544.103143][T15286] usb 10-1: USB disconnect, device number 3 [ 1544.132091][T15286] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1544.694866][T14959] bond1: (slave syz_tun): Releasing backup interface [ 1545.832147][T15041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1545.927695][T15041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1545.940639][T15041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1545.958322][T15041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1546.007074][T15041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1546.226707][ T3406] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1546.226745][ T3406] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1546.226775][ T3406] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.467358][T17499] fuse: fd is not a fuse device [ 1546.573440][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.573515][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.660088][T17503] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1548.100759][T15041] Bluetooth: hci3: command tx timeout [ 1548.223808][T17515] fuse: fd is not a fuse device [ 1548.689600][ T3406] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1548.689629][ T3406] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1548.689651][ T3406] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.847051][T17491] lo speed is unknown, defaulting to 1000 [ 1549.853670][ T5733] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1550.064100][ T5733] usb 9-1: Using ep0 maxpacket: 16 [ 1550.067270][ T5733] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1550.067301][ T5733] usb 9-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1550.067335][ T5733] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.067357][ T5733] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1550.069857][ T5733] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1550.069888][ T5733] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1550.069912][ T5733] usb 9-1: Product: syz [ 1550.069928][ T5733] usb 9-1: Manufacturer: syz [ 1550.069946][ T5733] usb 9-1: SerialNumber: syz [ 1550.132241][ T5733] usb 9-1: config 0 descriptor?? [ 1550.172236][T15041] Bluetooth: hci3: command tx timeout [ 1550.207893][ T3406] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1550.207931][ T3406] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1550.207962][ T3406] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.347608][T17533] bridge0: port 3(vlan2) entered blocking state [ 1550.348814][T17533] bridge0: port 3(vlan2) entered disabled state [ 1550.349027][T17533] vlan2: entered allmulticast mode [ 1550.372152][T17533] vlan2: entered promiscuous mode [ 1550.934671][ T3406] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1550.934779][ T3406] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1550.934811][ T3406] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.630894][ T5733] usb 9-1: USB disconnect, device number 19 [ 1551.808609][T17491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.810056][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.827292][T17491] bridge_slave_0: entered allmulticast mode [ 1551.840122][T17491] bridge_slave_0: entered promiscuous mode [ 1551.859341][T17491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.870553][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.870839][T17491] bridge_slave_1: entered allmulticast mode [ 1551.901451][T17491] bridge_slave_1: entered promiscuous mode [ 1552.136525][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.178959][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.433117][T15041] Bluetooth: hci3: command tx timeout [ 1553.281179][T17564] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1554.103068][T17491] team0: Port device team_slave_0 added [ 1554.127614][T17491] team0: Port device team_slave_1 added [ 1554.288124][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.288143][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.288175][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.292424][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.292441][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.292474][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.580273][T15041] Bluetooth: hci3: command tx timeout [ 1554.580700][T14228] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1554.762476][T14228] usb 10-1: Using ep0 maxpacket: 16 [ 1554.771569][T14228] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1554.771598][T14228] usb 10-1: config 0 has no interface number 0 [ 1554.779282][T14228] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1554.779315][T14228] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.779338][T14228] usb 10-1: Product: syz [ 1554.779353][T14228] usb 10-1: Manufacturer: syz [ 1554.779370][T14228] usb 10-1: SerialNumber: syz [ 1554.858111][T14228] usb 10-1: config 0 descriptor?? [ 1554.901501][T14228] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1555.497918][ T3406] bridge_slave_1: left promiscuous mode [ 1555.498164][ T3406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.687748][ T3406] bridge_slave_0: left allmulticast mode [ 1555.687799][ T3406] bridge_slave_0: left promiscuous mode [ 1555.688088][ T3406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.733388][T14228] gspca_spca1528: reg_r err -71 [ 1556.733485][T14228] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1556.775071][T14228] usb 10-1: USB disconnect, device number 4 [ 1558.810627][ T5733] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1558.871203][T17610] fuse: fd is not a fuse device [ 1558.960793][ T5733] usb 10-1: Using ep0 maxpacket: 16 [ 1558.963425][ T5733] usb 10-1: config index 0 descriptor too short (expected 65316, got 36) [ 1558.963454][ T5733] usb 10-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1558.963478][ T5733] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.963500][ T5733] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1558.966719][ T5733] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1558.966750][ T5733] usb 10-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1558.966774][ T5733] usb 10-1: Product: syz [ 1558.966791][ T5733] usb 10-1: Manufacturer: syz [ 1558.966808][ T5733] usb 10-1: SerialNumber: syz [ 1558.981234][ T5733] usb 10-1: config 0 descriptor?? [ 1561.401946][T17619] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1563.082814][ T3406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.181423][ T3406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.224037][ T3406] bond0 (unregistering): Released all slaves [ 1563.235027][ T3406] bond1 (unregistering): Released all slaves [ 1563.350068][T16636] usb 10-1: USB disconnect, device number 5 [ 1563.475765][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2972'. [ 1563.478615][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1563.512893][T17491] hsr_slave_0: entered promiscuous mode [ 1563.515654][T17491] hsr_slave_1: entered promiscuous mode [ 1563.516656][T17491] debugfs: 'hsr0' already exists in 'hsr' [ 1563.516683][T17491] Cannot create hsr debugfs directory [ 1564.151201][ T5791] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1564.411466][ T5791] usb 10-1: Using ep0 maxpacket: 16 [ 1564.478565][ T5791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.478603][ T5791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1564.478651][ T5791] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1564.478693][ T5791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.487159][ T5791] usb 10-1: config 0 descriptor?? [ 1564.844997][T17641] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 1564.845177][T17641] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 1564.845337][T17641] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 1564.845502][T17641] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 1564.845659][T17641] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 1564.845814][T17641] kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 1564.845970][T17641] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 1564.846122][T17641] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 1564.846275][T17641] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1564.846430][T17641] kvm: requested 161752 ns i8254 timer period limited to 200000 ns [ 1567.227640][ T5791] usbhid 10-1:0.0: can't add hid device: -71 [ 1567.227782][ T5791] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1567.242631][ T5791] usb 10-1: USB disconnect, device number 6 [ 1567.501698][ T5611] libceph: connect (1)[c::]:6789 error -101 [ 1567.501925][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 1567.512596][T17659] ceph: No mds server is up or the cluster is laggy [ 1568.342526][T15286] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1569.225418][T15286] usb 8-1: Using ep0 maxpacket: 16 [ 1569.242024][T15286] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1569.242062][T15286] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1569.323830][T15286] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1569.323863][T15286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.323895][T15286] usb 8-1: Product: syz [ 1569.323912][T15286] usb 8-1: Manufacturer: syz [ 1569.323928][T15286] usb 8-1: SerialNumber: syz [ 1569.349437][T15286] usb 8-1: config 0 descriptor?? [ 1569.373683][T15286] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1569.373721][T15286] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1570.867893][T15286] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1570.873606][T15286] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1570.977885][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1571.236418][T16636] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1571.402087][T16636] usb 9-1: Using ep0 maxpacket: 16 [ 1571.407238][T16636] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1571.407271][T16636] usb 9-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1571.407294][T16636] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.407316][T16636] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1571.424661][T16636] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1571.424697][T16636] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1571.424770][T16636] usb 9-1: Product: syz [ 1571.424810][T16636] usb 9-1: Manufacturer: syz [ 1571.424828][T16636] usb 9-1: SerialNumber: syz [ 1571.462989][T16636] usb 9-1: config 0 descriptor?? [ 1571.898288][T16636] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1572.033174][T15286] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 1572.033621][T15286] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 1572.034143][T15286] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 1572.034571][T15286] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 1572.035006][T15286] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 1572.035436][T15286] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 1572.059132][T16636] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.059164][T16636] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1572.062426][T16636] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1572.062456][T16636] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1572.062478][T16636] usb 10-1: SerialNumber: syz [ 1572.134866][T15286] usb 8-1: USB disconnect, device number 46 [ 1572.471168][T16636] usb 10-1: 0:2 : does not exist [ 1572.747225][T15286] usb 9-1: USB disconnect, device number 20 [ 1572.890888][ T3406] hsr_slave_0: left promiscuous mode [ 1572.954355][ T3406] hsr_slave_1: left promiscuous mode [ 1572.955470][ T3406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.955499][ T3406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.017175][ T3406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.017205][ T3406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.051013][T16636] usb 10-1: USB disconnect, device number 7 [ 1573.131857][ T3406] veth1_macvtap: left promiscuous mode [ 1573.132103][ T3406] veth0_macvtap: left promiscuous mode [ 1573.495134][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.885398][ T822] libceph: connect (1)[c::]:6789 error -101 [ 1574.885605][ T822] libceph: mon0 (1)[c::]:6789 connect error [ 1574.889499][T17718] ceph: No mds server is up or the cluster is laggy [ 1577.201450][ T3406] team0 (unregistering): Port device team_slave_1 removed [ 1577.235835][ T3406] team0 (unregistering): Port device team_slave_0 removed [ 1577.247934][T15286] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1577.417941][T15286] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1577.417976][T15286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.417999][T15286] usb 8-1: Product: syz [ 1577.418015][T15286] usb 8-1: Manufacturer: syz [ 1577.418032][T15286] usb 8-1: SerialNumber: syz [ 1578.059017][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1578.165676][T15286] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1578.165739][T15286] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1578.166670][T15286] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1578.215223][T15286] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1578.252687][T15286] usb 8-1: USB disconnect, device number 47 [ 1579.842856][T17780] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1580.872250][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1580.872337][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1581.224963][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1581.225051][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1581.248274][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1582.523379][ T3394] kworker/u8:15 (3394) used greatest stack depth: 14976 bytes left [ 1583.179979][T17491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1583.312883][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.320022][T17491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1583.922789][ T5611] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1584.121605][ T5611] usb 10-1: Using ep0 maxpacket: 16 [ 1584.160056][ T5611] usb 10-1: config index 0 descriptor too short (expected 65316, got 36) [ 1584.160268][ T5611] usb 10-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1584.161409][ T5611] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.161513][ T5611] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1584.277628][ T5611] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1584.277717][ T5611] usb 10-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1584.277781][ T5611] usb 10-1: Product: syz [ 1584.277826][ T5611] usb 10-1: Manufacturer: syz [ 1584.277871][ T5611] usb 10-1: SerialNumber: syz [ 1584.313004][ T5611] usb 10-1: config 0 descriptor?? [ 1585.303210][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1585.421130][T17491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.481987][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1585.491007][T17491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.592036][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1586.830956][T17869] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1587.317095][T14228] usb 10-1: USB disconnect, device number 8 [ 1587.416060][T17491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.533586][T17491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.579884][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.587391][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.661377][T12375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.661518][T12375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.541912][T17903] KVM: debugfs: duplicate directory 17903-4 [ 1588.590534][ T5791] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1588.743393][ T5791] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1588.743427][ T5791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.789846][ T5791] usb 10-1: config 0 descriptor?? [ 1588.825495][ T5791] cp210x 10-1:0.0: cp210x converter detected [ 1589.864766][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.944095][T17877] Bluetooth: hci2: command 0x0406 tx timeout [ 1589.947998][ T5791] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1590.057283][ T5791] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1590.272346][T17491] veth0_vlan: entered promiscuous mode [ 1590.277935][ T5335] usb 10-1: USB disconnect, device number 9 [ 1590.364678][T17491] veth1_vlan: entered promiscuous mode [ 1590.382990][ T5335] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1590.526713][T17491] veth0_macvtap: entered promiscuous mode [ 1590.590160][T17491] veth1_macvtap: entered promiscuous mode [ 1590.660009][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.702311][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.732015][T14149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.732427][T14149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.732471][T14149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.732512][T14149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.902088][ T5335] cp210x 10-1:0.0: device disconnected [ 1591.440942][T17939] ceph: No mds server is up or the cluster is laggy [ 1591.652799][ T822] libceph: connect (1)[c::]:6789 error -101 [ 1591.653034][ T822] libceph: mon0 (1)[c::]:6789 connect error [ 1591.925222][ T822] libceph: connect (1)[c::]:6789 error -101 [ 1591.925436][ T822] libceph: mon0 (1)[c::]:6789 connect error [ 1592.922168][ T5611] libceph: connect (1)[c::]:6789 error -101 [ 1592.922383][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 1593.000587][ T5791] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1593.633901][ T5791] usb 8-1: Using ep0 maxpacket: 16 [ 1593.646042][ T5791] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1593.646174][ T5791] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1593.646239][ T5791] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.646302][ T5791] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1593.856444][ T5791] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1593.856854][ T5791] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1593.857204][ T5791] usb 8-1: Product: syz [ 1593.857605][ T5791] usb 8-1: Manufacturer: syz [ 1593.857950][ T5791] usb 8-1: SerialNumber: syz [ 1594.399231][ T5791] usb 8-1: config 0 descriptor?? [ 1594.650651][T14228] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1594.651426][ T5611] usb 8-1: USB disconnect, device number 48 [ 1595.113717][T14228] usb 9-1: Using ep0 maxpacket: 16 [ 1595.127459][T14228] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1595.127490][T14228] usb 9-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1595.127514][T14228] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.127538][T14228] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1595.130640][T14228] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1595.130671][T14228] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1595.130695][T14228] usb 9-1: Product: syz [ 1595.130711][T14228] usb 9-1: Manufacturer: syz [ 1595.130727][T14228] usb 9-1: SerialNumber: syz [ 1595.170873][T14228] usb 9-1: config 0 descriptor?? [ 1595.406259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.406293][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.671705][ T3406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.671729][ T3406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.400763][T17961] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1596.845777][T17959] usb 9-1: USB disconnect, device number 21 [ 1597.393281][T17978] kvm: kvm [17975]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 1597.625493][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061b50000: rx timeout, send abort [ 1598.129616][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061b50000: abort rx timeout. Force session deactivation [ 1598.130770][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061b50c00: rx timeout, send abort [ 1598.630866][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061b50c00: abort rx timeout. Force session deactivation [ 1598.641531][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803bd43c00: rx timeout, send abort [ 1599.141668][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803bd43c00: abort rx timeout. Force session deactivation [ 1602.130597][ T5734] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1602.310995][ T5734] usb 8-1: Using ep0 maxpacket: 16 [ 1602.315534][ T5734] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1602.315565][ T5734] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1602.315589][ T5734] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.315611][ T5734] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1602.318872][ T5734] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1602.318903][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1602.318927][ T5734] usb 8-1: Product: syz [ 1602.318944][ T5734] usb 8-1: Manufacturer: syz [ 1602.318962][ T5734] usb 8-1: SerialNumber: syz [ 1602.434761][ T5734] usb 8-1: config 0 descriptor?? [ 1602.486221][T18028] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3059'. [ 1603.128962][T18035] ceph: No mds server is up or the cluster is laggy [ 1603.681621][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 1603.681952][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 1603.846502][T17959] usb 8-1: USB disconnect, device number 49 [ 1603.964540][ T5611] libceph: connect (1)[c::]:6789 error -101 [ 1603.964749][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 1605.483013][T14228] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1605.681532][T14228] usb 8-1: Using ep0 maxpacket: 16 [ 1605.701567][T14228] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1605.701666][T14228] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1605.701730][T14228] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.701782][T14228] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1605.847414][T14228] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1605.847504][T14228] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1605.847671][T14228] usb 8-1: Product: syz [ 1605.847764][T14228] usb 8-1: Manufacturer: syz [ 1605.847822][T14228] usb 8-1: SerialNumber: syz [ 1606.019980][T14228] usb 8-1: config 0 descriptor?? [ 1606.160134][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 1606.160164][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 1606.582525][T14228] IPVS: starting estimator thread 0... [ 1606.690702][T18070] IPVS: using max 8 ests per chain, 19200 per kthread [ 1607.180820][T14228] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1607.696559][ T5611] usb 8-1: USB disconnect, device number 50 [ 1608.001325][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.001403][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.682605][T14228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.682643][T14228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.682687][T14228] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1608.682724][T14228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.730696][T14228] usb 10-1: config 0 descriptor?? [ 1610.458223][T14228] hid-led 0003:1D34:000A.001A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.9-1/input0 [ 1610.978149][ T5611] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1611.534456][T18116] ceph: No mds server is up or the cluster is laggy [ 1611.792529][ T822] libceph: connect (1)[c::]:6789 error -101 [ 1611.792736][ T822] libceph: mon0 (1)[c::]:6789 connect error [ 1612.176629][ T5611] usb 9-1: Using ep0 maxpacket: 16 [ 1612.177726][ T5611] usb 9-1: device descriptor read/all, error -71 [ 1612.436821][T14228] hid-led 0003:1D34:000A.001A: Dream Cheeky Webmail Notifier initialized [ 1612.454619][T14228] usb 10-1: USB disconnect, device number 10 [ 1613.497961][T18140] netlink: 'syz.9.3080': attribute type 1 has an invalid length. [ 1614.904183][T18140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1614.953653][T18147] vlan3: entered allmulticast mode [ 1614.953677][T18147] bond1: entered allmulticast mode [ 1615.303238][T18148] bond1: (slave geneve2): making interface the new active one [ 1615.303335][T18148] geneve2: entered allmulticast mode [ 1615.376091][T18148] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1616.033111][T14228] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1616.200553][T14228] usb 9-1: Using ep0 maxpacket: 16 [ 1616.203489][T14228] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1616.203517][T14228] usb 9-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1616.203538][T14228] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.203556][T14228] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1616.256979][T14228] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1616.257013][T14228] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1616.257036][T14228] usb 9-1: Product: syz [ 1616.257053][T14228] usb 9-1: Manufacturer: syz [ 1616.257070][T14228] usb 9-1: SerialNumber: syz [ 1616.329566][T14228] usb 9-1: config 0 descriptor?? [ 1617.741399][ T5734] usb 9-1: USB disconnect, device number 24 [ 1618.688978][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1618.689766][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1621.740514][T16636] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1621.890551][T16636] usb 10-1: Using ep0 maxpacket: 8 [ 1621.893078][T16636] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.893107][T16636] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1621.893132][T16636] usb 10-1: config 0 has no interface number 0 [ 1621.894642][T16636] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1621.894674][T16636] usb 10-1: New USB device strings: Mfr=91, Product=0, SerialNumber=0 [ 1621.894698][T16636] usb 10-1: Manufacturer: syz [ 1621.962211][T16636] usb 10-1: config 0 descriptor?? [ 1621.982819][T16636] hub 10-1:0.4: bad descriptor, ignoring hub [ 1621.982863][T16636] hub 10-1:0.4: probe with driver hub failed with error -5 [ 1621.986314][T16636] sierra 10-1:0.4: Sierra USB modem converter detected [ 1622.673416][T16636] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 1622.714261][T16636] usb 10-1: USB disconnect, device number 11 [ 1622.972223][T16636] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1622.997160][T16636] sierra 10-1:0.4: device disconnected [ 1623.601743][T18259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1623.602433][T18259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1628.230569][T17959] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1628.384503][T17959] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.384541][T17959] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.384567][T17959] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1628.384614][T17959] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.384640][T17959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.512280][T17959] usb 9-1: config 0 descriptor?? [ 1629.028243][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029502][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029540][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029572][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029603][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029634][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029664][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029695][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029725][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.029755][T17959] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1629.138968][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3116'. [ 1629.139661][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3116'. [ 1629.978202][T17959] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1630.028761][T17959] usb 9-1: USB disconnect, device number 25 [ 1630.632095][T18333] fido_id[18333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1631.386524][ T5611] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1632.120538][ T5611] usb 9-1: Using ep0 maxpacket: 8 [ 1632.123571][ T5611] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 1632.123603][ T5611] usb 9-1: config 0 has no interface number 0 [ 1632.123654][ T5611] usb 9-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1632.123684][ T5611] usb 9-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1632.127327][ T5611] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1632.127360][ T5611] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.127383][ T5611] usb 9-1: Product: syz [ 1632.127400][ T5611] usb 9-1: Manufacturer: syz [ 1632.127418][ T5611] usb 9-1: SerialNumber: syz [ 1632.207763][ T5611] usb 9-1: config 0 descriptor?? [ 1632.209228][T18343] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1632.430674][ T5611] ath6kl: Failed to submit usb control message: -71 [ 1632.430728][ T5611] ath6kl: unable to send the bmi data to the device: -71 [ 1632.430745][ T5611] ath6kl: Unable to send get target info: -71 [ 1632.499505][ T5611] ath6kl: Failed to init ath6kl core: -71 [ 1632.503048][ T5611] ath6kl_usb 9-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1632.516045][ T5611] usb 9-1: USB disconnect, device number 26 [ 1632.804348][T18359] fuse: fd is not a fuse device [ 1634.438737][T18367] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1636.870492][ T5791] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1637.026413][ T5791] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1637.026448][ T5791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.066214][ T5791] usb 10-1: config 0 descriptor?? [ 1637.103449][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3131'. [ 1640.447830][T18442] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1640.518600][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3139'. [ 1640.518640][T18446] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3139'. [ 1640.612740][T18446] bridge1: entered promiscuous mode [ 1640.612773][T18446] bridge1: entered allmulticast mode [ 1640.835487][ T5791] usb 10-1: Cannot set autoneg [ 1640.879467][ T5791] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1640.917400][ T5791] usb 10-1: USB disconnect, device number 12 [ 1642.111646][T18467] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3142'. [ 1642.111730][T18467] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3142'. [ 1642.330627][ T5611] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1642.583351][ T5611] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1642.583392][ T5611] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1642.583435][ T5611] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1642.583461][ T5611] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.665990][T18455] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1642.686801][ T5611] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1646.393051][ T5791] usb 8-1: USB disconnect, device number 51 [ 1647.212973][ T36] audit: type=1804 audit(1779545220.658:221): pid=18498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.3148" name="/newroot/60/file0" dev="tmpfs" ino=324 res=1 errno=0 [ 1647.897683][ T36] audit: type=1326 audit(1779545221.368:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.897986][ T36] audit: type=1326 audit(1779545221.368:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.898298][ T36] audit: type=1326 audit(1779545221.368:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.930802][ T36] audit: type=1326 audit(1779545221.368:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.935720][ T36] audit: type=1326 audit(1779545221.408:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.939101][ T36] audit: type=1326 audit(1779545221.408:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.941274][ T36] audit: type=1326 audit(1779545221.408:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.957307][ T36] audit: type=1326 audit(1779545221.418:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1647.957467][ T36] audit: type=1326 audit(1779545221.428:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18512 comm="syz.8.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f99c78bce59 code=0x7ffc0000 [ 1650.930143][T18539] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1651.700606][ T5791] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1651.864595][ T5791] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 1651.864627][ T5791] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.864649][ T5791] usb 9-1: config 2 has no interface number 0 [ 1651.864694][ T5791] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1651.864723][ T5791] usb 9-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1651.864751][ T5791] usb 9-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.869123][ T5791] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1651.869157][ T5791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.869181][ T5791] usb 9-1: Product: syz [ 1651.869198][ T5791] usb 9-1: Manufacturer: syz [ 1651.869215][ T5791] usb 9-1: SerialNumber: syz [ 1651.981436][T18545] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1652.398374][T18559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.399039][T18559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.753589][ T5791] usb 9-1: probing VID:PID(0424:012C) [ 1653.766566][ T5791] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 1653.766654][ T5791] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1653.833282][ T5791] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 1653.872744][ T5791] usb 9-1: USB disconnect, device number 27 [ 1657.031729][T18582] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1657.509314][T18590] mmap: syz.0.3175 (18590): VmData 41709568 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 1657.917572][T18595] sctp: [Deprecated]: syz.9.3177 (pid 18595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1657.917572][T18595] Use struct sctp_sack_info instead [ 1661.337198][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 1661.337233][ T36] audit: type=1326 audit(1779545234.808:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18619 comm="syz.8.3182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99c78bce59 code=0x0 [ 1661.730642][T17959] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1661.881547][T17959] usb 10-1: too many configurations: 36, using maximum allowed: 8 [ 1661.914298][T17959] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1661.914339][T17959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.914362][T17959] usb 10-1: Product: syz [ 1661.914378][T17959] usb 10-1: Manufacturer: syz [ 1661.914394][T17959] usb 10-1: SerialNumber: syz [ 1661.965320][T17959] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1662.045275][T18631] overlayfs: missing 'lowerdir' [ 1662.090106][T18630] overlayfs: failed to clone lowerpath [ 1662.322928][T18637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1662.459453][T15288] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1662.945461][T18622] random: crng reseeded on system resumption [ 1664.169307][ T5611] usb 10-1: USB disconnect, device number 13 [ 1664.194721][T15288] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1664.207497][ C0] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 1664.381320][T15288] ath9k_htc: Failed to initialize the device [ 1664.391812][ T5611] usb 10-1: ath9k_htc: USB layer deinitialized [ 1664.667551][T18653] binder: 18652:18653 ioctl c0306201 200000000080 returned -14 [ 1664.675623][T18653] binder: 18652:18653 ioctl c0306201 2000000003c0 returned -14 [ 1666.241057][T18663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1666.241155][T18663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1667.772140][T16636] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1667.920563][T16636] usb 8-1: Using ep0 maxpacket: 16 [ 1667.922785][T16636] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1667.922807][T16636] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1667.922823][T16636] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.922837][T16636] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1667.927726][T16636] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1667.927758][T16636] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1667.927783][T16636] usb 8-1: Product: syz [ 1667.927795][T16636] usb 8-1: Manufacturer: syz [ 1667.927806][T16636] usb 8-1: SerialNumber: syz [ 1668.053849][T16636] usb 8-1: config 0 descriptor?? [ 1669.367093][T16636] usb 8-1: USB disconnect, device number 52 [ 1669.374615][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.374690][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.760282][T18679] syz.8.3204 (18679): drop_caches: 2 [ 1669.840657][ T5611] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1670.120527][ T5611] usb 10-1: Using ep0 maxpacket: 8 [ 1670.241816][ T5611] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1670.244311][ T5611] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1670.244358][ T5611] usb 10-1: can't read configurations, error -71 [ 1671.541386][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 1671.613050][T18719] fuse: fd is not a fuse device [ 1677.210558][ T7621] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1677.371333][ T7621] usb 8-1: Using ep0 maxpacket: 32 [ 1677.375273][ T7621] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1677.375312][ T7621] usb 8-1: config 0 has no interface number 0 [ 1677.375363][ T7621] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1677.378060][ T7621] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1677.378095][ T7621] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.378122][ T7621] usb 8-1: Product: syz [ 1677.378133][ T7621] usb 8-1: Manufacturer: syz [ 1677.378145][ T7621] usb 8-1: SerialNumber: syz [ 1677.431086][ T7621] usb 8-1: config 0 descriptor?? [ 1677.451674][T18762] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1677.691314][T18762] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1679.528136][ T7621] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1679.528282][ T7621] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1679.528587][ T7621] asix 8-1:0.188: probe with driver asix failed with error -71 [ 1679.617670][ T7621] usb 8-1: USB disconnect, device number 53 [ 1682.364803][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1682.457167][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1682.470060][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1682.490488][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1682.491734][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1683.403040][T18805] lo speed is unknown, defaulting to 1000 [ 1685.102944][ T5609] Bluetooth: hci1: command tx timeout [ 1685.832072][T15288] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1686.000546][T15288] usb 8-1: Using ep0 maxpacket: 16 [ 1686.002663][T15288] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1686.002692][T15288] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1686.002716][T15288] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.002737][T15288] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1686.067123][T15288] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1686.067159][T15288] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1686.067184][T15288] usb 8-1: Product: syz [ 1686.067202][T15288] usb 8-1: Manufacturer: syz [ 1686.067218][T15288] usb 8-1: SerialNumber: syz [ 1686.132099][T15288] usb 8-1: config 0 descriptor?? [ 1686.287242][T18805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.294301][T18805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.295167][T18805] bridge_slave_0: entered allmulticast mode [ 1686.318662][T18805] bridge_slave_0: entered promiscuous mode [ 1686.378166][T18805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.378328][T18805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.378568][T18805] bridge_slave_1: entered allmulticast mode [ 1686.384025][T18805] bridge_slave_1: entered promiscuous mode [ 1686.592395][T18805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.614123][T18805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.708598][T18805] team0: Port device team_slave_0 added [ 1686.720484][T18805] team0: Port device team_slave_1 added [ 1686.840246][T18805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.840265][T18805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.840655][T18805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.885737][T18805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.885755][T18805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.885786][T18805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.173335][T18805] hsr_slave_0: entered promiscuous mode [ 1687.174518][T18805] hsr_slave_1: entered promiscuous mode [ 1687.212045][ T5609] Bluetooth: hci1: command tx timeout [ 1687.481623][ T7621] usb 8-1: USB disconnect, device number 54 [ 1687.826581][ T36] audit: type=1326 audit(1779545261.298:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18865 comm="syz.3.3272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x0 [ 1689.291948][ T5609] Bluetooth: hci1: command tx timeout [ 1689.888370][T18805] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.595438][ T5609] Bluetooth: hci1: command tx timeout [ 1691.761715][T18805] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.586650][T18909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1692.587412][T18909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1693.476572][T18805] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.947767][T18805] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.465447][T18805] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1697.515731][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1697.518499][T18805] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1697.605336][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1697.623683][T18805] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1697.738483][T18955] loop8: detected capacity change from 0 to 524287999 [ 1697.826280][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1697.900768][T18805] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1697.937177][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1698.172971][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1698.643179][T18805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.735920][T18805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.761945][T18971] fuse: Bad value for 'fd' [ 1698.850069][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.850216][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.876502][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.876656][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.047659][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3315'. [ 1702.224417][T18805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.841015][T18805] veth0_vlan: entered promiscuous mode [ 1702.936207][T18805] veth1_vlan: entered promiscuous mode [ 1704.054316][T18805] veth0_macvtap: entered promiscuous mode [ 1704.139002][T18805] veth1_macvtap: entered promiscuous mode [ 1704.173894][T18805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.236349][T18805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.259875][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.284216][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.288104][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.336780][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.617157][T19038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1705.411578][ T1490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.411604][ T1490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.740137][T15237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.740161][T15237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.111977][T14228] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1706.291236][T14228] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.291302][T14228] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1706.291331][T14228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.445757][T14228] usb 8-1: config 0 descriptor?? [ 1706.569428][T14228] pwc: Askey VC010 type 2 USB webcam detected. [ 1706.887183][T14228] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1706.897468][T14228] pwc: recv_control_msg error -32 req 02 val 2700 [ 1706.909207][T14228] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1706.922874][T14228] pwc: recv_control_msg error -32 req 04 val 1000 [ 1706.967988][T14228] pwc: recv_control_msg error -32 req 04 val 1300 [ 1706.969031][T14228] pwc: recv_control_msg error -32 req 04 val 1400 [ 1707.380589][T14228] pwc: recv_control_msg error -71 req 04 val 1500 [ 1707.381116][T14228] pwc: recv_control_msg error -71 req 02 val 2500 [ 1707.383496][T14228] pwc: recv_control_msg error -71 req 02 val 2400 [ 1707.383994][T14228] pwc: recv_control_msg error -71 req 02 val 2600 [ 1707.385856][T14228] pwc: recv_control_msg error -71 req 02 val 2900 [ 1707.386276][T14228] pwc: recv_control_msg error -71 req 02 val 2800 [ 1707.388254][T14228] pwc: recv_control_msg error -71 req 04 val 1100 [ 1707.388842][T14228] pwc: recv_control_msg error -71 req 04 val 1200 [ 1707.464597][T14228] pwc: Registered as video103. [ 1707.467765][T14228] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input31 [ 1707.519926][T14228] usb 8-1: USB disconnect, device number 55 [ 1707.807175][T19076] serio: Serial port ptm0 [ 1708.227639][T19081] fuse: fd is not a fuse device [ 1708.359994][T19083] binder: 19082:19083 ioctl c0306201 0 returned -14 [ 1712.222583][T19134] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3367'. [ 1714.350508][T15288] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1714.506086][T15288] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1714.506120][T15288] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.506145][T15288] usb 9-1: Product: syz [ 1714.506163][T15288] usb 9-1: Manufacturer: syz [ 1714.506180][T15288] usb 9-1: SerialNumber: syz [ 1714.559846][T15288] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1714.719350][ T7621] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1714.817412][T19162] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3374'. [ 1714.817505][T19162] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3374'. [ 1715.303728][ T5733] usb 9-1: USB disconnect, device number 28 [ 1715.354341][ T7621] usb 9-1: ath9k_htc: Unable to allocate URBs [ 1715.355002][ T5733] usb 9-1: ath9k_htc: USB layer deinitialized [ 1716.047280][T19176] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3382'. [ 1718.325796][T19197] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3388'. [ 1718.325836][T19197] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3388'. [ 1718.681411][T19200] binder: 19198:19200 ioctl c0306201 200000001440 returned -14 [ 1720.163576][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1720.164089][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1723.048784][T19254] fuse: fd is not a fuse device [ 1723.462940][T19263] binder: 19261:19263 ioctl c0306201 200000000b40 returned -14 [ 1724.616106][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3417'. [ 1724.616204][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3417'. [ 1725.520520][T14228] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1725.681389][T14228] usb 8-1: Using ep0 maxpacket: 16 [ 1725.683466][T14228] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1725.683496][T14228] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1725.683520][T14228] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.683543][T14228] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1725.686112][T14228] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1725.686142][T14228] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1725.686167][T14228] usb 8-1: Product: syz [ 1725.686185][T14228] usb 8-1: Manufacturer: syz [ 1725.686202][T14228] usb 8-1: SerialNumber: syz [ 1725.693928][T14228] usb 8-1: config 0 descriptor?? [ 1727.083604][ T822] usb 8-1: USB disconnect, device number 56 [ 1727.252575][T19292] siw: device registration error -23 [ 1727.590518][ T822] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1727.740482][ T822] usb 9-1: Using ep0 maxpacket: 16 [ 1727.744939][ T822] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.744978][ T822] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.745010][ T822] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1727.745146][ T822] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1727.745173][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.804084][ T822] usb 9-1: config 0 descriptor?? [ 1728.222303][ T822] usbhid 9-1:0.0: can't add hid device: -71 [ 1728.222447][ T822] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1728.266905][ T822] usb 9-1: USB disconnect, device number 29 [ 1729.933483][T19329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1730.820738][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.820815][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.598326][ T822] IPVS: starting estimator thread 0... [ 1733.609294][T19359] IPVS: using max 7 ests per chain, 16800 per kthread [ 1733.780546][ T5734] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1733.878814][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3458'. [ 1733.933819][ T5734] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 1733.933847][ T5734] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.933868][ T5734] usb 9-1: config 2 has no interface number 0 [ 1733.933905][ T5734] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1733.933933][ T5734] usb 9-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1733.933957][ T5734] usb 9-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1733.940103][ T5734] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1733.940138][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.940161][ T5734] usb 9-1: Product: syz [ 1733.940179][ T5734] usb 9-1: Manufacturer: syz [ 1733.940195][ T5734] usb 9-1: SerialNumber: syz [ 1734.060500][T19364] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1734.457628][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.470225][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.840965][ T5734] usb 9-1: probing VID:PID(0424:012C) [ 1735.861428][ T5734] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 1735.861458][ T5734] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1735.913534][ T5734] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 1735.920050][ T5734] usb 9-1: USB disconnect, device number 30 [ 1739.823906][T19416] netlink: 'syz.8.3468': attribute type 1 has an invalid length. [ 1742.280600][ T7621] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1743.624662][ T7621] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 1743.624689][ T7621] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.624705][ T7621] usb 9-1: config 2 has no interface number 0 [ 1743.624746][ T7621] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1743.624771][ T7621] usb 9-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1743.624793][ T7621] usb 9-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1743.681850][ T7621] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1743.681975][ T7621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.682032][ T7621] usb 9-1: Product: syz [ 1743.682082][ T7621] usb 9-1: Manufacturer: syz [ 1743.682112][ T7621] usb 9-1: SerialNumber: syz [ 1743.745266][T19434] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1744.137697][T19448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.138410][T19448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.142990][T19454] fuse: fd is not a fuse device [ 1745.232353][ T7621] usb 9-1: probing VID:PID(0424:012C) [ 1745.252598][ T7621] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 1745.252627][ T7621] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1745.317294][ T7621] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 1745.357716][ T7621] usb 9-1: USB disconnect, device number 31 [ 1745.372819][ T5864] udevd[5864]: setting owner of /dev/bus/usb/009/031 to uid=0, gid=0 failed: No such file or directory [ 1745.542300][T19460] overlayfs: failed to clone upperpath [ 1745.639799][T19464] fuse: fd is not a fuse device [ 1747.535346][T12199] IPVS: starting estimator thread 0... [ 1747.640784][T19490] IPVS: using max 7 ests per chain, 16800 per kthread [ 1749.446970][T19507] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1751.333121][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3515'. [ 1753.436501][T19544] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3520'. [ 1754.200628][T19548] fuse: fd is not a fuse device [ 1755.161984][ T5734] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1755.183359][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3531'. [ 1755.183381][T19569] netlink: 'syz.9.3531': attribute type 3 has an invalid length. [ 1755.183395][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3531'. [ 1755.184391][T19569] netlink: 'syz.9.3531': attribute type 3 has an invalid length. [ 1755.313739][ T5734] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 1755.313772][ T5734] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.313795][ T5734] usb 9-1: config 2 has no interface number 0 [ 1755.313843][ T5734] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1755.313872][ T5734] usb 9-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1755.313899][ T5734] usb 9-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1755.318412][ T5734] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1755.318445][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.318470][ T5734] usb 9-1: Product: syz [ 1755.318486][ T5734] usb 9-1: Manufacturer: syz [ 1755.318503][ T5734] usb 9-1: SerialNumber: syz [ 1755.427829][T19561] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1757.437608][T19561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.438200][T19561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.660521][T12199] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1757.811170][T12199] usb 8-1: Using ep0 maxpacket: 16 [ 1757.814127][T12199] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 1757.814148][T12199] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1757.814164][T12199] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.814179][T12199] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1757.822240][T12199] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1757.824986][T12199] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1757.826831][T12199] usb 8-1: Product: syz [ 1757.829348][T12199] usb 8-1: Manufacturer: syz [ 1757.832663][T12199] usb 8-1: SerialNumber: syz [ 1757.941585][T12199] usb 8-1: config 0 descriptor?? [ 1757.960593][ T5734] usb 9-1: probing VID:PID(0424:012C) [ 1758.044321][ T5734] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 1758.044351][ T5734] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1758.102818][ T5734] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 1758.144501][ T5734] usb 9-1: USB disconnect, device number 32 [ 1759.648439][T15288] usb 8-1: USB disconnect, device number 57 [ 1760.313301][T19609] fuse: fd is not a fuse device [ 1760.636354][T19613] fuse: fd is not a fuse device [ 1760.964800][T19621] overlayfs: failed to clone lowerpath [ 1760.995717][T19621] overlayfs: failed to clone lowerpath [ 1761.580562][T12199] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1761.734549][T12199] usb 8-1: config 2 has an invalid interface number: 174 but max is 0 [ 1761.734581][T12199] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.734603][T12199] usb 8-1: config 2 has no interface number 0 [ 1761.734651][T12199] usb 8-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1761.734681][T12199] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1761.734709][T12199] usb 8-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.738463][T12199] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1761.738496][T12199] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.738519][T12199] usb 8-1: Product: syz [ 1761.738536][T12199] usb 8-1: Manufacturer: syz [ 1761.738553][T12199] usb 8-1: SerialNumber: syz [ 1761.841760][T19625] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1763.181317][T19625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.182035][T19625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.424449][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1763.649923][T19650] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3559'. [ 1764.327887][T12199] usb 8-1: probing VID:PID(0424:012C) [ 1764.332197][T12199] usb 8-1: vub300 testing BULK IN EndPoint(0) 8E [ 1764.332227][T12199] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1764.500919][T12199] vub300 8-1:2.174: probe with driver vub300 failed with error -22 [ 1764.520789][T12199] usb 8-1: USB disconnect, device number 58 [ 1771.429073][T19722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3585'. [ 1776.580638][ T5733] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1776.733509][ T5733] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 1776.733541][ T5733] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.733562][ T5733] usb 9-1: config 2 has no interface number 0 [ 1776.733607][ T5733] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1776.733644][ T5733] usb 9-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1776.733670][ T5733] usb 9-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.737332][ T5733] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1776.737373][ T5733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.737388][ T5733] usb 9-1: Product: syz [ 1776.737400][ T5733] usb 9-1: Manufacturer: syz [ 1776.737411][ T5733] usb 9-1: SerialNumber: syz [ 1776.862798][T19749] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1778.532129][T19749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.532843][T19749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.970878][ T36] audit: type=1326 audit(1779545352.438:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.973278][ T36] audit: type=1326 audit(1779545352.448:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.974483][ T36] audit: type=1326 audit(1779545352.448:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.974928][ T36] audit: type=1326 audit(1779545352.448:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.975420][ T36] audit: type=1326 audit(1779545352.448:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.975961][ T36] audit: type=1326 audit(1779545352.448:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.976793][ T36] audit: type=1326 audit(1779545352.448:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.977563][ T36] audit: type=1326 audit(1779545352.448:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1778.978450][ T36] audit: type=1326 audit(1779545352.448:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.3.3586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fac5b96ce59 code=0x7ffc0000 [ 1779.335608][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3600'. [ 1780.186888][ T5733] usb 9-1: probing VID:PID(0424:012C) [ 1780.191323][ T5733] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 1780.191404][ T5733] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1780.259766][ T5733] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 1780.306059][ T5733] usb 9-1: USB disconnect, device number 33 [ 1783.390204][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1784.595922][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3606'. [ 1785.860432][T19810] bridge1: port 1(veth3) entered blocking state [ 1785.860591][T19810] bridge1: port 1(veth3) entered disabled state [ 1785.860893][T19810] veth3: entered allmulticast mode [ 1785.891241][T19810] veth3: entered promiscuous mode [ 1786.758865][T19807] bridge1: port 2(veth0_to_bond) entered blocking state [ 1786.759011][T19807] bridge1: port 2(veth0_to_bond) entered disabled state [ 1786.759291][T19807] veth0_to_bond: entered allmulticast mode [ 1786.797231][T19807] veth0_to_bond: entered promiscuous mode [ 1786.808286][T19807] bridge1: port 2(veth0_to_bond) entered blocking state [ 1786.808454][T19807] bridge1: port 2(veth0_to_bond) entered forwarding state [ 1792.254118][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.254193][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.828492][T19856] netlink: 67 bytes leftover after parsing attributes in process `syz.9.3632'. [ 1794.700517][T19479] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1794.856867][T19479] usb 8-1: Using ep0 maxpacket: 8 [ 1794.860143][T19479] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1794.860207][T19479] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1794.860236][T19479] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1794.909574][T19479] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1794.909611][T19479] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1794.909664][T19479] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1794.909698][T19479] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.276801][T19479] usb 8-1: usb_control_msg returned -32 [ 1796.276856][T19479] usbtmc 8-1:16.0: can't read capabilities [ 1796.523203][T14228] usb 8-1: USB disconnect, device number 59 [ 1811.302919][ T36] audit: type=1800 audit(1779545384.728:276): pid=19994 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3682" name="bus" dev="tmpfs" ino=300 res=0 errno=0 [ 1811.829067][T20006] tipc: Enabling of bearer rejected, failed to enable media [ 1814.673624][ T7621] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1814.845238][ T7621] usb 8-1: config 2 has an invalid interface number: 174 but max is 0 [ 1814.845272][ T7621] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.845295][ T7621] usb 8-1: config 2 has no interface number 0 [ 1814.845343][ T7621] usb 8-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1814.845373][ T7621] usb 8-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 1814.845401][ T7621] usb 8-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.910363][ T7621] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1814.910396][ T7621] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.910420][ T7621] usb 8-1: Product: syz [ 1814.910436][ T7621] usb 8-1: Manufacturer: syz [ 1814.910453][ T7621] usb 8-1: SerialNumber: syz [ 1814.965945][T20032] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1816.246412][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.247068][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.793660][ T7621] usb 8-1: probing VID:PID(0424:012C) [ 1820.056045][ T7621] usb 8-1: vub300 testing BULK IN EndPoint(0) 8E [ 1820.056179][ T7621] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1820.712907][ T7621] vub300 8-1:2.174: probe with driver vub300 failed with error -22 [ 1820.766995][ T7621] usb 8-1: USB disconnect, device number 60 [ 1827.451599][ T5733] ------------[ cut here ]------------ [ 1827.451616][ T5733] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1827.451644][ T5733] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:5/5733 [ 1827.451823][ T5733] Modules linked in: [ 1827.451857][ T5733] CPU: 1 UID: 0 PID: 5733 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1827.451889][ T5733] Tainted: [L]=SOFTLOCKUP [ 1827.451898][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1827.451915][ T5733] Workqueue: events drm_fb_helper_damage_work [ 1827.451981][ T5733] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1827.452012][ T5733] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 1a 51 d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1827.452033][ T5733] RSP: 0018:ffffc900057df8c0 EFLAGS: 00010246 [ 1827.452054][ T5733] RAX: 1ffff11004c0e000 RBX: ffffffff8f9418e0 RCX: 0000000000000000 [ 1827.452073][ T5733] RDX: ffffffff8bc05680 RSI: ffffffff8bc21da0 RDI: ffffffff8f9418e0 [ 1827.452092][ T5733] RBP: ffffc900057df9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1827.452108][ T5733] R10: dffffc0000000000 R11: fffffbfff1f121bf R12: ffffffff8bc21da0 [ 1827.452127][ T5733] R13: ffff888026070000 R14: 0000000000000000 R15: ffffffff8bc05680 [ 1827.452146][ T5733] FS: 0000000000000000(0000) GS:ffff888126270000(0000) knlGS:0000000000000000 [ 1827.452165][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1827.452183][ T5733] CR2: 00007f02239227d0 CR3: 000000004285c000 CR4: 00000000003526f0 [ 1827.452205][ T5733] DR0: fffffffffffffff9 DR1: ffffffffff7fff00 DR2: 0000000000000008 [ 1827.452223][ T5733] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1827.452239][ T5733] Call Trace: [ 1827.452251][ T5733] [ 1827.452270][ T5733] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1827.452299][ T5733] ? rt_spin_unlock+0x14f/0x200 [ 1827.452363][ T5733] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1827.452460][ T5733] ? rt_spin_unlock+0x160/0x200 [ 1827.452492][ T5733] ? drm_vblank_get+0x147/0x260 [ 1827.452525][ T5733] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1827.452578][ T5733] drm_fb_helper_damage_work+0x131/0x6f0 [ 1827.452612][ T5733] ? process_scheduled_works+0xa70/0x1860 [ 1827.452662][ T5733] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1827.452705][ T5733] ? process_scheduled_works+0xa70/0x1860 [ 1827.452732][ T5733] ? process_scheduled_works+0xa70/0x1860 [ 1827.452761][ T5733] process_scheduled_works+0xb5d/0x1860 [ 1827.452827][ T5733] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.452863][ T5733] ? assign_work+0x3d5/0x5e0 [ 1827.452897][ T5733] worker_thread+0xa53/0xfc0 [ 1827.452960][ T5733] kthread+0x388/0x470 [ 1827.453037][ T5733] ? __pfx_worker_thread+0x10/0x10 [ 1827.453063][ T5733] ? __pfx_kthread+0x10/0x10 [ 1827.453099][ T5733] ret_from_fork+0x514/0xb70 [ 1827.453157][ T5733] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.453186][ T5733] ? __switch_to+0xc79/0x1410 [ 1827.453228][ T5733] ? __pfx_kthread+0x10/0x10 [ 1827.453263][ T5733] ret_from_fork_asm+0x1a/0x30 [ 1827.453327][ T5733] [ 1827.453340][ T5733] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1827.453364][ T5733] CPU: 1 UID: 0 PID: 5733 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1827.453395][ T5733] Tainted: [L]=SOFTLOCKUP [ 1827.453405][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1827.453420][ T5733] Workqueue: events drm_fb_helper_damage_work [ 1827.453449][ T5733] Call Trace: [ 1827.453460][ T5733] [ 1827.453470][ T5733] vpanic+0x56c/0xa60 [ 1827.453512][ T5733] ? __pfx__printk+0x10/0x10 [ 1827.453549][ T5733] ? __pfx_vpanic+0x10/0x10 [ 1827.453583][ T5733] ? is_bpf_text_address+0x292/0x2b0 [ 1827.453681][ T5733] ? is_bpf_text_address+0x26/0x2b0 [ 1827.453725][ T5733] panic+0xc5/0xd0 [ 1827.453753][ T5733] ? __pfx_panic+0x10/0x10 [ 1827.453795][ T5733] ? ret_from_fork_asm+0x1a/0x30 [ 1827.453833][ T5733] __warn+0x315/0x4c0 [ 1827.453862][ T5733] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1827.453894][ T5733] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1827.453925][ T5733] __report_bug+0x29a/0x540 [ 1827.454019][ T5733] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1827.454049][ T5733] ? __pfx___report_bug+0x10/0x10 [ 1827.454105][ T5733] report_bug_entry+0x19a/0x290 [ 1827.454139][ T5733] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1827.454166][ T5733] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1827.454194][ T5733] handle_bug+0xce/0x200 [ 1827.454262][ T5733] exc_invalid_op+0x1a/0x50 [ 1827.454285][ T5733] asm_exc_invalid_op+0x1a/0x20 [ 1827.454330][ T5733] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1827.454360][ T5733] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 1a 51 d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1827.454380][ T5733] RSP: 0018:ffffc900057df8c0 EFLAGS: 00010246 [ 1827.454399][ T5733] RAX: 1ffff11004c0e000 RBX: ffffffff8f9418e0 RCX: 0000000000000000 [ 1827.454417][ T5733] RDX: ffffffff8bc05680 RSI: ffffffff8bc21da0 RDI: ffffffff8f9418e0 [ 1827.454435][ T5733] RBP: ffffc900057df9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1827.454451][ T5733] R10: dffffc0000000000 R11: fffffbfff1f121bf R12: ffffffff8bc21da0 [ 1827.454470][ T5733] R13: ffff888026070000 R14: 0000000000000000 R15: ffffffff8bc05680 [ 1827.454512][ T5733] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1827.454570][ T5733] ? rt_spin_unlock+0x14f/0x200 [ 1827.454612][ T5733] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1827.454645][ T5733] ? rt_spin_unlock+0x160/0x200 [ 1827.454675][ T5733] ? drm_vblank_get+0x147/0x260 [ 1827.454706][ T5733] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1827.454748][ T5733] drm_fb_helper_damage_work+0x131/0x6f0 [ 1827.454781][ T5733] ? process_scheduled_works+0xa70/0x1860 [ 1827.454812][ T5733] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1827.454868][ T5733] ? process_scheduled_works+0xa70/0x1860 [ 1827.454894][ T5733] ? process_scheduled_works+0xa70/0x1860 [ 1827.454924][ T5733] process_scheduled_works+0xb5d/0x1860 [ 1827.454990][ T5733] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.455026][ T5733] ? assign_work+0x3d5/0x5e0 [ 1827.455059][ T5733] worker_thread+0xa53/0xfc0 [ 1827.455121][ T5733] kthread+0x388/0x470 [ 1827.455155][ T5733] ? __pfx_worker_thread+0x10/0x10 [ 1827.455180][ T5733] ? __pfx_kthread+0x10/0x10 [ 1827.455216][ T5733] ret_from_fork+0x514/0xb70 [ 1827.455248][ T5733] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.455277][ T5733] ? __switch_to+0xc79/0x1410 [ 1827.455318][ T5733] ? __pfx_kthread+0x10/0x10 [ 1827.455354][ T5733] ret_from_fork_asm+0x1a/0x30 [ 1827.455406][ T5733] [ 1827.456293][ T5733] Kernel Offset: disabled